Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
File: YTdPxOqwDUHB7uR_37ABB4x0-oU.mft (raw, json)
Hash identifier: 7H1xKY5zF7OMX2ms+/i2oXPB+c8z+Fkcsygt954K8nU=
Subject key identifier: 41:71:78:54:FE:7A:6C:D6:07:C4:E2:62:99:48:1B:4D:E5:90:10:6C
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Certificate issuer: /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial: 01A115980E8BB464D5255363CC5A74CFAF39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
Manifest number: 09DF
Signing time: Wed 07 Oct 2026 09:00:48 +0000
Manifest this update: Wed 07 Oct 2026 09:00:48 +0000
Manifest next update: Thu 08 Oct 2026 09:00:48 +0000
Files and hashes: 1: HT5OhOqJdYdBbXBwQ3VQ1GpVIFs.roa (hash: u6C6SIGOiLQCTdX2uMjNGg6NhfkwgvQOTMzRPzekqCs=)
2: YTdPxOqwDUHB7uR_37ABB4x0-oU.crl (hash: BS5sMFrSoqvn5CugOWaiDh6VUAVmjHBCbGwIQy97zD0=)
3: fdeG7TbijoItYpXy1D7uc-AVK8Y.roa (hash: nS+LEhm0a6oObGQ8VDam0gU4Ac1dG0xV5Lvd6Flgfv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:98:0e:8b:b4:64:d5:25:53:63:cc:5a:74:cf:af:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Validity
Not Before: Oct 7 09:00:48 2026 GMT
Not After : Oct 8 09:00:48 2026 GMT
Subject: CN=41717854fe7a6cd607c4e26299481b4de590106c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:74:27:4d:a9:34:01:af:08:7c:6d:f1:e5:
40:a8:db:69:fc:c2:09:0e:c9:d4:42:10:3d:e2:e7:
33:32:0d:46:21:c7:e8:c6:0d:d5:da:d7:13:f9:c4:
29:1d:e2:b4:c4:87:11:b4:0b:0e:aa:e7:c5:5e:d9:
60:b7:02:6a:79:46:d8:75:9e:b8:e4:fe:c3:c2:86:
de:97:e9:6a:84:c3:4d:9a:f6:50:5d:86:14:eb:6e:
4b:89:20:f0:37:a2:7a:21:b4:77:27:12:a4:98:b5:
b0:27:e3:00:87:1c:f4:94:58:74:48:2b:aa:89:1a:
54:2a:5d:19:d9:93:b1:8f:9e:f7:71:62:bf:8d:e8:
52:cc:ec:07:c0:86:75:48:dc:06:e1:78:d4:a6:63:
ea:c4:bf:6b:ba:af:12:fd:4e:20:bf:11:af:8c:4f:
41:b2:03:37:18:df:45:e7:5b:d0:2e:72:76:27:ea:
d5:2a:86:de:94:be:5a:0d:ec:8f:7a:7c:d3:bc:7d:
b5:d0:ac:d2:de:bf:a8:55:25:9b:e1:98:70:3f:f9:
be:bf:54:f1:4e:d6:eb:c6:bb:dc:e2:19:37:13:b4:
d6:38:0d:81:22:5c:92:31:32:7e:90:69:e3:ce:66:
76:2a:2d:65:7d:31:45:1d:80:fd:a2:dd:2c:92:10:
d3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:71:78:54:FE:7A:6C:D6:07:C4:E2:62:99:48:1B:4D:E5:90:10:6C
X509v3 Authority Key Identifier:
keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:00:6f:06:87:54:10:16:9b:79:90:b2:bb:1b:4e:1d:48:ae:
93:4e:5c:d2:61:62:1a:40:55:ba:f3:78:3e:b7:f0:15:b2:9b:
ff:61:78:0c:08:0a:a1:d9:64:73:8e:84:02:0b:ad:b4:cc:0b:
f6:cb:0a:4b:35:b5:00:6a:04:9e:12:86:ca:1c:ab:9e:b8:f4:
8a:6b:6a:9b:20:35:f6:c8:ee:8c:5d:d0:d8:18:d7:ec:45:1c:
7e:3c:5a:61:32:64:a4:d8:8b:3b:be:1c:8f:5f:83:45:64:65:
04:23:b4:e9:45:15:4c:70:26:1f:f7:97:e1:4b:10:0a:10:61:
2a:dd:90:0e:f2:35:f2:da:81:2f:32:ad:c8:23:40:ab:6e:ca:
d3:79:e4:79:70:f5:ee:34:dc:e7:67:be:35:2a:4c:05:f1:d8:
8e:7f:2b:30:6e:6c:fd:6c:32:24:63:b1:e0:46:fd:48:04:1b:
d4:0e:21:1d:8b:50:6f:6f:81:eb:67:a5:16:fd:71:85:fc:43:
71:df:0d:3a:74:a8:1d:38:b0:dd:2f:7c:3c:5d:bd:33:ec:4f:
72:f5:e4:25:c8:94:8d:ce:0a:07:74:01:a2:b1:30:43:d4:86:
41:e0:c6:d6:29:65:88:99:ce:f3:dd:aa:9b:a5:b2:d9:a9:a5:
aa:30:24:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:18:03 2026 by rpki-client