Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
File: Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft (raw, json)
Hash identifier: 4Mbos3mbNqc0rbvsSCElZREO3jaK6XvP7sgyH1GUAh0=
Subject key identifier: F7:1C:C4:9F:FB:35:18:02:73:9C:CD:70:34:D3:CB:33:1C:98:94:58
Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
Certificate issuer: /CN=61e6ea83926bc478c785471d805a5c1210a8c993
Certificate serial: 01A06F4C97B4BA017CB87DCF17CEA3B645C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
Manifest number: 1A43
Signing time: Sat 05 Sep 2026 02:01:25 +0000
Manifest this update: Sat 05 Sep 2026 02:01:25 +0000
Manifest next update: Sun 06 Sep 2026 02:01:25 +0000
Files and hashes: 1: 2dU_Wx7maoKES4uWBmISrFThyIU.roa (hash: ffH0TAg9XSxzOXt+6AV+6sDEvW+c8igbg9XX2e6NJUY=)
2: HZb22Oio0r0dOkO7Ylc22UNpmkI.roa (hash: 4bxPJ8gmL9NMrQNM+ipouVsdrPbO9cdpsR6HkCC+6eM=)
3: Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl (hash: Nq/it0mI943C8zzBgCjEGDdYXpJDsyVe5QPjUiL5v6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:4c:97:b4:ba:01:7c:b8:7d:cf:17:ce:a3:b6:45:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993
Validity
Not Before: Sep 5 02:01:25 2026 GMT
Not After : Sep 6 02:01:25 2026 GMT
Subject: CN=f71cc49ffb351802739ccd7034d3cb331c989458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8d:f5:2f:be:10:27:7d:da:0d:1d:9f:8a:ea:
2a:ac:79:18:ef:3a:b5:41:67:c7:03:c9:8c:89:80:
26:5a:c8:0a:62:41:e2:1a:8f:a5:f4:48:e0:71:f7:
a2:b7:56:5c:47:f7:9d:0c:ef:f1:90:07:e4:3c:2e:
11:ef:30:92:e6:51:96:4d:fd:5c:8d:dd:92:da:f1:
30:f8:c8:0d:41:5f:8d:e3:7a:1b:78:3c:ec:52:38:
1a:41:2f:78:2e:e3:d2:df:51:61:e0:20:1d:ff:11:
e9:13:5b:62:0b:10:15:4e:27:c3:02:ac:f1:26:3e:
40:5f:1a:08:d1:2d:b5:1c:49:d2:6d:3a:48:40:76:
ac:f8:2e:b9:3d:25:31:53:eb:17:98:d1:74:0d:48:
46:49:2c:b7:83:16:d4:f1:cc:d0:20:03:3f:94:13:
d0:42:8f:90:1a:6c:a1:94:36:72:87:19:78:0b:e4:
10:35:58:e6:36:b2:77:66:ff:20:20:1c:a9:e0:d6:
ec:7d:ab:86:fb:fd:74:78:6d:d2:21:b7:33:f5:9f:
43:08:25:bc:4b:c6:67:b1:7d:e9:75:7a:b5:86:71:
7f:1d:1c:38:30:19:5e:6c:46:af:0f:c7:97:6b:f2:
d1:2f:39:a4:02:4f:04:7d:32:c8:b6:9d:75:79:46:
04:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1C:C4:9F:FB:35:18:02:73:9C:CD:70:34:D3:CB:33:1C:98:94:58
X509v3 Authority Key Identifier:
keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:05:6e:94:d8:28:07:43:16:a9:f8:6d:4b:ba:3f:b0:eb:cd:
53:6a:74:45:80:80:da:39:a8:2e:81:7b:e9:2d:50:6c:6c:2f:
da:1b:db:e3:ab:e8:06:74:73:de:99:cb:59:b1:27:c5:00:e8:
2e:dc:24:16:49:61:46:83:d8:58:e9:d2:e2:43:8e:56:91:d7:
44:53:cd:bb:ef:af:1a:57:ef:af:02:97:41:79:14:5e:35:c8:
c9:37:5b:7c:ff:04:12:ce:e9:d3:32:cb:41:6c:fd:c6:b3:40:
4a:3f:e5:b3:0c:b1:1b:3b:a5:b0:76:3f:7b:40:61:69:f6:1f:
45:5e:4b:8d:55:f5:04:7d:6f:62:f0:ed:85:17:3d:a5:01:51:
3c:71:ab:d7:41:af:bc:18:82:4e:5a:c3:e5:93:6e:f2:64:78:
ae:66:45:b8:49:6d:40:74:6a:5d:d4:9b:3e:9b:30:c3:cc:05:
cf:dd:f1:c5:66:62:b4:1f:f4:b9:41:c8:56:60:3b:3e:7c:00:
a1:21:82:94:64:81:33:84:b0:20:a7:3c:79:4c:d6:ce:f1:59:
22:15:b9:ab:0f:b5:25:32:b9:ec:60:95:be:9c:1d:91:64:ec:
e9:ad:86:8a:dc:09:d9:1a:d3:3e:45:03:87:d2:a8:eb:87:53:
97:e8:cc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:28:53 2026 by rpki-client