Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: lXcmzmrDgfniQN+DnAdTfFqX7HZNuqyCawGEV53OMYU=
Subject key identifier: 01:4F:3C:57:45:8B:E3:F7:7E:E9:63:81:B5:04:4D:BC:A2:61:CF:69
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 01A089B0A9217EE964DAC99A3D0B1DD1AE24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 1772
Signing time: Thu 10 Sep 2026 05:00:51 +0000
Manifest this update: Thu 10 Sep 2026 05:00:51 +0000
Manifest next update: Fri 11 Sep 2026 05:00:51 +0000
Files and hashes: 1: C3nc48r2b2USpSkgOVzgsEQF2h0.roa (hash: kvFI72ZsGMqBnEvEAYRTWIp6gxPL8rac8rSJwcsVy0w=)
2: XaIcpqpb27hhGRIZ8h_xuzKRev4.roa (hash: pQLbKPAj3ndWd5qjjlikkIwvz29S32Fkmehgv5Ouuf0=)
3: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: HRE3PVBqcLkkLrjpAy27nE6FLOjJjuQUlj6OgRDn25Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b0:a9:21:7e:e9:64:da:c9:9a:3d:0b:1d:d1:ae:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Sep 10 05:00:51 2026 GMT
Not After : Sep 11 05:00:51 2026 GMT
Subject: CN=014f3c57458be3f77ee96381b5044dbca261cf69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4a:62:1b:db:42:0b:b6:84:7a:db:b0:5f:66:
69:2d:a5:3e:3a:49:fb:89:39:5e:ea:1e:c2:59:86:
b6:a6:f8:60:8d:09:ae:42:68:5b:7c:96:41:f7:83:
98:c3:81:08:f1:0b:e0:05:fb:14:9c:11:1c:c0:af:
4c:60:e0:f2:31:b6:1e:58:0c:f8:9b:26:61:ee:97:
ab:28:fb:6e:23:40:0f:dd:68:fd:60:9f:9e:1b:31:
c8:01:24:4e:2b:77:84:cd:29:9e:f0:4b:ee:43:4a:
2a:99:04:f9:69:eb:0c:df:07:42:44:f2:6b:33:ce:
0d:e8:2d:c2:5c:95:cb:a0:d7:41:a9:35:c4:81:0a:
1c:13:01:dd:93:d1:a3:68:b7:ed:e4:e2:99:2a:f9:
2b:e4:32:9f:d0:20:f2:b2:71:af:65:f3:13:c4:16:
0f:ba:3e:32:d6:68:1a:69:b7:00:6e:ea:1c:26:37:
2a:b5:8c:58:89:89:7e:31:56:e0:8e:d2:7c:4a:e5:
1a:51:c4:e9:df:df:25:25:0e:11:4a:e1:58:86:57:
3b:3a:59:4b:ba:5f:fd:48:37:59:41:9e:ad:85:51:
cf:83:44:54:a0:6b:65:bd:8b:55:10:c7:31:51:46:
05:de:e7:25:ba:fa:ab:9a:ac:0f:d1:fe:05:f6:07:
ae:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4F:3C:57:45:8B:E3:F7:7E:E9:63:81:B5:04:4D:BC:A2:61:CF:69
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d3:66:91:4d:c0:50:6d:af:4c:ec:cc:2d:6a:39:b3:b1:9d:
09:55:08:0b:17:1d:86:8e:66:4e:f2:df:cf:4b:13:b9:59:54:
26:e9:e7:a1:65:1b:4c:20:aa:af:84:f0:c7:ee:6e:b1:dd:06:
9e:ff:f4:86:64:04:36:35:dd:e2:6f:14:61:85:9f:cc:b8:53:
3b:b5:45:66:35:56:fa:49:2c:78:18:d9:53:2a:65:13:9a:40:
c9:0d:90:9c:c8:29:0e:64:d2:cc:66:ba:76:b1:0e:1f:8d:20:
b6:30:33:67:e7:a9:4c:f2:51:89:45:23:c5:5a:de:e2:3f:9e:
ef:3e:b4:1e:fd:39:c9:a0:86:91:b4:a2:20:c3:6b:fc:65:08:
19:17:f2:3d:dd:c8:4f:24:c3:32:a2:f7:d8:b6:f0:ae:1c:a9:
89:c5:96:6a:14:ee:f4:32:e8:16:5e:d3:d4:28:e5:d2:4a:b0:
3a:72:94:07:77:c9:29:0c:48:a1:b8:01:15:be:fd:4f:85:dc:
4f:50:e5:f9:b4:2d:2f:71:34:10:9d:65:57:eb:f3:a5:78:11:
f7:fd:72:ad:cb:4e:85:d4:68:be:2a:6b:32:e0:e8:06:46:71:
45:ba:d6:c6:3f:1c:07:f2:6f:b1:71:0f:16:c1:f0:1e:3b:b2:
9a:87:98:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:19:21 2026 by rpki-client