Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
File: YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft (raw, json)
Hash identifier: Yqng5//w0f+TlnsrzXCO4QR0SNxbnkCKoj9Q+5NKlu0=
Subject key identifier: 7F:84:0B:67:54:25:62:45:4C:24:49:81:67:04:97:09:E9:03:61:6A
Authority key identifier: 60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
Certificate issuer: /CN=602be661e57c14659a608e9f6be605d6250047fc
Certificate serial: 01A089429222DB6DFBE34A2AE0609937D4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
Manifest number: 14E4
Signing time: Thu 10 Sep 2026 03:00:36 +0000
Manifest this update: Thu 10 Sep 2026 03:00:36 +0000
Manifest next update: Fri 11 Sep 2026 03:00:36 +0000
Files and hashes: 1: SInBdKPTOXk0wp91e_uLGwkZlPc.roa (hash: mCWjzW4jA5/GkCROqCsHaTMu9Y+gjKYJmIB2cmxywcA=)
2: WrTCSuQUvxPpAUF0e5vDgZhjo64.roa (hash: +oAgf/l41Uj9PIOaXoHSTwcfDAsCiAHjtNGVMj4O9AY=)
3: YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl (hash: /8hKaUtNqXC3zuuI1B1tBlWk3tDANcLg54kS61Gn7ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:42:92:22:db:6d:fb:e3:4a:2a:e0:60:99:37:d4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602be661e57c14659a608e9f6be605d6250047fc
Validity
Not Before: Sep 10 03:00:36 2026 GMT
Not After : Sep 11 03:00:36 2026 GMT
Subject: CN=7f840b67542562454c24498167049709e903616a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:02:fb:fd:bd:00:b9:15:d2:60:b7:df:43:
cf:be:b5:76:c7:d3:c8:22:37:07:3c:12:71:b5:61:
37:19:be:d3:9b:32:fe:1c:77:6f:14:af:30:ec:2f:
d7:26:0f:c6:f1:1e:ce:3a:64:b9:53:0e:19:ce:13:
7a:2c:6c:c0:f8:3d:46:b6:14:cd:03:f8:19:44:f2:
24:dd:8c:1d:99:6f:c9:6c:29:5c:09:02:e1:77:cf:
00:e7:a3:be:a0:17:97:b0:41:fc:48:3a:ec:d9:b3:
98:a8:99:42:ad:b3:fd:d7:f3:8b:ff:68:1c:bd:be:
cf:70:20:b9:3d:2a:6e:39:5b:36:62:6a:b4:05:da:
16:1a:85:56:ab:49:24:1f:1a:e5:06:3e:09:91:e1:
c4:48:af:f9:05:18:f4:79:7a:0c:ff:5c:0d:65:0f:
ff:34:66:0a:3f:89:bc:0e:20:3f:8c:31:2c:2d:02:
2c:f1:d6:78:f3:58:c5:87:bb:31:7c:e8:f5:11:f1:
d4:fb:06:e7:56:8b:1a:b7:cc:66:a9:45:9d:64:9f:
73:28:fc:4d:28:b1:bc:85:eb:9c:a8:a8:76:b1:5e:
2c:89:0a:3f:27:00:2f:63:b8:b3:42:92:71:c3:b8:
72:e2:21:8d:59:c6:78:9f:57:ba:27:56:21:6d:f8:
94:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:84:0B:67:54:25:62:45:4C:24:49:81:67:04:97:09:E9:03:61:6A
X509v3 Authority Key Identifier:
keyid:60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:6c:5f:eb:c6:20:8e:51:a6:88:14:2e:48:13:bb:a4:45:e0:
f9:7b:1e:fa:8c:bd:bb:14:d8:4e:ee:df:63:e1:ce:e7:06:c0:
a4:8f:ac:a9:b7:c7:29:7b:00:90:6b:62:d1:70:db:57:1d:f1:
06:a9:49:e1:b0:09:8e:fb:1c:62:2c:ab:69:57:53:2f:c7:8f:
20:5a:55:2d:c5:a6:9c:86:c7:9d:ae:e3:fd:73:8d:af:32:ba:
04:cc:54:70:47:34:bd:84:cc:45:16:c4:60:0b:0d:a9:25:ee:
ad:99:89:d4:2d:6a:41:cf:f2:a2:b8:3c:6f:45:4e:86:d3:49:
09:73:79:85:ff:d6:22:b4:0a:94:a9:32:0b:cd:39:0a:41:23:
2e:ad:6d:36:fd:30:8e:3b:7c:99:d8:8d:99:64:dc:55:b4:1c:
e1:80:35:85:4f:79:e0:bf:7c:61:c9:e5:a0:d5:60:45:96:3e:
45:3b:55:25:af:ae:52:cc:cc:41:2d:30:ec:94:74:0c:68:b0:
71:d9:67:4b:9e:59:d7:8a:0b:3a:b7:7a:db:ea:8d:60:7b:19:
29:b1:5e:72:03:bd:c5:4c:f5:17:0c:50:8d:ca:dc:5a:88:32:
90:83:44:f0:65:e6:2c:71:51:44:ad:25:ec:ad:c1:57:cd:dc:
e0:6e:ec:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:45:48 2026 by rpki-client