Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: bGp/MQssnajcstWuezb0Wh6LNNvxr3WBWA8lzRtZkBU=
Subject key identifier: 40:7D:30:DD:7F:0C:E7:97:2B:FB:A4:3F:0D:70:B8:B5:C5:0D:8A:FE
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 01A0D9F1B74646C24B0B1AA95FBC4B257056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 126C
Signing time: Fri 25 Sep 2026 19:01:31 +0000
Manifest this update: Fri 25 Sep 2026 19:01:31 +0000
Manifest next update: Sat 26 Sep 2026 19:01:31 +0000
Files and hashes: 1: 3ExD7nKcCYNGR68ATw2vAixFfPw.roa (hash: PRfZSceh3jh1FTBUXpKPdAPCRhio/qZFjdbYjEajKSY=)
2: EyM4wivbpkVOKedhB97D1lcXuLE.roa (hash: ztSlxeB82WQ5Ip3+c+gguWX+u1grG8UgGeYQslXQHlM=)
3: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: qA8HVxAEmcPGD3CJKeR5RYon+3CDyoAc6mwYnlnK8TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:b7:46:46:c2:4b:0b:1a:a9:5f:bc:4b:25:70:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Sep 25 19:01:31 2026 GMT
Not After : Sep 26 19:01:31 2026 GMT
Subject: CN=407d30dd7f0ce7972bfba43f0d70b8b5c50d8afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:08:5d:fa:2c:c0:c4:8e:f0:ca:76:f1:e3:
b5:3a:81:c9:87:25:03:fe:c3:bc:5d:53:c3:2c:b6:
be:fa:7a:bb:31:48:b5:e4:76:52:cf:f6:01:ed:21:
2b:73:71:52:2a:c7:b2:20:32:62:88:3e:44:5c:3f:
b5:7d:a7:7f:5d:85:0b:f1:cb:a8:c5:e5:b5:9b:65:
f0:b4:59:1e:91:4e:f5:da:cd:e5:bb:3b:b7:29:69:
e4:3b:63:2e:95:8a:8b:9a:5d:1e:c3:c7:53:3c:2a:
bb:9a:98:37:e3:76:ee:9e:cb:b3:2d:8d:5f:e2:58:
8e:11:5d:21:e0:aa:be:9a:84:8c:9f:2e:b7:ef:0e:
52:6f:b4:78:ab:9b:45:d5:51:d6:00:33:ba:f3:6d:
9d:6c:da:c3:d5:3c:96:49:07:c4:e8:f9:c7:52:0f:
0e:83:9c:81:bd:3e:2b:72:f5:2a:d6:d6:79:00:1e:
2b:54:e1:6b:e2:f3:66:64:52:2b:32:d5:52:9a:e2:
b7:44:20:88:81:97:65:73:31:44:b3:f4:c0:00:aa:
92:14:e6:b5:7d:92:eb:62:37:ce:c4:52:cb:fe:b9:
83:2f:f6:6c:1f:e2:b4:25:9b:61:1c:0a:7e:f7:c4:
79:0a:8c:71:07:f4:54:f8:6a:e1:13:9b:8b:29:5e:
59:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7D:30:DD:7F:0C:E7:97:2B:FB:A4:3F:0D:70:B8:B5:C5:0D:8A:FE
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:5d:2b:73:91:be:1e:6b:65:91:36:43:a5:6f:00:60:f8:2a:
5e:da:47:e9:e0:c4:bd:3f:d3:0a:51:3f:84:1f:69:d4:e1:5a:
f5:29:ad:71:b1:70:96:88:fa:0e:bb:81:80:93:34:d7:f6:a2:
ca:92:6a:cb:d6:71:28:cb:07:7f:f8:08:49:b5:6a:76:ce:89:
4b:d0:ac:5c:98:48:7e:c9:53:7f:6d:e6:67:ae:aa:fb:17:0b:
ae:79:df:3b:4e:6d:82:69:6e:3b:72:45:b9:91:37:ba:58:6c:
fe:e4:09:fb:da:53:44:5a:67:e1:ce:c1:68:02:b8:52:91:15:
34:6d:a1:2f:67:b9:95:1f:36:89:fd:f7:c6:87:ac:46:ad:d9:
a8:38:d6:d6:f8:34:69:a0:58:ab:e0:26:69:7d:94:21:1c:94:
c3:f6:0d:a4:8d:91:ec:2a:01:e0:7f:13:c9:48:86:f8:3d:06:
f1:34:33:61:4d:8c:b5:2c:d4:5f:50:d3:89:9e:2a:90:bd:d3:
6c:57:7a:d3:2a:63:93:4f:de:a8:6e:bc:04:a2:e5:65:2f:fa:
94:02:a5:8c:0b:25:4c:e8:d1:6c:a4:ab:99:5b:9e:68:4f:1d:
51:9d:64:3a:81:96:a5:04:1e:0d:11:1a:57:f7:cc:d1:38:88:
a3:bd:fc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:30:18 2026 by rpki-client