Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
File: YYzEbXHnhIl4SIlh17UauhVB88Q.mft (raw, json)
Hash identifier: +38TDex+zcVwc3PM74zUCN6SP0EW7aelZxLmN4PPhZ8=
Subject key identifier: E8:1D:1F:C9:69:6E:7D:66:A3:57:16:EA:D9:9A:73:C7:9D:F7:89:AE
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial: 01A08A8CB8F9F4973278A6D59FBE8564B96B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
Manifest number: 0951
Signing time: Thu 10 Sep 2026 09:01:13 +0000
Manifest this update: Thu 10 Sep 2026 09:01:13 +0000
Manifest next update: Fri 11 Sep 2026 09:01:13 +0000
Files and hashes: 1: 6rOwkiiwPMSDxttw83Oe03eKzrw.roa (hash: TUFJPMQ+agFJKUgYR8BN1zSkPDdsC9rfa9hlgnJj66I=)
2: NXzgYU-C6vYUH9piPE5IVfQUDws.roa (hash: 7H+XPAkztFsa8CV9iN0q4tQ4EIhX9svKu9hI+JunkN0=)
3: YYzEbXHnhIl4SIlh17UauhVB88Q.crl (hash: IUMKsi9aFL3FwntUfCBq20OAy20qx1uS2aei4ujvktU=)
4: q5tcHMC53hVldl9vmJfxMoSPLXw.roa (hash: iSEcJDYplK+Xu/KP8Xlxc71CNA1iyM93A92Fn+WGFtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:b8:f9:f4:97:32:78:a6:d5:9f:be:85:64:b9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
Validity
Not Before: Sep 10 09:01:13 2026 GMT
Not After : Sep 11 09:01:13 2026 GMT
Subject: CN=e81d1fc9696e7d66a35716ead99a73c79df789ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:4d:eb:42:f5:51:bf:d5:47:72:1a:3d:94:
22:c9:2d:df:76:82:b6:6a:e0:e3:bf:74:a9:c9:bf:
af:91:c0:01:a0:09:a9:f5:0e:3d:54:a6:91:26:59:
8c:89:3c:9f:0b:d4:bf:ba:d0:0c:9e:8d:f5:08:1e:
af:eb:95:2a:ad:c6:6d:22:49:2d:39:69:80:04:2d:
d7:71:ff:72:43:cc:63:0b:e6:10:23:f4:a3:75:ed:
25:48:af:a4:f5:e8:48:e2:d0:95:e5:20:c9:a4:92:
30:9e:e6:f7:3b:ce:b0:f8:82:af:d0:de:8c:ec:0a:
50:92:e9:f1:36:24:21:f6:8d:cc:ce:cb:31:0f:fc:
07:98:45:aa:0d:fe:4a:7d:b5:4d:e4:49:ce:82:c7:
67:a1:fb:d3:07:28:17:e4:4d:82:26:8f:b1:a2:2d:
a7:3d:75:a4:ac:10:37:a1:ee:07:6f:08:95:bf:9f:
56:9c:af:0f:c0:61:62:ba:c3:23:1c:56:61:92:be:
af:ee:05:e5:05:ce:d0:1d:3a:8c:2d:11:e7:81:55:
1c:d5:4e:e0:28:85:2b:d9:63:8a:63:e2:24:ce:8f:
07:84:fa:e9:19:cd:bd:77:63:f2:db:ad:58:46:7b:
e7:d5:60:e7:0d:fb:d5:d1:e1:08:1f:f2:cb:c7:27:
a6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1D:1F:C9:69:6E:7D:66:A3:57:16:EA:D9:9A:73:C7:9D:F7:89:AE
X509v3 Authority Key Identifier:
keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:35:50:86:99:e9:3e:1c:19:e9:af:35:12:11:24:89:26:e1:
3c:9e:a5:4c:54:6b:ef:54:eb:a4:a6:60:70:22:bb:8f:95:a5:
e1:51:c6:d7:d5:5a:09:66:96:ba:26:43:b9:9b:54:c7:ba:22:
df:96:c2:79:f3:95:7c:65:e9:ee:3f:4c:d0:69:b7:63:85:02:
0f:cf:ce:06:24:0b:7a:eb:38:2d:1d:33:c3:5e:65:ff:ff:ed:
37:3e:0b:ac:0c:32:31:c9:87:27:49:89:ed:ef:db:fd:96:f3:
7a:23:42:92:a4:cb:91:ce:e1:c0:69:00:47:bf:d9:e9:87:8e:
ea:9e:13:d3:cb:fa:a0:42:8e:e7:e8:35:eb:f7:c0:02:5a:e0:
18:26:23:15:c7:2f:2e:fc:a4:77:4e:ad:3d:d1:cb:5b:c8:12:
91:6a:9c:ae:a4:67:17:de:38:ea:54:ce:e5:0b:36:27:3a:bd:
9e:3e:69:ad:e8:f2:df:99:62:f6:20:b9:bd:7d:72:8c:2a:b4:
55:75:23:e3:26:9b:ba:23:8f:d1:8c:71:3e:f8:54:90:b2:5a:
10:39:5a:83:a8:ad:01:ab:3c:07:e3:9e:24:36:0a:ad:10:76:
01:6e:35:1e:cb:5e:8b:01:9e:3f:a2:71:46:28:81:0c:89:a2:
ac:e7:17:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:23:41 2026 by rpki-client