Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
File: ylF4miMTWsImjCKihWAKX5sFN3A.mft (raw, json)
Hash identifier: k/59DVK9IR5R4Spu+58TicWw1ZtcZM+b5sIYGaplfho=
Subject key identifier: 97:68:C6:0D:81:50:8B:CC:EF:7D:43:AC:8B:07:B6:8F:7C:AD:46:53
Authority key identifier: CA:51:78:9A:23:13:5A:C2:26:8C:22:A2:85:60:0A:5F:9B:05:37:70
Certificate issuer: /CN=ca51789a23135ac2268c22a285600a5f9b053770
Certificate serial: 01A06F1517DF6DE728809E8C73A2E8188E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
Manifest number: 15A1
Signing time: Sat 05 Sep 2026 01:00:48 +0000
Manifest this update: Sat 05 Sep 2026 01:00:48 +0000
Manifest next update: Sun 06 Sep 2026 01:00:48 +0000
Files and hashes: 1: sr2F0zsExdSQr-zgnrk17i9FhUg.roa (hash: hKUfnAYzGISD3itupUfCkChJsvs636FejLl9Oqr8aQA=)
2: ylF4miMTWsImjCKihWAKX5sFN3A.crl (hash: XZJ9JMLCgnIwr3ru+A3APAq7YELIljYT393nrGNBTxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:15:17:df:6d:e7:28:80:9e:8c:73:a2:e8:18:8e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca51789a23135ac2268c22a285600a5f9b053770
Validity
Not Before: Sep 5 01:00:48 2026 GMT
Not After : Sep 6 01:00:48 2026 GMT
Subject: CN=9768c60d81508bccef7d43ac8b07b68f7cad4653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:e9:1f:1c:0d:8d:d6:18:6b:3e:ef:b6:6a:
d8:56:0a:8a:49:e3:a9:90:be:a2:02:84:06:76:d1:
c2:92:ae:ab:9e:61:8f:5d:50:e8:2d:f7:d1:31:84:
7f:df:4c:b4:1a:74:3d:ae:87:e4:8c:87:9a:0e:c9:
59:6c:de:31:ae:9d:35:fe:89:93:dd:c3:22:3e:52:
cb:9f:4f:f3:03:44:4e:2a:ac:dc:98:f0:da:27:3c:
c7:6f:0b:f6:e1:63:fc:d6:01:97:20:a6:87:e5:ae:
d7:85:7a:cf:38:71:5b:a4:5f:1e:1f:b9:62:6f:8c:
97:f2:a0:14:7e:58:31:e1:67:56:83:38:51:61:dc:
7e:e3:00:b5:b0:fb:0c:6b:22:a5:90:8f:5d:8a:5a:
a1:fa:5e:88:4b:0f:43:5f:ff:3e:5b:bc:ba:2c:46:
1d:ee:e2:ca:e9:3c:4c:fa:29:3a:89:e6:f6:14:e0:
c4:1a:f7:8d:83:f2:1d:55:12:32:48:94:b7:5d:b2:
2e:42:8b:08:94:58:33:d8:20:8b:96:1a:e9:9a:f8:
28:f8:71:a2:99:c0:b7:16:92:63:af:52:20:41:8e:
c6:13:f4:4b:39:5b:09:cd:06:0f:25:08:c6:24:9b:
c8:5b:a2:76:f4:25:c4:a0:7d:19:1f:a5:d7:e4:19:
87:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:68:C6:0D:81:50:8B:CC:EF:7D:43:AC:8B:07:B6:8F:7C:AD:46:53
X509v3 Authority Key Identifier:
keyid:CA:51:78:9A:23:13:5A:C2:26:8C:22:A2:85:60:0A:5F:9B:05:37:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:78:35:72:43:09:5b:45:19:ac:bc:e9:43:68:17:47:b2:c9:
6b:0b:3a:1c:23:2b:46:04:c9:2c:d7:a2:e0:63:d7:75:c6:7b:
04:cd:d4:f2:39:78:b0:dc:3a:2e:a6:f9:df:a3:d1:60:60:b0:
ff:02:4b:bb:3e:21:fa:9d:03:d2:2c:03:be:67:fb:84:f6:c4:
05:9e:32:67:1a:d8:da:9a:15:0c:9a:9f:58:fc:4e:2f:14:d2:
2e:98:39:8e:f0:32:c7:e6:86:f1:af:af:85:f8:92:05:f9:90:
2d:e4:d8:ac:da:72:e8:d7:66:95:51:13:84:e6:67:65:c4:dc:
6a:21:9b:85:b8:01:8f:11:99:e5:42:0f:cf:fc:f2:0b:8b:3a:
42:80:08:fa:7e:3b:49:c0:eb:01:cc:fe:ba:0b:17:92:f8:bc:
bf:79:02:2e:70:5c:1e:1b:3b:7a:0d:cb:2b:d6:af:fb:04:ea:
af:00:68:82:55:4a:2c:55:6c:26:fc:cd:b4:dc:0f:5e:37:5f:
f8:97:7e:a3:b6:c7:02:55:ad:f1:04:62:e7:18:0f:d0:a5:da:
54:62:15:e2:c3:db:00:9a:79:b9:92:8d:0d:8b:23:2f:7e:24:
d8:48:27:c2:98:49:b8:2c:21:33:66:fe:12:70:75:b8:fc:b1:
8d:0c:e0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:44:35 2026 by rpki-client