Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
File: YYcWngMONyXW60eKMn5r3za-jS8.mft (raw, json)
Hash identifier: l9WeQqi+7irRpOshrRR5emyIu2gfZIbNnKrIwneOsoA=
Subject key identifier: EB:28:EC:7D:B0:F8:B0:9D:34:9C:11:94:F2:22:99:E2:BF:C9:4C:D0
Authority key identifier: 61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
Certificate issuer: /CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Certificate serial: 01A0CFDAB7D3B828BCE3F1AB9CEF93953BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
Manifest number: 0461
Signing time: Wed 23 Sep 2026 20:00:12 +0000
Manifest this update: Wed 23 Sep 2026 20:00:12 +0000
Manifest next update: Thu 24 Sep 2026 20:00:12 +0000
Files and hashes: 1: Vx87YxHA-7meaIkhnN1x3tZeAC4.asa (hash: zZpxTKgALrpqRT44gkUfvltbIqTMiL/2H9KqVeHZxmM=)
2: YYcWngMONyXW60eKMn5r3za-jS8.crl (hash: Y/Ovf0DjDqYU0srSR7CpN44fMpyi1jJ/yeIUCILh99w=)
3: dlAKs2OGLWJirE63ZpdfiOJ1IDw.roa (hash: 1fH4y0wj0PpFc5LsMAZ3oXLqRp58JujDDG0+JToDmTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:b7:d3:b8:28:bc:e3:f1:ab:9c:ef:93:95:3b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Validity
Not Before: Sep 23 20:00:12 2026 GMT
Not After : Sep 24 20:00:12 2026 GMT
Subject: CN=eb28ec7db0f8b09d349c1194f22299e2bfc94cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b7:d2:02:c8:9f:f0:5c:57:fe:2d:e1:40:3c:
cd:78:29:9e:3e:3e:a5:bb:8a:e4:70:de:4c:08:aa:
03:c8:96:bc:19:06:5a:3b:46:c4:70:00:4d:0e:12:
25:42:df:34:d3:e5:51:5c:06:43:65:7c:59:25:4d:
55:96:ad:1f:5e:80:3d:6e:a0:a7:12:32:a0:d7:1d:
0d:23:a9:92:91:5b:c3:41:a6:2f:d8:fd:66:2d:7d:
5f:f6:b6:65:4c:d1:ae:b9:97:cb:e6:b7:ce:d9:8a:
cd:70:29:7b:f3:93:59:44:1c:88:5e:28:70:66:0d:
ce:e9:9f:b9:55:1e:8a:b1:9e:a2:48:fc:ea:4b:df:
61:19:fd:a4:d4:a6:b7:5b:b2:2e:d3:a7:c4:38:11:
d8:a1:a3:d7:25:54:98:d5:5d:48:ba:14:ab:67:b0:
39:54:0a:92:bc:dd:be:b0:64:44:00:0c:0f:4e:3a:
7b:84:bd:8d:2e:21:88:b4:26:6a:ed:45:af:b6:59:
9f:b2:a6:8b:a9:0c:c9:93:9a:fe:b2:f7:b7:c7:44:
5a:25:41:10:c6:6d:5b:65:6e:66:3f:b2:89:87:ad:
49:71:05:d6:72:36:86:52:c2:c1:b0:87:88:2a:f8:
42:d9:d4:16:1d:57:dc:06:aa:77:01:20:0d:3e:e7:
35:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:28:EC:7D:B0:F8:B0:9D:34:9C:11:94:F2:22:99:E2:BF:C9:4C:D0
X509v3 Authority Key Identifier:
keyid:61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e6:1a:d5:a3:23:96:43:10:d0:92:8c:92:aa:a8:64:24:33:
e4:50:6f:36:a9:5d:5f:19:79:b1:84:4c:b6:3a:31:cd:6d:67:
b4:cf:88:64:18:23:72:cf:59:22:3c:46:61:02:c4:ff:f6:6e:
1f:81:6c:75:07:90:ae:b6:6c:2e:f4:37:5b:16:6a:31:6c:51:
d4:b9:95:cd:86:2b:c7:69:55:01:36:47:87:ce:77:15:43:d9:
3c:63:ea:1d:4c:e2:c1:e0:a3:31:db:58:9d:82:dd:55:09:89:
d3:40:c0:57:d4:30:c8:ca:c5:69:0b:1b:6f:66:3e:27:7e:0a:
19:ea:4c:84:62:25:f2:f1:a6:b7:d1:a7:6a:42:7f:30:6c:f5:
e0:81:83:f3:31:02:5b:67:f4:c0:c6:13:25:56:07:86:e4:8c:
85:dc:33:77:32:36:07:52:0e:59:ab:02:bd:28:b1:0e:fd:61:
b0:8d:4a:fa:94:02:74:06:81:5f:17:db:27:58:0c:f1:29:ba:
86:eb:d5:ac:66:db:81:b0:eb:ee:f8:22:d4:07:e2:bb:fb:88:
4f:0c:44:14:10:53:10:f7:e7:f4:4e:e3:0b:14:24:af:cb:df:
0c:7a:65:a8:3c:18:44:56:69:f9:6e:90:0a:0b:a1:63:9f:3f:
0d:ea:8d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:55:48 2026 by rpki-client