Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
File: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft (raw, json)
Hash identifier: NBJiuWaSi4WXKn71yQebnONUhNwKKJNyDnwiC8ulG1k=
Subject key identifier: F1:5C:B8:95:BB:E6:78:85:27:F8:93:63:69:AB:CA:33:4E:1E:8E:41
Authority key identifier: 60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
Certificate issuer: /CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Certificate serial: 019FFF4999A2B2DB90DB3583673CC937BE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 08:00:41 +0000
Manifest this update: Fri 14 Aug 2026 08:00:41 +0000
Manifest next update: Sat 15 Aug 2026 08:00:41 +0000
Files and hashes: 1: OgWEvpt9l3fjUZPTGCjCIeBKF7g.roa (hash: ERaqLzlMb64hRM2SkbR4/skAX7oKEBTPX2o20Ce35C4=)
2: YNe4buptuJ7UBEwKBogeIyq80jg.roa (hash: NkTj5ifZYkof4P8g9p6OTOx3j64mOVFXyYQzcr25aXA=)
3: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl (hash: qbfwbZ2ej6sz2/WURNyS2aM3maQ8AF8dDVxpLGiDk2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:49:99:a2:b2:db:90:db:35:83:67:3c:c9:37:be:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Validity
Not Before: Aug 14 08:00:41 2026 GMT
Not After : Aug 15 08:00:41 2026 GMT
Subject: CN=f15cb895bbe6788527f8936369abca334e1e8e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:75:ca:ae:7b:37:bb:9d:3e:55:40:6b:c6:44:
8e:96:94:d4:60:f1:b8:6c:e4:54:e3:b7:72:ce:b9:
aa:a0:3f:33:27:7e:39:1a:0a:83:04:6f:35:77:8f:
d2:94:fd:c1:0b:7f:89:fe:a2:6a:28:84:b5:0f:fc:
25:54:f6:1c:6b:2a:33:ae:60:4a:29:2e:c1:6e:66:
cb:db:74:b0:f2:ba:54:8a:c5:c4:ea:b9:76:9a:d4:
10:4f:9c:01:41:a0:32:b3:89:3d:bc:d7:38:e7:4a:
fb:e2:d7:df:88:47:46:ea:32:de:e8:45:ac:03:87:
c8:bd:97:58:38:cc:d7:b3:12:ec:f2:a7:7c:ad:3d:
2e:29:88:53:59:5f:db:a0:74:01:79:46:32:5a:7a:
66:d3:42:6c:fd:be:bd:40:95:7a:1d:00:a1:58:65:
5f:e9:a1:09:cd:ba:ad:bc:89:93:5f:97:b9:bf:ba:
dd:4e:7f:3a:57:0c:06:39:97:73:05:4a:c4:fa:4b:
56:f0:2c:2c:ed:7e:b3:2d:e3:fb:23:5a:da:44:8a:
f8:e9:1d:97:fd:de:b1:7a:81:ef:55:f8:09:7e:8a:
e7:d3:01:08:47:ba:b9:c6:90:96:7b:90:b1:70:31:
cd:8e:7d:30:45:46:f3:68:ae:fc:cd:95:b1:74:bb:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5C:B8:95:BB:E6:78:85:27:F8:93:63:69:AB:CA:33:4E:1E:8E:41
X509v3 Authority Key Identifier:
keyid:60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6b:cb:f6:9b:28:71:d3:bb:6d:c9:0d:f7:ca:d4:45:99:76:
68:7e:20:09:a5:0f:9d:75:44:d9:8f:74:39:ba:67:ee:9c:e9:
46:c5:56:18:4a:eb:8e:4c:96:60:b0:3d:1b:4a:c0:15:b4:1e:
5a:04:dc:b7:52:db:55:aa:79:83:93:72:0f:bc:fc:a0:9a:9b:
2c:1b:25:59:b4:34:d0:9c:7e:2c:69:60:26:47:80:b2:76:1a:
ee:6d:57:4e:78:b9:08:7a:f9:6e:31:6f:cb:5b:65:bd:a3:0b:
81:04:95:b1:26:59:eb:50:8d:89:79:29:4b:5a:06:8b:91:0e:
51:91:5d:80:90:92:5c:fd:51:a6:86:f1:73:32:b2:af:c5:7b:
35:4c:e2:9a:7b:6f:14:0e:27:f2:f2:bc:d4:e6:b5:f5:c0:66:
5a:42:a8:67:89:65:3e:1e:17:ac:9a:f5:d8:b1:7d:be:4f:e0:
79:c9:5c:f8:e6:2c:c9:82:7e:20:c3:dc:b8:4b:6f:3a:af:01:
b5:35:46:65:aa:ce:15:69:b2:bd:81:89:4e:77:df:11:7b:41:
d3:9f:14:e7:2a:df:db:75:95:85:e7:88:65:47:70:f8:2e:d6:
89:f7:b8:ba:7f:d7:f9:bc:9e:39:f2:67:b3:14:b2:1b:49:88:
ef:db:fb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 14:50:26 2026 by rpki-client