Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
File: YT0j8hITJ9kX1wjY_hUzgkVZWag.mft (raw, json)
Hash identifier: chU9qWGlKpfy9JlCYJQ6X6/z/epZsZa1mK21Ld/eEKc=
Subject key identifier: 9F:70:DC:00:91:A8:EA:03:AA:73:34:A4:F2:20:2D:DF:AD:C4:C3:94
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Certificate issuer: /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial: 01A1765EBA687F99AFB9F2A19608EA90B78B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
Manifest number: 16B6
Signing time: Mon 26 Oct 2026 04:01:21 +0000
Manifest this update: Mon 26 Oct 2026 04:01:21 +0000
Manifest next update: Tue 27 Oct 2026 04:01:21 +0000
Files and hashes: 1: EymnM_3uw6bBqa2zU41hlqzwZ7Q.roa (hash: vvWH/t7ryv4C49LPruFDavH1zzwMA2a1qBwFbFJLWcM=)
2: FyKNqjFhrFH2OIgFRDsCv8BYs9o.roa (hash: tiDmKjN0UYas924OKqN2XsfQo8ti7C0ROoqNaCI+wEM=)
3: SQMkOh0lAhnLUEE_3rZZmavte74.roa (hash: snhMe8j8Fr+taJDX59zfUjo276EpEtnhIdyeRCqRDG8=)
4: YT0j8hITJ9kX1wjY_hUzgkVZWag.crl (hash: 93it3L5ajF7fiuDvyFQJfHDaUg4461C8NAP8fgPb8W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:5e:ba:68:7f:99:af:b9:f2:a1:96:08:ea:90:b7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
Validity
Not Before: Oct 26 04:01:21 2026 GMT
Not After : Oct 27 04:01:21 2026 GMT
Subject: CN=9f70dc0091a8ea03aa7334a4f2202ddfadc4c394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:35:b4:fe:d8:be:b5:84:52:53:6c:5a:b5:
49:57:f0:0e:81:e6:de:70:41:17:c3:e3:1b:d5:f2:
a3:0d:87:02:f4:c6:e3:8d:7b:cb:f1:05:b4:22:ac:
b9:b9:bd:ef:a1:b8:09:ed:74:11:88:b6:98:24:86:
3d:ed:03:a7:74:4a:ae:48:9a:75:39:68:94:70:3b:
f6:d7:dc:12:af:88:ab:3b:e4:b2:07:a3:94:31:76:
b2:97:74:88:99:de:e3:8d:7c:8d:1c:e8:2c:da:f3:
bc:83:2a:ad:0b:2a:29:ad:5e:eb:34:b6:6e:8f:d2:
dd:6e:3a:85:d0:3b:50:c7:20:62:4a:b8:ec:81:be:
61:b1:a1:f6:48:6b:99:d1:8c:a8:79:f4:20:04:ca:
70:f6:ac:67:24:cb:d2:98:ee:9c:26:9e:d8:8f:5a:
c8:71:52:92:0f:c7:e7:8c:f1:d0:62:df:2f:b2:7f:
7c:06:37:a5:bb:4e:34:aa:4e:fb:0f:95:79:e2:1d:
bd:c9:6b:d9:6c:39:db:b4:56:28:59:35:e5:e9:97:
56:f1:18:b8:dc:f4:95:dc:57:e2:81:d0:fe:5e:9a:
85:4f:fd:de:88:9e:1c:78:bb:18:d3:8a:60:fc:2b:
ed:ac:bb:f2:c5:f8:5b:12:4a:c3:c2:8f:ac:26:92:
eb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:70:DC:00:91:A8:EA:03:AA:73:34:A4:F2:20:2D:DF:AD:C4:C3:94
X509v3 Authority Key Identifier:
keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:9b:d0:20:8a:a6:b9:5f:01:a2:98:1c:1a:88:41:54:22:f3:
9f:70:6f:04:02:d3:b9:b8:0a:63:db:59:50:3f:dc:23:c1:2a:
49:65:a1:08:c2:eb:7d:ba:1b:68:4c:7b:04:86:0a:c7:97:f7:
c7:02:ad:f6:37:18:f9:26:3a:57:bd:e5:f9:6b:d1:c1:82:41:
2c:b0:1f:10:c7:7b:72:f9:53:ad:38:e3:5e:04:bb:53:ff:a0:
5b:f9:b3:72:64:5e:7e:c2:76:10:41:04:c8:6f:5e:d7:1b:f5:
1d:b2:b9:79:a0:b5:7b:47:86:52:ed:b8:5b:81:9d:a2:8e:62:
a1:e5:0b:73:ae:38:de:ee:72:4b:06:be:dc:22:83:ad:0f:cd:
33:c7:29:6e:c9:fa:8f:f9:8b:af:6f:e5:69:98:95:6b:45:98:
94:a5:9a:73:a3:60:c9:97:01:40:14:0d:10:c7:52:38:2f:9e:
c5:b2:23:6a:d8:dc:90:1f:3e:3a:94:5b:db:6b:cd:e5:ce:65:
9d:fe:ce:95:ad:17:4c:36:d7:37:f3:8b:a5:61:4d:7b:0f:2e:
52:63:08:59:6b:04:d9:bc:c3:68:89:15:61:3f:58:bf:3a:ba:
39:cc:2e:df:9b:3d:96:9e:d1:bd:25:60:2f:19:1e:06:56:97:
3d:6c:95:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:51:01 2026 by rpki-client