Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: HJdDyjGfSzvo5B6ODDiQk8/hzoTV4aRk+g55dUtzr+w=
Subject key identifier: CF:3E:95:FC:63:B6:8F:00:1B:FD:35:A8:90:37:38:48:55:80:8E:6E
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 01A08B9F1399E1B28530127287366E2AEB5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 1773
Signing time: Thu 10 Sep 2026 14:00:53 +0000
Manifest this update: Thu 10 Sep 2026 14:00:53 +0000
Manifest next update: Fri 11 Sep 2026 14:00:53 +0000
Files and hashes: 1: C3nc48r2b2USpSkgOVzgsEQF2h0.roa (hash: kvFI72ZsGMqBnEvEAYRTWIp6gxPL8rac8rSJwcsVy0w=)
2: XaIcpqpb27hhGRIZ8h_xuzKRev4.roa (hash: pQLbKPAj3ndWd5qjjlikkIwvz29S32Fkmehgv5Ouuf0=)
3: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: ZiqrBlylnMeU1GvM3ZI/qycx2Fp8EpusiarrGWrM70Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:13:99:e1:b2:85:30:12:72:87:36:6e:2a:eb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Sep 10 14:00:53 2026 GMT
Not After : Sep 11 14:00:53 2026 GMT
Subject: CN=cf3e95fc63b68f001bfd35a89037384855808e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0b:13:2a:fd:dd:fc:3d:01:c1:a2:fa:cd:f9:
8c:82:bb:52:63:31:86:19:4e:da:8c:d6:34:6a:9e:
84:35:25:47:5e:ee:cb:74:2d:eb:95:1c:db:0d:10:
c5:e5:43:f3:1b:76:f9:90:89:ca:25:e1:98:f1:c5:
2e:e5:e2:5d:67:57:78:17:c0:2e:27:b0:23:1b:4b:
f3:a5:7c:df:32:db:93:21:f2:54:f1:a5:61:34:6f:
22:82:af:4a:bb:7a:e5:ab:88:b0:d9:3b:93:3f:49:
a3:10:77:c6:ce:a4:73:ee:ad:4d:23:ad:0d:bf:2d:
f6:5e:da:68:29:1d:8b:78:1c:77:f2:7a:73:c8:0e:
0c:4b:00:e6:72:d3:4a:26:62:7b:24:f8:48:bd:7c:
d0:73:5d:d9:c9:71:19:0c:bd:1a:01:bd:a2:fa:6a:
23:6c:20:6a:ae:c1:94:fc:9b:2e:9f:1a:a3:1a:23:
72:7e:aa:2a:30:dd:7c:4c:68:a3:91:bf:91:d0:cd:
6b:19:6a:8b:d1:f7:f0:ce:2b:f2:d2:dd:57:95:c6:
47:d7:7f:2b:f1:68:16:f1:e1:65:d6:45:05:27:14:
05:d5:0e:4e:60:bd:6b:dc:fb:67:45:15:04:27:30:
fa:db:ad:48:5f:99:29:c0:c1:fe:65:30:25:6d:85:
f6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3E:95:FC:63:B6:8F:00:1B:FD:35:A8:90:37:38:48:55:80:8E:6E
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:fc:fe:a0:10:96:71:43:92:35:29:a4:79:57:c8:35:2b:a8:
b4:e3:66:a4:1f:88:d2:55:5a:60:47:77:30:1b:1e:6f:00:90:
b5:22:a9:80:2a:f2:28:a2:a9:fe:ba:a4:7c:71:ce:43:03:b2:
30:35:4c:79:64:bb:ed:ec:73:ae:30:80:42:ae:81:06:b8:04:
f9:43:7a:54:31:a7:75:2f:c8:a3:a9:88:87:48:61:25:32:f8:
88:b8:f9:6f:02:c9:6d:ac:c8:ee:3f:37:10:b5:2c:30:b7:a7:
7f:be:45:01:31:7f:89:51:33:19:50:d3:fd:c3:62:c2:01:b1:
af:8b:c6:76:d7:e2:dd:a1:83:fa:66:ae:66:d7:8c:b6:5f:33:
6f:ec:5c:3d:e4:13:1f:ed:3b:d0:80:6f:b6:72:62:b0:c9:84:
a1:7e:f5:4f:32:47:00:4d:61:98:43:00:03:85:7c:98:82:0b:
5f:11:93:26:24:cd:9c:4d:b6:30:65:90:35:f5:95:71:d2:f8:
af:f3:94:cd:db:c7:71:f3:1e:08:ab:d3:d2:c4:88:6a:57:30:
01:e2:79:7e:e8:07:23:f7:40:1a:1f:7c:6c:40:88:b2:e6:f7:
d9:9c:d4:3d:8b:6c:69:4d:9c:f7:e5:ba:02:dc:1f:71:b7:b1:
dd:ce:9b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:40:50 2026 by rpki-client