Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
File: YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft (raw, json)
Hash identifier: tfuEXY/CGXvmLVUShCbF988BNI1A0iGbU7Wk7Ckvocg=
Subject key identifier: 0F:A5:BE:70:91:7A:6F:81:A6:E3:25:1C:FB:86:A1:41:A9:32:13:49
Authority key identifier: 62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
Certificate issuer: /CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Certificate serial: 01A0219EC16DE7ADC4087AFDC4EDBA961B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
Manifest number: 043C
Signing time: Fri 21 Aug 2026 00:00:47 +0000
Manifest this update: Fri 21 Aug 2026 00:00:47 +0000
Manifest next update: Sat 22 Aug 2026 00:00:47 +0000
Files and hashes: 1: YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl (hash: 4/eqy6yK/dl0mn8tQkyMf2CttIuY4PW1pAUHHp8JdqE=)
2: otGdouxrN50G3K6_VfBD4sUjZsk.roa (hash: KaxlTsTV8jPWF44UBDhZygEc33e9Bf3O7Tb4YHBXJsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:21:9e:c1:6d:e7:ad:c4:08:7a:fd:c4:ed:ba:96:1b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Validity
Not Before: Aug 21 00:00:47 2026 GMT
Not After : Aug 22 00:00:47 2026 GMT
Subject: CN=0fa5be70917a6f81a6e3251cfb86a141a9321349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:16:8f:05:5d:3e:c0:a9:5d:07:a5:c8:1c:
28:d5:c1:bc:37:e4:90:c6:29:1d:90:30:03:66:bc:
de:80:b7:c5:90:52:f6:2f:1e:3b:92:3a:d9:94:5a:
8f:72:e8:7b:9c:81:a3:71:e4:63:c9:71:3c:7f:16:
8b:1d:54:f0:c7:85:8b:c5:9e:05:27:02:8c:ae:68:
fc:2f:2b:4d:2d:6f:2a:d9:1d:b3:83:c1:2e:49:b1:
fe:d3:bd:a7:9f:14:d9:70:56:b1:20:e0:e2:87:3c:
f7:21:b3:6a:bc:bd:c2:9b:5a:be:b3:4e:1e:88:39:
49:5c:aa:77:cf:5d:f2:01:48:db:c8:1d:ec:3a:1f:
ed:2f:bc:d8:ba:21:1f:96:ef:c3:90:ec:32:57:9b:
93:8a:e4:c7:b9:66:bb:0d:1b:cb:6f:9c:c5:30:8a:
39:5b:43:40:97:f9:77:bb:0f:39:d2:cb:87:7f:fb:
bd:60:9e:49:1e:7a:a1:60:71:62:6b:f8:9b:0c:54:
67:5b:1a:72:e8:e4:99:01:c9:47:4a:45:f8:95:cb:
07:cc:4e:5a:81:d2:f5:a1:ba:ce:83:14:d3:73:f4:
e5:e8:62:27:86:61:4b:42:09:d3:5a:4e:01:18:70:
8e:af:2d:66:f2:90:57:50:82:27:43:f1:e8:54:2f:
3f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A5:BE:70:91:7A:6F:81:A6:E3:25:1C:FB:86:A1:41:A9:32:13:49
X509v3 Authority Key Identifier:
keyid:62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:13:69:36:e1:a0:39:5d:72:24:5a:fe:4a:02:85:62:e7:ca:
d9:d5:6a:7c:6b:a9:ba:96:ce:87:7d:4b:3b:dc:b3:99:8d:51:
4c:32:1a:bf:ed:fe:c8:26:fd:74:1c:a1:bc:de:03:d4:a0:48:
19:4c:43:ea:f6:4d:be:e8:0c:07:ab:ef:1f:ec:3a:8c:49:e6:
a8:d9:b6:73:33:3e:a5:f5:a2:8c:6a:c4:4f:5b:f2:cd:fe:f5:
dd:1e:7d:68:6b:77:b6:76:71:6e:e5:a3:51:17:b1:9f:dc:cc:
eb:d2:66:0d:d8:89:db:cd:5f:fc:86:4c:c0:3c:1a:52:94:bf:
06:11:44:d1:cb:be:e6:3c:cc:7d:06:8d:92:88:10:a9:d6:6e:
41:80:2d:50:03:ad:d4:26:8f:3a:19:2a:22:3a:78:3a:0a:4e:
6d:21:8f:c8:3f:44:f7:53:64:a8:80:4d:c6:c8:10:dc:31:12:
a8:c2:fd:a4:7a:aa:31:b5:ff:5c:ac:2c:bd:e6:bb:3d:64:7b:
89:3b:4a:9a:f1:bd:2a:bb:d3:48:b5:6f:c9:b0:24:66:0b:4e:
47:07:e6:04:2f:63:33:33:bf:e5:2e:4a:ba:65:d2:91:cc:bf:
ee:b6:66:cf:e0:4f:f4:65:f1:83:e8:ec:46:8c:02:79:12:d4:
05:9d:4f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:24:49 2026 by rpki-client