Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json)
Hash identifier: DXn5q9CR3pZxGRyWCtwfH40ROruC8ZhyUynnDWN2y6U=
Subject key identifier: 34:00:8F:84:22:DD:28:A8:F4:6B:A6:B8:84:98:F1:F6:1A:36:F1:9E
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 01A0D15B954454A9CF783F599139568E26C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
Manifest number: 11EF
Signing time: Thu 24 Sep 2026 03:00:34 +0000
Manifest this update: Thu 24 Sep 2026 03:00:34 +0000
Manifest next update: Fri 25 Sep 2026 03:00:34 +0000
Files and hashes: 1: 0sTykt04zhafsgKWmG0fpAc6Xi4.roa (hash: s3D/zF9I60gRgjWMCWnW5l2vwcfUO0zatEx48bleBv8=)
2: 13bSAbvbvGDWUO5yvtSsKXnlK94.roa (hash: DXldFZAd6AGXUWvxh5LvcSzCrQoe+CYXwhAGhk24KDA=)
3: De_n5gWs77mFUbESDcEhMP4Zgu4.roa (hash: 6EezXySVgGXz55sVzTpFqjj+QzByDEb/wr63m1U01ek=)
4: T5zUGgRal9JKPPCQ5ILhLwlQlHM.roa (hash: YHDYE65RL2KgOZOOjjz6vjoQjHzxsBWW9qIdkVOIzBk=)
5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: z6oHL+2tRyUmF60WKYhUXjwJ78QwRTNwTOR6MAUX+4o=)
6: Z943jXHlAqEjC8HhkAmn0vuwcbY.roa (hash: zwEb4pXvmmR3brxpaMTgJgnaLu7vluGbc09IMA9MXt4=)
7: aZEJdlE8rryKdFsxcXIyoyt-SOg.roa (hash: BG6zGbPXxvvnXkdjQ9fWCyghzw5YTxYUyEjcqpnK0GU=)
8: d9cqCh7w_HREeS5tpm1EQv7bdkc.roa (hash: DnP+rNEbo3897fPDs3e26jS0WYx/AYH67Gkmxad3fpM=)
9: tL-DJ8EbDPZqo5Hcwxd2ywWIDr0.roa (hash: 7ypgmIY8clfcgfXd8ScXxIyNvL0UG8VUmIwT7yY7+ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:95:44:54:a9:cf:78:3f:59:91:39:56:8e:26:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Sep 24 03:00:34 2026 GMT
Not After : Sep 25 03:00:34 2026 GMT
Subject: CN=34008f8422dd28a8f46ba6b88498f1f61a36f19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:14:04:d7:c2:70:6d:1a:11:49:9f:1b:8c:39:
79:3b:89:9b:b7:70:bb:a9:a1:23:e4:af:f7:ee:e9:
b9:64:1b:cf:25:49:aa:c2:43:36:1e:26:e0:7c:f2:
e7:f1:49:74:2a:24:0e:5c:71:ba:c7:da:3d:2b:8d:
07:22:b9:87:0a:45:20:3e:0b:9c:a6:7e:7b:00:f7:
b7:d1:c1:d8:e9:4b:48:08:f9:a3:38:e5:27:79:ee:
3d:1d:2b:6e:ad:de:52:77:60:e7:75:69:a2:34:60:
8e:e3:c0:72:08:53:fb:4e:91:0c:0e:e8:77:8e:40:
b9:ed:9d:df:cd:c8:cb:78:68:e4:1d:98:b7:64:3c:
cf:e7:ab:14:ba:ea:c9:b5:ea:21:81:15:03:10:68:
46:af:66:a2:d3:77:e1:8e:5d:2e:a7:b2:92:b1:2c:
b1:76:a6:0d:59:46:d0:d5:cc:77:00:6b:8e:55:c2:
3d:7a:d8:bc:03:68:e7:34:1d:ee:2b:11:87:48:98:
ea:e5:e8:38:9e:44:a2:02:95:34:62:94:06:23:37:
bd:e1:16:f2:92:bb:39:54:53:93:69:34:4e:b3:50:
e5:40:4e:27:73:71:f8:1c:73:fc:06:19:5b:e8:27:
0e:6e:17:55:9e:7c:c3:2d:1a:51:d9:ce:39:7d:09:
66:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:00:8F:84:22:DD:28:A8:F4:6B:A6:B8:84:98:F1:F6:1A:36:F1:9E
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:18:99:11:0e:52:fb:d8:3e:d3:2e:b6:f8:0b:2c:44:bc:b3:
38:ed:ee:4a:8c:a9:fe:21:73:d0:ea:b3:c1:f6:73:c6:fb:dd:
0f:91:60:25:25:b6:4d:4c:a2:38:aa:c5:9b:0b:11:99:ee:0c:
bd:b6:b4:2e:59:38:78:db:69:8f:e8:d9:58:ba:71:d8:58:26:
58:59:50:4c:b5:62:a2:1f:b9:67:a0:8d:0d:a1:f4:6b:9a:9c:
1e:f0:8f:7e:82:eb:c5:96:b5:4c:72:ea:57:62:9c:62:8f:ef:
85:e7:d5:95:a8:cb:c1:5e:b1:b6:9a:af:2d:7f:3a:4b:62:07:
1c:2e:71:5b:4e:e2:d4:19:0f:3a:74:3e:cb:5f:96:88:1b:b1:
be:b6:2f:4a:63:55:06:70:f4:ff:63:29:d1:d4:9a:cb:4e:52:
c3:e0:51:55:64:20:5d:6a:56:03:78:29:c1:26:8e:d0:9d:7f:
b5:21:21:32:e0:b2:93:5f:97:47:27:e1:2b:b8:77:bc:e4:bc:
31:f7:1f:86:c4:8c:c0:cf:26:55:49:6f:f5:8f:fe:f9:36:6c:
3c:b4:bc:a5:1b:b2:39:09:e6:fd:01:bc:c8:9b:23:0f:7b:0f:
78:a5:60:9b:84:d1:6d:17:b1:c7:34:ac:fa:de:a7:ed:b3:f0:
1e:8e:0a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:02:07 2026 by rpki-client