Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
File: YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft (raw, json)
Hash identifier: ytMn7fASEHOmYaE8zvV4wiq9x07ZjIJxOAtFwi+AOiw=
Subject key identifier: 1F:C2:94:EE:C1:1D:D6:FA:B3:70:BB:DA:4E:C1:D8:43:6D:1D:4B:E4
Authority key identifier: 60:2C:CC:74:B4:FD:14:DA:17:BD:6B:69:BA:9E:19:C2:48:97:F3:3D
Certificate issuer: /CN=602ccc74b4fd14da17bd6b69ba9e19c24897f33d
Certificate serial: 01A0E1741FAEA5123D3F2DFB9E1689407F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCzMdLT9FNoXvWtpup4ZwkiX8z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 06:01:18 +0000
Manifest this update: Sun 27 Sep 2026 06:01:18 +0000
Manifest next update: Mon 28 Sep 2026 06:01:18 +0000
Files and hashes: 1: YCzMdLT9FNoXvWtpup4ZwkiX8z0.crl (hash: LhmXdfjdgw6Z6e/b1nxPFC0N724HAfxBTa0OjEpDhTI=)
2: yvqKASYvxT3MxhtOS5-emaUxBc8.roa (hash: tVq+tnubXS3rvDyuKQj8/nMobzt5kNaE/XUuamGgdBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCzMdLT9FNoXvWtpup4ZwkiX8z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:1f:ae:a5:12:3d:3f:2d:fb:9e:16:89:40:7f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602ccc74b4fd14da17bd6b69ba9e19c24897f33d
Validity
Not Before: Sep 27 06:01:18 2026 GMT
Not After : Sep 28 06:01:18 2026 GMT
Subject: CN=1fc294eec11dd6fab370bbda4ec1d8436d1d4be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:65:41:17:09:b6:5d:86:1c:84:b2:6d:cd:
a1:39:b6:6d:0f:6f:82:d0:1d:da:f6:b9:14:90:ca:
2e:a6:31:f4:44:ee:4c:6b:3e:e4:05:6c:51:cc:bb:
4d:1b:21:39:ab:d6:93:83:40:fb:bd:fb:b2:cf:de:
93:28:ce:e3:b0:6e:02:73:50:37:16:63:4f:50:de:
29:17:4a:7d:93:3e:b6:df:62:e8:cd:64:d9:af:c5:
a6:3d:47:8d:33:2d:bd:87:46:92:e4:01:50:0e:be:
35:d5:1b:23:39:f3:c4:3f:2b:85:dc:00:f5:31:52:
3e:4f:90:98:ca:c1:64:d6:59:1c:41:87:76:fe:11:
44:1a:9d:ca:03:bc:a0:04:93:7d:0c:54:b1:bc:d7:
4b:5a:62:ff:28:ea:dd:2f:6c:d6:9a:4d:db:9d:37:
6b:56:04:06:26:f4:bb:12:23:52:d0:d5:87:f2:42:
98:a6:50:fa:64:d8:e8:a8:9f:28:ef:7a:b5:3a:00:
8d:de:50:9b:3b:26:5f:49:8a:65:97:20:55:ed:d3:
c2:23:6d:1b:87:c6:fc:1c:ae:fb:87:f5:7c:3c:8e:
7d:fb:dc:2a:00:fd:71:9d:00:b4:92:6e:68:d7:85:
e3:52:a1:45:03:ab:29:c6:38:03:0e:99:52:c2:f6:
4d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C2:94:EE:C1:1D:D6:FA:B3:70:BB:DA:4E:C1:D8:43:6D:1D:4B:E4
X509v3 Authority Key Identifier:
keyid:60:2C:CC:74:B4:FD:14:DA:17:BD:6B:69:BA:9E:19:C2:48:97:F3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCzMdLT9FNoXvWtpup4ZwkiX8z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:77:c9:3a:8d:b8:bb:38:f1:a1:63:4d:ec:9c:3c:15:c8:30:
eb:6c:92:ff:39:68:83:b5:1a:a4:36:a0:09:62:08:e5:ff:76:
ef:64:67:c4:e3:03:f1:45:f0:cd:d1:65:cd:59:24:bd:02:4a:
49:67:d7:2f:a6:d5:4b:b5:57:7a:04:62:ac:e4:ef:01:2c:7a:
17:54:cf:23:ae:48:c6:97:ed:3f:be:c6:34:22:4d:f8:38:08:
08:0d:6c:ac:60:09:d7:99:86:91:09:bd:61:4f:f1:72:34:1d:
8c:90:62:53:2b:9f:da:fb:e3:e9:76:47:0a:8f:68:a9:22:6a:
d7:12:bb:88:c8:de:da:c7:6d:56:8d:75:d5:3d:40:47:71:d6:
42:4e:3e:89:4a:94:b4:05:ac:eb:e4:2f:f7:d4:29:b8:be:e2:
6e:22:5a:f8:1b:9c:04:00:b1:b7:fe:42:83:19:45:b7:36:69:
f9:52:35:4d:76:eb:d3:b4:ca:b6:19:9d:14:74:2b:2a:76:2d:
ba:75:9b:c7:36:77:2f:a7:82:cb:a3:e3:9c:a5:99:26:d7:a7:
f3:04:59:56:76:10:b1:71:7e:b8:51:bc:ac:fd:f0:78:b2:c4:
78:e7:0a:80:14:09:e8:c8:4d:d0:1f:9b:45:ba:26:03:6f:e1:
0a:d2:08:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:16:30 2026 by rpki-client