Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
File: YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft (raw, json)
Hash identifier: ImUNvY96kn6mQugzJWfj/v1LXF13WyTFPKtjIRpM+7k=
Subject key identifier: D8:DC:3F:3F:9C:57:06:B4:55:A5:F0:69:B9:18:82:90:6B:DD:F7:78
Authority key identifier: 61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
Certificate issuer: /CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Certificate serial: 01A03E602FDBCF945096798ED58601A1CE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
Manifest number: 0373
Signing time: Wed 26 Aug 2026 14:01:26 +0000
Manifest this update: Wed 26 Aug 2026 14:01:26 +0000
Manifest next update: Thu 27 Aug 2026 14:01:26 +0000
Files and hashes: 1: SthetgpXxzE5DDJOcie_LsqpRQs.roa (hash: 1G5wA/BqRdbf365y+2p8DrgYId5s873fPHSYZ3snZ28=)
2: YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl (hash: lNYwFyFYh9Icuy9QWa1GdmdUngKCOpjMoSMGJ3N5MyU=)
3: m68keB3eEWupefhfdu1EojbXUx0.asa (hash: d7/89Ia5AzHYOhT/NLGxHC2wfpCLvAL8r4vSmbnqhi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:60:2f:db:cf:94:50:96:79:8e:d5:86:01:a1:ce:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Validity
Not Before: Aug 26 14:01:26 2026 GMT
Not After : Aug 27 14:01:26 2026 GMT
Subject: CN=d8dc3f3f9c5706b455a5f069b91882906bddf778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:73:c9:83:81:33:8c:46:8a:26:31:de:84:e3:
b7:16:19:8e:61:0a:b7:50:bc:6d:7e:ae:fa:14:96:
c4:81:d9:02:cf:82:4e:26:99:90:8e:29:c9:37:e5:
a7:f9:1b:d3:19:5d:d7:db:73:90:ca:a2:5b:1f:fb:
97:c0:56:44:88:13:0e:75:dc:9f:07:27:7d:8b:7d:
03:c3:8e:6e:16:9e:41:6c:69:da:54:c5:22:36:32:
d9:58:22:bc:86:09:c5:40:05:80:f2:4f:66:7f:36:
ee:90:5b:ac:85:54:08:9c:64:a0:84:c0:10:1c:82:
6a:b5:d0:40:d3:0d:2e:84:38:b6:1f:41:ad:f8:ec:
55:9f:4a:7a:4e:62:cb:07:12:69:7f:e9:78:b0:64:
29:61:51:9e:b0:26:bf:fb:1f:05:09:26:36:f8:04:
c1:d1:46:2b:2e:19:c7:de:6f:a1:32:81:c3:1e:42:
ec:8f:e3:b9:2a:a3:ab:2e:a4:e8:45:3f:d0:95:48:
69:6b:43:c9:ff:2d:01:de:fe:e9:00:6a:f3:10:5c:
e1:76:91:8b:c2:b0:44:5e:a4:8e:f2:82:17:7e:b3:
bb:fc:5a:80:df:f6:2a:4d:d5:ed:df:a1:9b:4b:25:
c0:c2:05:36:0d:b3:9b:fe:7d:95:30:e5:a0:c0:1e:
e7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DC:3F:3F:9C:57:06:B4:55:A5:F0:69:B9:18:82:90:6B:DD:F7:78
X509v3 Authority Key Identifier:
keyid:61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:74:92:c5:ce:a0:72:1a:a0:4e:8a:48:7a:04:df:49:0d:ba:
02:2e:61:fa:66:eb:e5:b6:6c:d0:f9:39:59:f9:a3:e5:19:0e:
46:21:db:c0:b7:2c:7b:e6:8b:04:08:78:3c:e7:e5:12:60:81:
f2:1c:a8:d2:00:bb:73:c6:80:43:df:61:4e:70:c6:03:e1:37:
6f:39:55:0d:53:07:f9:b1:a9:20:a0:3f:f7:1f:10:d1:20:7d:
c4:50:56:37:cd:31:f9:70:d1:6c:be:18:39:a4:0e:3d:20:5a:
8c:f5:03:d7:25:6d:4b:13:84:10:37:d3:d2:35:95:0d:83:99:
67:56:89:0e:2b:38:e5:22:95:3f:48:86:9b:76:de:9c:f6:12:
98:36:30:8b:b3:90:5c:bd:13:02:45:a1:64:91:6f:fc:e9:5a:
13:2f:31:42:7e:f1:d7:9f:1b:9a:0e:9b:5c:e9:fc:41:6f:47:
50:5b:08:62:b2:61:cb:58:e2:ea:75:71:c1:6b:b3:0a:f1:b3:
aa:cb:1f:67:b5:a5:2d:c1:db:f8:be:68:be:28:1d:00:15:63:
30:47:9e:a2:f1:b2:54:01:61:e5:4b:23:51:5d:9d:68:04:cf:
7c:ff:27:e1:9e:d7:65:95:43:75:a2:fa:56:16:78:57:9a:66:
a4:b7:8c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:37:38 2026 by rpki-client