Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
File: YDJcIdL6_nQzmNweVXRDMoARBGk.mft (raw, json)
Hash identifier: URbE2RHdEMK31vPMAbXMqXIPG6nUC7edSqrIIqhuvO0=
Subject key identifier: F5:7A:EA:B2:F0:4F:CC:17:7E:E8:43:CD:39:64:7E:D5:C3:09:E9:4B
Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
Certificate issuer: /CN=60325c21d2fafe743398dc1e5574433280110469
Certificate serial: 01A0E1077B1004BFA5AD15C8A4E0416B35F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
Manifest number: 1926
Signing time: Sun 27 Sep 2026 04:02:38 +0000
Manifest this update: Sun 27 Sep 2026 04:02:38 +0000
Manifest next update: Mon 28 Sep 2026 04:02:38 +0000
Files and hashes: 1: YDJcIdL6_nQzmNweVXRDMoARBGk.crl (hash: z7PAias4snerQZomIrpqb4uaGqUIxzvkI0r2vjDIUc8=)
2: ZGMDMaaeutNnkXyJL58734MtHlg.roa (hash: Zs6W0mlBy5j5neBEaMNbSPEex6wUKIOiG0C8/ZE4ktw=)
3: b5JaXMr4GIBvT4KCIP7BI-wUSZI.roa (hash: vRg65JmrVs2QhtYFXLwraN6iw4o7UcfzdNjLDeVLhok=)
4: jKshf8wnc15011tXTFSj3TTXJFA.roa (hash: K6mzJUE9dYVEi81Gnv2fYao7OX/tyLrwWkjFdI+z8Z0=)
5: qPyrPHOcj4AsJ76uDNoQbJBu-3A.roa (hash: icQiWI2POs5a9KmLU/wFkbzLvsrXEhv8Owk5IzrA7+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:07:7b:10:04:bf:a5:ad:15:c8:a4:e0:41:6b:35:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60325c21d2fafe743398dc1e5574433280110469
Validity
Not Before: Sep 27 04:02:38 2026 GMT
Not After : Sep 28 04:02:38 2026 GMT
Subject: CN=f57aeab2f04fcc177ee843cd39647ed5c309e94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:e2:e2:3c:80:3f:18:a3:8b:dc:4a:5e:1d:
e5:9e:8c:81:c8:2f:4e:a3:b5:94:83:69:05:2f:5b:
3a:d0:af:26:9e:d5:e9:ba:e7:e5:10:e9:22:20:ca:
d2:d5:22:d3:45:3b:55:eb:90:72:fb:0c:0e:94:03:
92:d8:44:df:82:91:08:9c:16:8c:23:4c:1a:48:b2:
4c:46:c5:06:a0:e2:22:c1:52:c9:68:92:82:bc:d3:
ea:e7:5d:4f:d0:96:72:a8:19:77:89:0d:79:cd:31:
c3:7c:3e:94:5e:5c:25:fa:3e:81:1b:80:94:98:97:
a8:3b:25:28:98:33:c4:f5:46:3d:90:32:eb:eb:28:
7c:95:4b:1a:b6:0a:be:00:0e:47:14:2f:d5:b6:d8:
a9:b4:90:65:07:bd:d0:12:1a:10:67:2a:35:2a:4d:
2d:15:2c:5e:cf:45:2e:da:cb:e8:d6:a2:4f:51:65:
ec:fe:cf:7a:93:aa:0f:1c:37:42:37:91:bb:40:14:
23:c3:f3:d2:99:60:4e:26:61:b5:6d:d8:92:51:3e:
11:03:e7:8c:fe:00:4e:6e:73:9a:81:95:67:1f:50:
59:dd:30:ff:0a:ab:b9:ac:82:95:cf:90:09:d6:e8:
20:57:d4:fc:b4:ac:16:8b:15:41:94:32:0b:20:d4:
66:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7A:EA:B2:F0:4F:CC:17:7E:E8:43:CD:39:64:7E:D5:C3:09:E9:4B
X509v3 Authority Key Identifier:
keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:87:1f:24:86:1b:3a:f3:32:4c:4f:47:26:44:31:af:82:76:
4c:95:b9:50:a1:ad:74:a0:5a:7f:32:66:a6:75:52:88:67:49:
8d:0f:02:5e:9e:e4:b9:52:75:c9:7e:82:24:d5:9d:9a:60:8f:
85:5c:6d:91:06:67:7d:98:c9:97:c7:c9:81:a7:08:05:48:bf:
84:73:16:ac:f6:96:12:aa:1f:40:66:0d:fa:47:a0:ce:c1:e2:
9e:ac:b4:93:ba:21:61:c7:8a:c4:96:ed:a3:cd:37:55:f0:93:
e4:6a:31:68:10:86:75:f4:98:35:f5:33:5c:2f:d4:60:14:5d:
20:dd:63:28:fc:3d:98:a9:f9:21:f9:90:5e:12:d7:4a:c6:bf:
c4:4d:3c:f7:00:c7:77:3f:e2:0a:6f:09:8f:a1:81:1c:b1:4f:
f5:fb:ff:46:4a:33:47:0d:2e:cf:01:93:c3:c5:4e:9f:eb:5c:
0a:59:43:9d:04:3e:4b:24:b8:13:2d:e3:1c:18:d7:d2:f7:b0:
ed:c5:f2:ab:f6:d8:ef:82:b0:94:a2:60:dc:4f:55:ab:64:25:
ef:10:f6:8e:d9:6f:e6:da:60:8d:17:89:52:29:76:a1:bd:fc:
67:de:c4:9f:6c:67:88:ff:86:a6:30:b7:d1:e2:14:46:f5:d0:
93:80:57:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:52:53 2026 by rpki-client