Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
File: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft (raw, json)
Hash identifier: 6xi59XDyq+MijiRVbg2IVuQVSK/LBemduWEWa+2V8h0=
Subject key identifier: F2:D1:D0:EC:21:80:33:F6:88:29:4C:4E:D5:88:B2:CA:81:13:D4:F2
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial: 01A0E3D0DA21A4B2CB1A49C80ECB0958C396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
Manifest number: 0A92
Signing time: Sun 27 Sep 2026 17:01:50 +0000
Manifest this update: Sun 27 Sep 2026 17:01:50 +0000
Manifest next update: Mon 28 Sep 2026 17:01:50 +0000
Files and hashes: 1: 1xbn_UMCw0INiad24Fz-EfLf1Gw.roa (hash: SZrNeUwfQoqqElnDWbZPqxb5PbXGACF+9AzBOt+xfa8=)
2: 6XExm7Uo-EU0Ms0tsb7xKnyJkVk.roa (hash: BWgqT1gKxehU5OIENtOQqrP4y0cmP4jYKvHGk1A4LAc=)
3: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl (hash: iJUrhVsVXTmuuXPZMU9RHSFcbU+lKHEzMJnkKN9DeIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:da:21:a4:b2:cb:1a:49:c8:0e:cb:09:58:c3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Validity
Not Before: Sep 27 17:01:50 2026 GMT
Not After : Sep 28 17:01:50 2026 GMT
Subject: CN=f2d1d0ec218033f688294c4ed588b2ca8113d4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:e6:2c:d0:38:0d:55:35:31:83:d0:2b:bb:
2a:e1:e1:13:7c:f5:77:f5:cb:1c:72:34:14:e3:73:
fe:61:f8:8d:15:9b:64:79:67:c2:1b:d0:d9:24:05:
0e:e4:08:d5:b4:40:71:0e:43:43:b2:79:37:89:76:
9f:1a:7d:53:2d:04:33:e0:20:db:c5:59:79:cf:dd:
ab:a5:63:ae:09:a2:c4:6d:42:64:1e:f2:e8:7c:2a:
18:df:8c:09:8f:75:3c:c3:52:ee:32:bc:8a:d2:c0:
fa:58:da:a3:09:98:e0:43:db:b9:62:95:a1:8c:17:
69:e2:18:15:d6:55:a7:ef:70:7f:74:bc:73:75:1d:
a2:8a:c5:7b:03:6e:93:90:48:b1:6a:03:d2:cd:5f:
4b:65:57:5b:f1:6f:fa:a0:97:1e:b3:65:6d:d2:a7:
1c:a1:ba:da:c6:93:f8:f0:0a:15:23:80:a1:2f:ee:
f0:fe:09:2a:37:75:ea:93:3c:fb:b5:08:94:2b:e7:
99:d3:58:1f:18:7a:86:58:bf:09:d6:75:74:c4:80:
b7:05:ab:e1:c3:36:ec:f7:6a:6a:91:94:42:87:a5:
7b:1e:29:76:f2:4e:ef:24:65:fe:08:12:5b:86:89:
2f:43:46:b1:25:75:f5:ac:bc:05:42:f6:40:86:74:
e0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D1:D0:EC:21:80:33:F6:88:29:4C:4E:D5:88:B2:CA:81:13:D4:F2
X509v3 Authority Key Identifier:
keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1e:f9:07:75:42:fd:29:f6:d4:43:07:fd:aa:5b:5c:05:cf:
87:35:fa:1b:ab:7c:a5:2c:12:7f:13:59:a0:1c:39:b0:8f:2e:
98:cb:5e:5d:4b:c4:de:31:59:d0:41:9e:29:a5:ca:5c:f1:d0:
64:3a:f1:6b:17:f5:b2:bf:30:9c:fc:8f:ab:f7:6a:40:6c:51:
4b:99:5b:19:53:90:ab:84:55:87:a6:d8:c5:f6:14:6a:ed:82:
2e:e9:61:65:4a:a7:d8:bf:49:8e:a0:7c:f8:45:e5:6e:f4:cc:
52:3c:26:f6:41:d8:0f:80:27:0f:e0:4b:e8:2c:f3:46:ee:29:
60:7f:c3:fc:f8:66:19:28:54:cf:fb:aa:e0:5b:61:ad:1f:f4:
3a:11:24:b4:39:dc:01:07:84:fa:25:5e:8c:b7:4b:98:8e:43:
c5:26:e1:3f:84:b1:dd:9d:c4:19:70:6c:3c:cf:a2:be:f9:dc:
82:0b:61:c8:65:1d:32:32:df:ee:a9:14:45:13:4d:41:01:fc:
9b:07:f1:70:14:57:81:8f:62:c9:28:ba:35:8f:00:d1:59:f3:
df:1a:37:07:bd:1d:4b:4f:e4:67:25:85:c2:7b:c7:89:51:c0:
f0:76:1f:67:eb:3d:a1:13:a3:cc:43:e1:ac:d7:5a:c6:8f:55:
d0:2c:51:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:34:57 2026 by rpki-client