Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
File: YJ6nq6_FLH_6IKemquSuLSYlIHY.mft (raw, json)
Hash identifier: FBTPPaOXRNPsiKp2vGTt16ec4KKrcyUuZ7DeCTFwIn8=
Subject key identifier: 27:29:F7:91:95:AE:62:5E:83:8F:51:19:5E:71:F4:FC:A8:24:0B:AE
Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
Certificate issuer: /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Certificate serial: 01A04CC0CBE82C8827D7F5BA513705A21C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
Manifest number: 0496
Signing time: Sat 29 Aug 2026 09:01:38 +0000
Manifest this update: Sat 29 Aug 2026 09:01:38 +0000
Manifest next update: Sun 30 Aug 2026 09:01:38 +0000
Files and hashes: 1: IPEVX9NburliCOkL_8My8KZEvxc.roa (hash: vKtzd4qXyz9EWKAKarv5HXYhJ7hA2jvu9rmJAemDTXw=)
2: YJ6nq6_FLH_6IKemquSuLSYlIHY.crl (hash: H+IknwScSJYPnNEVPcKA8qTE+HhUP7eDtMqNJ32mJK4=)
3: g3UM-mxo9surPyGX-ua-Jw8Hwy0.roa (hash: rLTMTj/qJ9X8Z52HM7aUZCnlG5iT1wzURKa+BIyHlNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4c:c0:cb:e8:2c:88:27:d7:f5:ba:51:37:05:a2:1c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Validity
Not Before: Aug 29 09:01:38 2026 GMT
Not After : Aug 30 09:01:38 2026 GMT
Subject: CN=2729f79195ae625e838f51195e71f4fca8240bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:e3:0f:8e:51:28:ba:b6:05:4f:c5:a8:1f:
50:ff:b6:ec:ce:0c:88:c0:2a:92:77:b3:7b:ec:ff:
e9:ef:52:68:82:78:95:bb:aa:9f:c7:31:89:f2:7e:
5e:7c:8c:c1:a1:f5:f9:15:2e:54:bf:82:76:f9:59:
55:9e:64:23:d4:93:ec:12:92:c6:3b:f4:aa:33:8e:
bc:ec:3d:bc:7c:9f:60:d0:a0:68:c1:ab:51:6e:9e:
06:25:d7:2a:d5:db:c7:87:cb:2f:43:1d:2d:00:2b:
93:c3:49:53:3f:e6:29:a0:f8:ab:c2:5f:10:f6:80:
91:37:63:7e:03:35:2d:a6:75:8b:80:ca:79:29:16:
96:1a:45:d2:22:40:73:eb:52:bb:a0:f0:9c:6d:3c:
8f:46:c2:0a:0f:16:3f:73:a3:7d:56:ec:a5:c1:e4:
fa:17:0a:a2:4a:47:9c:52:44:e9:16:ea:e7:52:05:
ee:f4:c6:34:f4:a0:7f:e4:fb:ed:7c:e1:dd:c0:ea:
d3:ea:50:ac:ae:c4:2f:3c:2d:54:6e:ec:26:c8:05:
12:5e:25:af:a6:5f:e2:de:05:40:c6:b4:17:8c:0e:
f7:bb:35:89:96:aa:fb:ef:86:5a:d9:2d:67:5e:e6:
56:32:ab:94:dd:bb:4f:7e:8b:5a:c1:ad:0a:05:5c:
1c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:29:F7:91:95:AE:62:5E:83:8F:51:19:5E:71:F4:FC:A8:24:0B:AE
X509v3 Authority Key Identifier:
keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:82:69:9b:cf:f4:bf:e2:ca:c6:6a:cb:c5:d5:ad:86:d0:77:
38:78:38:4d:13:a1:a1:e7:ef:5c:fb:77:ab:99:db:86:43:0d:
ee:b0:b0:fa:96:07:66:aa:19:37:f7:7a:30:1d:56:36:2e:e4:
b6:18:40:2e:e3:8b:4b:d3:95:5f:f6:1c:99:22:51:56:71:d4:
03:6a:1b:05:11:1d:75:c3:87:3b:09:87:8d:2f:da:a3:f8:1b:
b6:63:35:e7:21:ae:4d:23:3d:1a:a3:26:39:46:25:8a:bc:fc:
7a:75:c1:bf:1a:d1:d4:82:f6:0f:5f:37:17:b8:23:b2:9e:fe:
d6:94:7b:52:4d:f2:e5:df:84:37:5a:a8:92:de:bb:b8:4e:7f:
a1:23:5d:d7:94:6b:63:75:c4:39:17:b5:95:3f:f4:cf:3c:a9:
4d:14:0f:7e:21:62:e1:88:fb:c8:7b:70:f6:04:c2:a0:c0:8e:
43:92:5b:85:17:c2:c4:1c:d0:5e:4c:73:f4:81:04:ca:b6:3e:
a3:af:ce:45:72:19:81:8a:95:84:c9:61:01:32:da:91:41:65:
48:1a:2f:c0:d9:25:d1:26:51:65:4a:89:1b:db:95:97:fa:1b:
b0:84:fa:bf:db:61:b2:de:42:b4:22:db:4e:80:66:be:06:cb:
d8:2b:d7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 12:41:58 2026 by rpki-client