Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json)
Hash identifier: pv7n4AahLmaoAGTo6z4UcKkRynLBOwD5fBzKet7sLL8=
Subject key identifier: 6A:1F:C8:C3:66:8C:44:5E:0E:A7:BC:F2:2A:5D:46:89:2D:EF:FF:BA
Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Certificate serial: 01A0D614C55016E33CE5271B4863D2F17D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
Manifest number: 04C6
Signing time: Fri 25 Sep 2026 01:01:20 +0000
Manifest this update: Fri 25 Sep 2026 01:01:20 +0000
Manifest next update: Sat 26 Sep 2026 01:01:20 +0000
Files and hashes: 1: 9ZaI8P7W_rtc492x3ky7rPk83Y8.asa (hash: MzLmuEES291ExAirdiJ6+pNE6IoqMZTiHB+WGFxcNOs=)
2: iGdr3YLiLVQi6j5DQ01DGKsu5ss.roa (hash: h6FlbN1+Nek1LKhgDeDKXC7AdnM99VdSyR1ScXlrIKc=)
3: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: jIyrPjV1Zy7T3b3eXUvgCprV6ewgxG5nJdmzg+Cn934=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:c5:50:16:e3:3c:e5:27:1b:48:63:d2:f1:7d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Validity
Not Before: Sep 25 01:01:20 2026 GMT
Not After : Sep 26 01:01:20 2026 GMT
Subject: CN=6a1fc8c3668c445e0ea7bcf22a5d46892defffba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:37:fe:2d:c1:32:5a:85:b8:cf:61:38:ed:c0:
c6:db:8b:39:f6:b3:c8:37:ac:37:84:78:32:37:18:
f0:c6:4d:81:0a:fa:e7:f4:2e:d8:f6:3b:36:65:64:
3d:0e:59:05:78:0a:4f:84:bc:5a:93:09:d5:57:0b:
92:76:dd:1b:19:cc:87:be:f5:33:9f:52:1f:97:f8:
48:7a:72:77:b5:a2:af:be:e7:0e:07:e8:9d:4a:e2:
4c:13:15:a1:f9:c1:61:8d:8b:b0:a6:5d:d6:50:dc:
c7:47:c1:dd:1d:6b:15:d5:f2:fa:8e:03:e2:c2:6d:
6c:01:5f:f9:ae:18:e7:0b:b6:9a:3b:9a:6a:6a:be:
12:f2:4c:11:3d:2f:04:80:b0:95:97:76:44:a7:f3:
12:23:84:1a:ec:73:fc:39:78:bc:c0:de:20:f1:d4:
82:00:ea:1c:b8:c7:a2:f5:13:88:c8:79:7d:1c:62:
fb:c7:d5:e6:98:b4:47:f8:5f:98:bd:60:e2:7d:53:
60:35:82:75:4f:be:21:42:f4:ee:04:57:8b:72:6c:
40:57:80:9f:dc:8e:d1:c1:b8:51:00:f7:c1:5e:ec:
7a:8d:88:cd:60:1e:a5:42:84:b8:84:8b:41:7b:69:
5a:3d:1a:34:e3:2d:36:a4:18:3d:66:53:b6:2e:b3:
1c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1F:C8:C3:66:8C:44:5E:0E:A7:BC:F2:2A:5D:46:89:2D:EF:FF:BA
X509v3 Authority Key Identifier:
keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6b:bc:78:a9:cb:e0:bd:7a:81:ce:0a:2a:5d:be:11:87:c8:
d8:e9:93:c8:e1:be:c7:ba:49:13:06:96:d8:97:0a:ee:54:85:
8a:dc:8d:18:49:88:40:e0:26:2a:83:74:b5:c3:49:17:aa:ed:
94:e6:55:8f:e1:7e:36:3e:76:ef:b4:a4:b7:71:2b:60:89:ea:
c7:aa:e8:79:3c:6a:cf:2f:e0:e4:21:0c:87:65:7f:09:36:00:
25:b8:9d:70:94:70:cb:81:56:1f:61:e8:ce:43:ee:fc:06:9e:
b9:4d:9d:80:94:fd:4d:6c:95:23:3d:4f:3e:97:c0:f6:7c:6b:
d3:f2:9f:ac:f1:ea:07:e9:48:d1:69:7a:d9:f2:d8:87:c0:7c:
17:c9:a5:d4:f5:1a:cd:f1:93:f1:1f:74:97:98:c1:91:d9:6a:
a4:51:28:a1:84:3b:50:06:a9:9c:84:cf:8e:cd:b6:28:6e:27:
13:b7:56:ad:ec:dd:db:7a:98:52:8a:3c:dd:8a:45:0a:4a:dc:
17:37:dd:29:4f:65:5c:5c:14:81:08:36:4b:10:79:7e:62:93:
0d:c7:f5:3e:fa:d5:a7:05:53:b4:77:c0:de:0b:27:05:14:47:
2e:77:28:62:a0:39:31:ac:0f:39:8f:e0:d9:b4:c9:05:fa:aa:
e7:df:e5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:14:37 2026 by rpki-client