Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: a5PpmFTx3vCvhy3qIrOp/oMUhw75YcmNxRgqtxkMNVk=
Subject key identifier: 65:34:11:58:5A:60:BB:9F:A8:3F:7A:A5:6F:35:77:FC:44:06:E8:30
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 01A0F26856F32E290F768C70BDCF0FE4ED24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 1A7D
Signing time: Wed 30 Sep 2026 13:01:59 +0000
Manifest this update: Wed 30 Sep 2026 13:01:59 +0000
Manifest next update: Thu 01 Oct 2026 13:01:59 +0000
Files and hashes: 1: 6C5H6weklOvyIUmH6upyoLS9Fjk.roa (hash: 4tDaLUdULnIJjiPlfBjB5U5pwdeJP/TF6DH4C/OJMZ4=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: 8J494OXkG7bfJTvWMdvV99vzbde5UsnZvIqEee9/WkA=)
3: uTaIFz1uKDcuAGI72zb9cgQJSDU.roa (hash: /chT2KHjwm4Z4cMac2BTFt3alYJEDlnfPwAVuuzxgMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 13:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:68:56:f3:2e:29:0f:76:8c:70:bd:cf:0f:e4:ed:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Sep 30 13:01:59 2026 GMT
Not After : Oct 1 13:01:59 2026 GMT
Subject: CN=653411585a60bb9fa83f7aa56f3577fc4406e830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:6f:e2:9a:df:f7:39:3d:a8:7b:ca:62:5f:
13:23:e4:fe:eb:3d:ef:15:9b:57:0d:97:8a:0d:76:
c8:e7:87:a0:bd:04:3d:97:bf:d7:b5:ef:5e:5f:c5:
eb:dd:1a:2a:4d:40:22:6b:c4:eb:21:1a:af:ab:5a:
a6:e3:a8:0d:14:32:bc:f0:24:f0:c2:27:55:47:fb:
8f:24:f6:8f:b0:b7:84:9e:7d:a4:e5:cb:1b:af:47:
8d:0f:a4:72:5b:3e:e7:a7:31:5e:0a:1c:60:53:0b:
1f:95:39:99:57:01:a0:46:6d:8b:17:19:57:19:7c:
a2:80:c7:e4:ed:62:aa:0d:d0:e5:d4:50:90:18:68:
8c:cf:1e:34:67:eb:d9:dc:2a:55:3e:12:e6:7c:25:
14:65:e8:58:72:66:d3:78:5d:00:df:a9:69:73:ef:
61:47:1a:5b:22:13:86:39:30:fb:08:6d:53:c3:ef:
ef:32:c9:3a:83:02:39:08:f8:ef:7f:f5:ac:63:a2:
42:87:bf:6f:8a:83:30:9e:71:60:fc:79:c8:45:bd:
01:0f:80:20:2b:94:c4:34:be:9f:b9:15:08:63:06:
19:ef:07:7a:39:1c:5c:e9:43:04:1b:ad:db:8e:31:
de:bd:82:91:72:b8:86:c8:77:b8:d7:62:86:fd:1a:
df:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:34:11:58:5A:60:BB:9F:A8:3F:7A:A5:6F:35:77:FC:44:06:E8:30
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a9:59:38:ea:03:80:d6:07:d0:98:fa:db:5e:3c:31:ef:6c:
47:08:37:4d:f5:2e:c9:13:2b:7c:9a:51:68:c8:3a:a5:c3:fc:
16:4b:89:ec:21:04:71:43:75:22:20:02:03:46:2a:48:0e:75:
3c:9f:37:2c:4d:5e:88:1c:b1:bd:5f:a1:20:8f:4c:e3:ad:ca:
51:b4:7f:a1:5e:5f:06:23:ee:3d:13:08:2d:7a:3c:40:d3:bb:
50:fa:3e:d8:5f:7c:9c:df:13:bd:91:ee:aa:87:8b:9d:b6:0d:
b5:f2:aa:47:6e:f2:94:43:0f:1d:96:95:4e:1e:25:fa:01:a1:
67:67:d4:22:d5:b2:01:87:cd:49:ac:22:af:91:56:a6:7b:59:
b6:27:4c:44:5e:32:45:e8:55:9a:fb:d7:4c:b0:db:90:c2:a1:
fd:80:fa:3f:67:29:28:9f:e0:91:dd:a4:14:56:7b:a9:25:95:
b4:c8:48:26:7e:b8:40:6f:95:19:6c:b0:4b:54:a3:15:e1:27:
e2:fc:db:ca:64:cd:73:8f:f7:c8:93:2c:4a:bb:49:35:57:1b:
88:8e:1a:cc:36:dd:70:1f:e9:96:1d:ad:ff:89:77:26:a1:6a:
6f:7f:eb:d8:3f:b5:61:7f:25:56:84:19:40:e0:c6:14:4a:a1:
ed:ee:34:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:40:46 2026 by rpki-client