Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
File: YBtLoTPyON1qs-CprIh1yNgL9rc.mft (raw, json)
Hash identifier: UI82ERb5Qx2l+fdf2n0BueyH0epDNPyDPHXcJN9GcyU=
Subject key identifier: 91:75:57:6E:75:DA:23:37:F2:C2:71:FE:F3:8B:65:D3:18:B8:C9:C8
Authority key identifier: 60:1B:4B:A1:33:F2:38:DD:6A:B3:E0:A9:AC:88:75:C8:D8:0B:F6:B7
Certificate issuer: /CN=601b4ba133f238dd6ab3e0a9ac8875c8d80bf6b7
Certificate serial: 01A1280CDEF540AF02273906A8DCC52FD2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBtLoTPyON1qs-CprIh1yNgL9rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
Manifest number: 01D9
Signing time: Sat 10 Oct 2026 23:01:34 +0000
Manifest this update: Sat 10 Oct 2026 23:01:34 +0000
Manifest next update: Sun 11 Oct 2026 23:01:34 +0000
Files and hashes: 1: WwDOvongC1_X8P9dsP5SDAx3pIw.roa (hash: OvjUCdki/Xpiry32DFBQzx/CWIybLt/kwDkvEQjTH6I=)
2: YBtLoTPyON1qs-CprIh1yNgL9rc.crl (hash: EGIKKittFkn4/yUQyK1yBbGclPxWPcLxGfatRU2G+4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBtLoTPyON1qs-CprIh1yNgL9rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:0c:de:f5:40:af:02:27:39:06:a8:dc:c5:2f:d2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601b4ba133f238dd6ab3e0a9ac8875c8d80bf6b7
Validity
Not Before: Oct 10 23:01:34 2026 GMT
Not After : Oct 11 23:01:34 2026 GMT
Subject: CN=9175576e75da2337f2c271fef38b65d318b8c9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dd:c8:ec:ea:f3:0d:fa:75:7a:56:07:7d:30:
ce:2b:fd:f2:60:43:6a:28:0e:80:99:02:07:d9:d7:
60:3a:fa:82:48:01:4b:2c:73:ae:d5:1d:f3:db:bc:
3b:fb:b1:98:47:03:ab:6e:21:e6:44:f1:ad:a8:61:
df:be:6b:41:15:99:7d:ff:3c:ac:a3:23:dd:1f:66:
a9:94:74:c0:8f:96:76:31:ec:41:b7:02:60:0a:43:
ec:5e:1c:97:1b:0b:5b:a1:fa:ba:f5:08:ff:ba:79:
f0:8a:12:7e:4e:10:8f:f7:9f:82:c4:66:e8:85:30:
c2:04:22:7a:76:d5:6b:1b:c4:fd:fc:4f:07:b5:e8:
85:1c:81:18:1a:1f:59:86:03:2b:1c:98:f0:a6:54:
7c:5f:22:eb:4f:66:7f:13:eb:ba:a7:7d:15:86:15:
76:b6:fa:b5:d3:ec:15:fd:b8:61:a0:9c:78:98:e5:
cb:73:d1:54:4a:5b:ff:24:5f:10:4a:3e:93:e0:12:
d3:ad:79:b9:aa:1d:62:3c:b1:78:40:8f:32:c4:b0:
10:6a:66:d7:40:9b:63:7d:89:32:f7:36:fe:a1:f5:
48:c3:9e:7f:61:4a:6a:32:aa:d2:fd:f1:1d:ba:4c:
28:03:95:b7:06:83:e4:28:22:10:46:0e:98:fa:46:
06:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:75:57:6E:75:DA:23:37:F2:C2:71:FE:F3:8B:65:D3:18:B8:C9:C8
X509v3 Authority Key Identifier:
keyid:60:1B:4B:A1:33:F2:38:DD:6A:B3:E0:A9:AC:88:75:C8:D8:0B:F6:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBtLoTPyON1qs-CprIh1yNgL9rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:73:ea:59:c0:69:49:72:a0:d1:6a:6e:87:5f:b3:1b:ff:2b:
56:60:88:35:62:37:29:88:74:58:9b:94:f8:fd:59:bd:4e:68:
f2:0f:36:06:f8:54:3f:c9:08:6f:e4:de:dc:e5:d2:f6:c2:51:
dd:31:bb:56:59:7b:d4:5a:ca:ce:69:9f:25:fd:f7:0b:69:0b:
34:0a:b4:0d:ac:a0:eb:cb:42:9f:63:02:d0:50:e8:37:33:4f:
a2:39:70:37:a9:e0:43:a4:72:14:cf:35:6c:82:e2:81:a1:64:
63:ef:02:51:04:86:5d:1b:d1:19:f3:38:f1:29:34:a4:c3:e4:
88:7c:c2:c4:30:97:8c:02:7d:5d:3d:58:f4:4e:7c:fe:05:aa:
e0:5b:51:e0:a4:63:d1:6e:93:56:53:34:10:e4:85:d8:94:ef:
78:a7:3e:62:43:69:6d:c5:dd:fa:d1:47:a7:7c:36:78:71:62:
a0:8e:c9:b8:b1:d0:75:0e:1e:87:a4:58:1d:0c:fc:88:26:14:
c5:32:e8:c4:fd:07:7c:d0:8f:93:d2:18:3e:53:4e:86:cc:ca:
2c:26:f7:d6:48:cc:f4:66:f2:d5:c3:5f:36:b1:92:32:af:0d:
ca:c3:3c:1f:78:be:c6:47:b7:7c:e4:d2:16:b2:cb:4f:03:03:
f6:29:d2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:23:32 2026 by rpki-client