Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
File: Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft (raw, json)
Hash identifier: Cv+LAqdZFBY38k8xQ1imNmR9pDgDPVnkmee0ZudTOnI=
Subject key identifier: 1C:DF:CB:0C:65:EA:09:6D:2D:34:FC:39:10:8B:5C:0C:B1:20:29:B9
Authority key identifier: 63:EC:63:94:13:4A:17:D6:49:7C:A3:AB:AC:D3:75:C4:01:42:F3:E8
Certificate issuer: /CN=63ec6394134a17d6497ca3abacd375c40142f3e8
Certificate serial: 01A0DBDFE9B2DAA823CEF66B42B52B4AA7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
Manifest number: DB
Signing time: Sat 26 Sep 2026 04:01:19 +0000
Manifest this update: Sat 26 Sep 2026 04:01:19 +0000
Manifest next update: Sun 27 Sep 2026 04:01:19 +0000
Files and hashes: 1: XXWqfoKtAcCM7UMttu9lDzEg9w4.roa (hash: iyy9JReMyZF7zyDL2nrwHjgy/k2YaXeJe511rH+4Yew=)
2: Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.crl (hash: oZvjKlfKb2jycZ/6ObnhatNkqkVOnKpHPi46YnwYvdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:e9:b2:da:a8:23:ce:f6:6b:42:b5:2b:4a:a7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ec6394134a17d6497ca3abacd375c40142f3e8
Validity
Not Before: Sep 26 04:01:19 2026 GMT
Not After : Sep 27 04:01:19 2026 GMT
Subject: CN=1cdfcb0c65ea096d2d34fc39108b5c0cb12029b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9e:32:71:c6:f4:0b:bc:2b:fa:2b:5b:a9:b0:
58:24:55:bd:b9:1d:8a:e2:ea:ec:1d:1e:b2:81:c4:
a8:2f:93:53:10:88:2c:5b:96:4d:e3:af:f8:37:4c:
26:fe:66:9b:1b:7e:ca:80:4b:82:52:22:2b:7a:15:
d5:2d:0f:c9:01:06:0c:b6:86:66:ed:9d:b6:9a:a0:
ce:c4:e7:b4:a3:bb:d3:9a:f9:aa:d0:34:8e:38:e6:
a6:12:0d:2e:f4:5c:a9:d2:ce:56:c4:01:af:24:f2:
13:a5:6c:f9:84:c1:1a:b6:c4:ef:e2:98:e2:48:00:
48:28:26:41:bb:7a:18:a4:be:af:c0:e1:d3:b4:80:
ab:e8:eb:8f:9c:29:ac:dc:50:55:ac:aa:b4:cb:e7:
5e:c2:f0:a8:6a:3b:f6:fe:6b:6e:86:1e:0e:3a:f6:
16:df:c9:71:e5:0a:f1:26:2f:84:6c:54:66:5c:1c:
6c:73:27:d4:f7:c7:73:cd:ff:96:ee:d1:e0:66:9b:
81:2c:e0:32:f2:ff:de:f6:d7:5a:2f:2b:c8:c9:44:
04:fd:70:63:f3:f1:2f:48:c3:aa:0a:11:0e:fc:2f:
0d:37:e2:40:fd:bb:8f:fd:ab:04:52:c3:cb:eb:73:
5c:9c:53:8a:f9:10:a2:9e:5f:84:33:21:d5:3e:82:
fe:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DF:CB:0C:65:EA:09:6D:2D:34:FC:39:10:8B:5C:0C:B1:20:29:B9
X509v3 Authority Key Identifier:
keyid:63:EC:63:94:13:4A:17:D6:49:7C:A3:AB:AC:D3:75:C4:01:42:F3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6d:7c:95:af:2c:79:a5:5c:13:a1:cd:ce:ed:a1:19:31:5c:
f8:06:a1:a3:63:56:a8:97:f3:b6:37:26:f6:70:1b:47:5b:2f:
b9:49:f8:b6:18:67:1d:e9:05:34:a5:7c:1d:48:5f:e8:c0:7c:
2c:ef:c5:95:f0:9d:e5:b6:96:7f:aa:fe:5e:d1:9e:6f:73:19:
53:cc:be:0c:2b:b8:b5:cc:c4:3f:60:cb:a0:0f:98:3d:fc:45:
6e:2d:8f:b3:24:7f:59:d9:44:4d:0c:75:53:f4:38:5a:1c:c2:
50:ac:d9:15:a4:dc:9b:19:ba:1e:27:93:09:01:ee:c4:f4:c5:
f0:42:19:53:f9:67:3d:af:a8:99:9b:3d:f0:df:fe:50:fc:86:
43:46:7b:10:8d:c9:6f:37:a3:fe:a2:be:2c:b9:d2:ad:4e:07:
e6:e7:53:c0:46:ed:76:2f:b8:4d:40:2c:45:0c:40:2c:f1:c7:
08:76:6a:4b:a5:4d:54:39:43:bb:07:5a:6a:da:a9:7b:da:cf:
d5:0d:79:3c:14:e8:db:dc:98:9c:98:5e:ab:b6:38:be:fc:bc:
35:b6:09:a1:f6:b2:44:2b:04:57:db:7a:73:f5:f4:9b:d9:67:
27:31:9b:ea:d4:b4:ab:d0:40:59:ed:72:4a:c4:da:b5:0e:4b:
0b:b4:43:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:08:09 2026 by rpki-client