Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
File: YxrKX5odz6GXBNHwN38bn-kUXgg.mft (raw, json)
Hash identifier: a3FQ1WMTiVKhfs0yEbGxXeNmcxeFX+sBgUcRogTagF0=
Subject key identifier: 2E:0F:4E:4C:63:C0:56:12:B7:61:EC:E1:C3:8D:E5:D9:0A:84:CA:23
Authority key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
Certificate issuer: /CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Certificate serial: 01A0E81CA2A94B9A55A277C0832505ED47CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
Manifest number: 1A7B
Signing time: Mon 28 Sep 2026 13:03:05 +0000
Manifest this update: Mon 28 Sep 2026 13:03:05 +0000
Manifest next update: Tue 29 Sep 2026 13:03:05 +0000
Files and hashes: 1: Awm_DabV6b5aFzZjoL4IRRaHXvI.roa (hash: 8OukxgZtrCYr2IAiBPp1+KwaQD8XPdUdi2hA8JM9baM=)
2: YxrKX5odz6GXBNHwN38bn-kUXgg.crl (hash: CyGy+XqMuuPAujiKm0YJsdcF0Q+v+XEOdGDJ/GopeZA=)
3: llfMrhUWfSkRK5hK0AzdhqQLJv8.roa (hash: hJA3pZdghhHwfd7bRm3Ls7VwTVf1TOxJacXNTFZzVPI=)
4: nFnwvZn2y6J_tUGewNTO4fY9C0k.asa (hash: zDo5Ms/ybgPRllQhXvdgQws7ZsKZj1TDWdYoEliu338=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:a2:a9:4b:9a:55:a2:77:c0:83:25:05:ed:47:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Validity
Not Before: Sep 28 13:03:05 2026 GMT
Not After : Sep 29 13:03:05 2026 GMT
Subject: CN=2e0f4e4c63c05612b761ece1c38de5d90a84ca23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1a:28:4c:00:52:12:b0:fc:d5:a9:33:45:ed:
bb:dd:91:ad:eb:54:05:70:56:e4:83:4a:01:d4:8a:
96:32:4d:45:8a:7f:fd:b5:a7:dc:66:8e:3c:84:45:
a9:7f:55:cd:85:ab:cd:37:21:97:4b:0e:21:71:88:
38:7a:83:2a:61:d7:51:5d:cd:18:c4:40:5d:8e:6f:
76:fb:9a:20:3f:c2:cd:7c:9c:26:3f:5e:ea:11:05:
7f:ca:0c:00:75:94:ef:8a:f9:f2:0a:37:9b:7c:f5:
7f:b9:b2:a7:9c:b4:5a:b0:ff:3b:04:68:ae:08:55:
35:91:a8:90:22:b3:8b:b3:37:67:19:33:fa:0a:1a:
7b:8e:62:33:bf:4f:5c:1b:8b:03:8a:fe:87:c1:46:
c8:4c:30:d8:e8:3c:09:52:a8:f1:28:84:95:a5:30:
dd:63:20:df:c0:12:96:70:78:a7:53:7e:f5:b3:17:
91:5c:77:bd:8b:03:09:9e:47:f2:af:e5:00:e5:d8:
3e:f8:9a:37:b3:a8:ca:2a:9e:01:be:d0:bd:08:ca:
0c:40:e2:b5:dd:4e:02:60:54:8b:0d:57:2d:41:a9:
8b:5c:ac:45:fc:54:4c:cd:18:80:07:ac:80:e8:a4:
d8:90:23:d2:10:88:e4:67:e7:fd:2b:57:2a:34:85:
ad:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0F:4E:4C:63:C0:56:12:B7:61:EC:E1:C3:8D:E5:D9:0A:84:CA:23
X509v3 Authority Key Identifier:
keyid:63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:cc:48:fe:05:c6:5d:96:8e:b8:eb:6b:26:d3:f5:62:bc:12:
08:5a:8d:29:3c:27:d5:04:a5:f8:c5:44:6b:35:b0:36:11:8b:
b4:3a:da:f3:3d:be:07:e9:6a:57:ad:b5:9d:23:98:04:65:37:
86:15:74:f4:bd:5f:6f:40:eb:ec:bf:2d:fb:d4:4e:ea:8a:16:
22:14:40:b0:49:9d:e2:7b:8d:42:3f:2b:7b:76:c6:92:4b:3a:
a5:1c:c0:e7:d8:0f:98:df:ac:16:7e:02:5d:e9:e8:f9:2b:99:
a1:ef:25:c2:08:5f:ce:60:3c:b0:88:40:ae:97:5f:41:d3:8b:
16:1a:95:8b:75:ca:b8:e7:29:8b:8a:fd:0d:be:38:34:f4:da:
4b:d9:8e:a4:02:19:ac:e1:1b:11:8c:6c:66:30:cb:10:4a:1b:
c5:57:0b:d1:33:8d:52:96:83:1f:04:31:31:09:f4:47:3d:4c:
20:21:08:a2:6e:c3:6e:73:ba:82:7a:a9:95:e4:18:b2:72:8c:
f5:7d:a3:91:ca:06:d4:f8:e8:2c:79:14:28:33:50:71:a6:d3:
33:ff:5d:3a:c9:f1:d1:1a:4e:98:63:55:c1:f1:16:37:b8:b3:
13:71:d4:6d:ca:b3:15:13:0d:60:32:c7:99:a4:cb:e8:4a:9a:
8d:c8:6d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:30:00 2026 by rpki-client