Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
File: YOPZchUzu192hceOyY34FPrV1nw.mft (raw, json)
Hash identifier: Fji16r+aRNAV4Lz+UsZ3qSzCm1FnE19HhWPK/JpbyAY=
Subject key identifier: 5C:49:CA:87:BE:35:EA:ED:59:FC:0C:25:2C:25:A8:FD:F1:F8:B4:84
Authority key identifier: 60:E3:D9:72:15:33:BB:5F:76:85:C7:8E:C9:8D:F8:14:FA:D5:D6:7C
Certificate issuer: /CN=60e3d9721533bb5f7685c78ec98df814fad5d67c
Certificate serial: 01A0D34AE62B76BDE4C8ADCD76E0BC612338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
Manifest number: 019E
Signing time: Thu 24 Sep 2026 12:01:36 +0000
Manifest this update: Thu 24 Sep 2026 12:01:36 +0000
Manifest next update: Fri 25 Sep 2026 12:01:36 +0000
Files and hashes: 1: YOPZchUzu192hceOyY34FPrV1nw.crl (hash: VkEAwrYs1yM/i1UmJOyLL8baKp1051tLUdew+xL1x2c=)
2: okPZ0EMnwJL524YI5m6pf0dydug.roa (hash: 12kkW5rSqZtsaJDVjPRmMQKFWipqt44KCipTx0aZSLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:e6:2b:76:bd:e4:c8:ad:cd:76:e0:bc:61:23:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e3d9721533bb5f7685c78ec98df814fad5d67c
Validity
Not Before: Sep 24 12:01:36 2026 GMT
Not After : Sep 25 12:01:36 2026 GMT
Subject: CN=5c49ca87be35eaed59fc0c252c25a8fdf1f8b484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:27:8b:1f:a7:c0:60:84:2c:75:9b:c0:9b:
1a:5a:7e:76:e1:1d:6e:dd:e3:05:db:9c:f8:4d:98:
b9:76:43:f4:ec:1e:3f:c4:b2:10:c0:56:98:10:23:
d2:06:09:ca:07:33:8a:13:9d:5e:7a:73:cc:50:33:
62:43:68:1c:01:d8:3e:34:d8:f5:c7:8c:58:92:51:
bc:81:23:db:cc:d5:15:0b:75:b0:4d:0e:dd:8e:e1:
99:0c:70:81:ce:73:3a:e0:d3:5e:f6:93:cd:91:02:
b2:0a:c7:d7:9c:0e:2b:ac:3f:1d:d8:72:78:9b:58:
ae:e0:46:94:09:25:88:fb:27:7b:cd:bb:ef:59:4c:
01:64:97:52:81:7e:9b:47:6e:ca:38:ef:b1:a3:b1:
6f:56:7a:e4:1f:52:06:65:1b:6f:11:f4:11:75:ea:
d3:f7:e9:33:77:4b:59:bd:9f:04:98:50:e5:07:ea:
25:60:dd:5d:57:f8:c5:89:99:fb:ca:86:21:2a:a8:
60:f7:ed:93:a5:ee:1b:6f:a5:ce:9c:8d:1f:d5:85:
dd:91:f3:a0:e7:46:c3:44:b8:93:d2:88:e8:ff:c0:
6a:eb:a6:17:1f:8f:41:98:79:99:0e:94:9d:81:7e:
e0:56:12:83:04:63:f1:a6:5f:cf:11:4c:01:4e:c9:
a4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:49:CA:87:BE:35:EA:ED:59:FC:0C:25:2C:25:A8:FD:F1:F8:B4:84
X509v3 Authority Key Identifier:
keyid:60:E3:D9:72:15:33:BB:5F:76:85:C7:8E:C9:8D:F8:14:FA:D5:D6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a1:9a:33:3c:3d:41:0b:87:4c:13:c8:98:45:30:15:17:87:
4a:52:82:e6:18:0a:6d:4c:4b:3d:29:4b:60:03:1f:46:a2:f8:
15:1d:d5:5b:36:68:6a:b5:04:3e:f8:b3:86:4f:e6:77:b0:d5:
8c:7d:21:5b:f4:c8:00:e3:63:72:c2:4f:44:6c:72:da:1a:f2:
a5:21:ca:d8:d5:31:80:26:33:49:d7:24:ab:bd:f6:28:32:ff:
59:41:88:86:36:ed:5d:e7:06:9e:01:08:4e:bc:ab:17:2b:b1:
5e:e3:16:9e:a9:7c:2c:8d:be:56:0c:b4:3d:87:c7:d6:b8:f7:
51:33:25:d9:c5:51:cf:52:ac:ae:3c:6f:51:e8:66:d2:04:de:
40:55:f0:1b:97:45:de:7b:a6:e5:68:aa:98:63:11:fc:b5:26:
7f:3a:e2:de:08:c5:b8:33:a5:a0:6f:b9:46:28:67:50:6a:c9:
ac:e9:2c:9e:a1:66:94:1c:06:f4:8b:df:0b:2b:98:3e:5e:26:
e4:0d:e2:58:65:db:9d:b6:df:a2:31:81:a7:be:29:f9:96:6a:
78:0e:c4:2b:a3:14:aa:29:5c:ca:ab:4d:1d:04:58:38:9e:8f:
02:c4:67:52:39:37:61:8c:46:a5:da:3a:69:2a:76:59:69:fd:
7c:ea:27:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:24:29 2026 by rpki-client