Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
File: YxGmnIFyBEhUkx8QClm9CJy4iBo.mft (raw, json)
Hash identifier: EjzBwPLCwZYOqzun0wMHbSaAQ2UCFJt8S7Yjy5le82A=
Subject key identifier: C8:63:17:C5:0F:58:39:C4:DB:63:6F:68:D4:62:75:E6:AD:C1:28:B0
Authority key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
Certificate issuer: /CN=6311a69c8172044854931f100a59bd089cb8881a
Certificate serial: 01A0D38308E280ADE747F221B580CD00411E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 13:02:54 +0000
Manifest this update: Thu 24 Sep 2026 13:02:54 +0000
Manifest next update: Fri 25 Sep 2026 13:02:54 +0000
Files and hashes: 1: NITgwZ0BoycrXSGPU8iX7ZnWyHc.roa (hash: 5tWOFXf/UnsBI5wfRpAA1+yDyuJUDNX32cEt3vj5vdk=)
2: YxGmnIFyBEhUkx8QClm9CJy4iBo.crl (hash: vVLOGMqCiiQeiTIFA3OdpWJTG5pXBFmCixwYYDSnJtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:08:e2:80:ad:e7:47:f2:21:b5:80:cd:00:41:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a69c8172044854931f100a59bd089cb8881a
Validity
Not Before: Sep 24 13:02:54 2026 GMT
Not After : Sep 25 13:02:54 2026 GMT
Subject: CN=c86317c50f5839c4db636f68d46275e6adc128b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:ef:a7:cd:9a:1b:08:37:11:f2:fc:e2:14:
c8:c5:42:fa:61:44:71:47:3e:78:a8:2c:57:84:09:
3d:02:7f:95:65:08:85:a0:1f:a5:b3:3b:67:73:21:
8a:05:33:70:d7:1a:61:4a:ee:96:b5:64:5e:66:3c:
03:58:9b:4b:66:d0:a1:9f:ec:45:1b:66:c6:36:b6:
a0:f7:9e:14:84:96:1c:b9:95:b2:88:70:bc:cf:32:
3e:59:8a:07:b3:b2:c8:88:92:b8:cf:7d:d4:a9:88:
93:77:18:a1:94:ef:3d:d1:5a:c0:d6:dc:b9:90:83:
53:a8:ba:a4:8e:95:64:dd:86:1b:ba:c2:94:6c:37:
7a:6d:cc:ef:90:cf:eb:2b:1e:da:97:07:35:f5:8a:
d5:32:a4:e2:5d:eb:f9:32:4f:d7:ce:6a:15:c5:22:
6d:ce:2a:63:d7:3a:94:a5:9a:ad:dd:01:c8:c4:c5:
76:7c:fc:c4:bd:aa:2b:10:2d:47:92:58:c3:ed:a6:
3d:64:3d:01:f7:f6:ef:61:c1:ff:e4:47:a9:ec:81:
e6:7c:f2:58:7f:68:d6:78:fb:9f:0a:a2:5a:cf:b9:
03:27:5e:98:5d:fa:f8:92:20:0a:d7:96:96:19:9c:
13:d3:ed:b7:d4:e3:7a:da:33:51:b5:bb:34:af:4a:
b2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:63:17:C5:0F:58:39:C4:DB:63:6F:68:D4:62:75:E6:AD:C1:28:B0
X509v3 Authority Key Identifier:
keyid:63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:be:1f:ae:f5:44:38:1c:d6:93:37:1f:04:90:7c:4d:2f:6b:
e8:05:25:81:6a:87:10:41:a8:6f:8f:62:a6:b6:57:19:b5:c2:
98:f8:08:5e:ea:35:af:f5:98:ee:04:d4:13:36:af:0a:20:5c:
9c:6a:bf:a9:48:20:ef:86:4a:f7:46:d0:ef:0b:e3:93:5a:65:
79:ce:38:5a:48:be:a0:f4:20:d5:08:f0:7d:3d:b0:06:38:c4:
de:60:1d:27:8a:d9:a4:d8:0f:d8:1a:67:b4:8e:48:ad:8e:4e:
d4:da:24:c1:b1:84:88:02:ec:23:61:55:03:d2:b6:b2:e3:a5:
79:62:f4:46:ab:de:53:f1:63:d7:e7:29:53:0d:5e:ab:23:c3:
a8:52:a1:b6:24:39:3e:46:f9:47:56:1d:57:32:d4:ce:31:e0:
58:80:4e:9c:59:ad:3c:f9:c9:34:4a:57:ff:f4:a0:20:28:da:
4c:24:c2:3a:9c:d9:34:f1:7b:87:38:67:fe:76:44:11:63:07:
f2:1f:b7:16:6c:97:04:18:a1:a5:2e:26:2d:6c:ac:00:bd:24:
ea:8b:b8:91:64:f6:d6:06:c7:19:34:d5:42:6a:1f:73:6e:b8:
b8:c7:eb:63:7c:47:e1:03:a6:22:66:01:3c:90:1b:71:f6:85:
eb:60:d1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:57:30 2026 by rpki-client