Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
File: YAluN0CSzDAL0LsGxBZAky7Pi0k.mft (raw, json)
Hash identifier: L7wk68sBMxhqYJDzyhLDwM6S6z4Z3DmeGs+5H3FIUQw=
Subject key identifier: 02:0C:1D:39:59:F4:B4:C5:B1:97:5A:7D:2F:B3:E2:4C:FF:F0:3A:C0
Authority key identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
Certificate issuer: /CN=60096e374092cc300bd0bb06c41640932ecf8b49
Certificate serial: 01A0B7D32A3C5B0CC004EBDE4E096E5DA230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
Manifest number: 19F1
Signing time: Sat 19 Sep 2026 04:01:04 +0000
Manifest this update: Sat 19 Sep 2026 04:01:04 +0000
Manifest next update: Sun 20 Sep 2026 04:01:04 +0000
Files and hashes: 1: 09iLJ-Mwt-oGGlQePzLwscf0h0A.roa (hash: q4J6TqoqIEXUXDGYbj1FaACI7n8SQOOCFeV3Q5IYWCQ=)
2: YAluN0CSzDAL0LsGxBZAky7Pi0k.crl (hash: KkfQLJGKTnz6iTDWFuIAQr+IQL14R3rjvPAvWjP3VAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:d3:2a:3c:5b:0c:c0:04:eb:de:4e:09:6e:5d:a2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60096e374092cc300bd0bb06c41640932ecf8b49
Validity
Not Before: Sep 19 04:01:04 2026 GMT
Not After : Sep 20 04:01:04 2026 GMT
Subject: CN=020c1d3959f4b4c5b1975a7d2fb3e24cfff03ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:45:2d:ab:c9:b1:db:a1:92:48:a6:da:5b:
e5:83:60:51:1b:9c:4a:e2:cf:11:9a:56:04:73:7c:
63:e0:21:0f:74:18:5b:b4:31:3c:4c:90:e9:5c:ec:
e6:cc:5a:74:01:f8:96:b3:89:4e:ff:48:b8:bc:10:
43:a2:55:e6:d6:88:16:42:1e:a1:34:74:57:e8:06:
10:26:b9:52:54:3c:a9:ae:4b:6e:e4:03:e8:76:d5:
c8:cb:39:15:a7:b5:7b:9a:98:ba:ec:ae:dc:7d:c8:
9e:d7:c4:ee:80:a9:3f:48:d9:75:f2:be:44:5e:a0:
6f:07:d5:88:94:45:f6:0c:f7:f5:7e:0b:17:90:ed:
9e:9d:56:e3:01:60:f2:be:28:26:bb:a6:da:a2:13:
28:42:98:e7:2b:92:f6:6a:27:47:8f:4d:a1:c6:a8:
55:b2:30:40:87:b5:14:3e:18:fc:27:2c:6a:f7:5d:
a0:10:bf:4e:8a:82:6e:03:bc:b7:42:25:40:33:b4:
bd:66:26:e8:bd:c8:83:9c:f5:8d:b3:81:0a:08:17:
9a:c7:04:21:b3:0b:01:2c:6e:3c:76:82:c8:b3:36:
6e:53:b7:3d:7f:30:bf:78:09:52:cc:bb:cc:05:1b:
71:e9:ea:b4:20:55:db:4d:32:e1:92:ff:8e:83:f9:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0C:1D:39:59:F4:B4:C5:B1:97:5A:7D:2F:B3:E2:4C:FF:F0:3A:C0
X509v3 Authority Key Identifier:
keyid:60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:01:9c:e7:db:06:a1:92:ea:e0:93:38:3f:d7:7b:28:6f:0e:
98:51:95:ed:71:08:78:e2:f8:07:4a:6c:db:d9:2c:46:b7:58:
1c:e6:fa:b1:7b:3b:27:19:7e:06:ae:2b:10:f3:f3:58:75:42:
61:55:36:62:69:e2:d2:31:bf:4d:3c:36:10:ca:37:4a:20:2b:
f3:97:74:6b:cd:91:75:11:ca:d1:8c:0e:98:7e:b2:1e:42:5f:
bb:7b:41:02:5e:5f:40:b2:24:36:aa:cc:66:7f:c6:d3:eb:10:
d0:19:77:3c:56:d7:95:7c:f5:c9:c0:d8:da:45:38:c1:56:15:
81:ef:f3:db:84:7d:6f:69:83:d1:c2:dc:ad:7a:38:70:92:bd:
96:09:fa:d8:a6:90:df:a0:e4:7c:95:7c:8f:b5:9c:bc:1d:e2:
3f:cd:49:c9:6e:20:4a:9d:c2:ee:08:17:99:2c:12:81:f4:5d:
a0:76:33:f7:df:a8:85:a2:10:35:8e:68:92:b7:24:2b:ff:78:
fd:55:90:5c:bb:f7:0a:97:2e:a4:d6:61:8a:ee:9b:a2:7f:a2:
98:80:83:34:f4:b7:cc:56:d6:ec:c1:86:11:54:21:05:a5:a5:
55:d5:0d:a7:d0:54:e2:df:2c:6a:c2:72:4f:32:9f:41:87:b1:
67:c7:e0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:46:07 2026 by rpki-client