Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File: YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier: 49mHv38/vSsuwxHVzmojeOSEy2k2+8PtF0FuoKQghmQ=
Subject key identifier: B3:AE:F3:94:D6:13:19:7C:A8:D4:09:13:C3:DB:97:33:E7:BD:54:C2
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial: 01A0D20018110B7F8CF540E5C30C500BEF3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 06:00:16 +0000
Manifest this update: Thu 24 Sep 2026 06:00:16 +0000
Manifest next update: Fri 25 Sep 2026 06:00:16 +0000
Files and hashes: 1: EGcAzbKTUnqrJBWDw9Zl1NjvipA.roa (hash: WN1W+AcOMLOyw+Z7FxISMQd+TynXYraLEQDBrawgt44=)
2: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: MLxK/+k7qWnLsFEjBuzqc/bM6cEqxCXi4x5fFwjfBm8=)
3: _tJiHAhGvLVPtYOMlLKCBsGuaeI.roa (hash: 0t/lW4HNsvLF4G+Bu7vWjQlegvcFtdB8mR4eqRFVFzU=)
4: d-N2YiUYpoOLPomAp2JVyicVc40.roa (hash: zETEJQC7tB8lRhNeIGpvA+FfF5ncGBNLatmPmvMsTNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:18:11:0b:7f:8c:f5:40:e5:c3:0c:50:0b:ef:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Validity
Not Before: Sep 24 06:00:16 2026 GMT
Not After : Sep 25 06:00:16 2026 GMT
Subject: CN=b3aef394d613197ca8d40913c3db9733e7bd54c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:89:3a:f8:0a:08:03:2f:16:fe:ac:ef:c3:f3:
60:d6:19:34:7c:b7:92:63:7d:d6:c4:fc:0f:0b:f6:
15:d0:80:fb:8f:5c:14:6b:80:4d:b5:1b:42:98:58:
6d:c7:7e:6e:29:8b:fc:a1:4c:49:89:b8:d3:f5:2e:
ff:23:96:b6:4e:b7:5d:8d:9f:2f:1a:55:89:e9:b3:
c6:35:05:b1:21:2c:4e:7e:59:0d:90:fe:09:a6:25:
00:26:ac:a2:64:f0:e5:44:71:15:57:8b:f7:e8:a0:
a9:4a:1c:d0:90:ee:03:2f:6b:e5:66:6f:ce:45:65:
a4:07:4e:2f:a5:95:25:94:33:0e:f1:49:b7:47:5d:
78:42:3d:04:92:9d:d0:bc:2d:b6:cc:7b:25:d2:50:
93:a2:95:9d:fe:6e:7e:66:97:d1:ef:de:6f:0c:96:
88:80:ce:d9:0a:28:13:48:ff:02:16:0c:2b:10:63:
49:e5:05:ad:bd:9a:46:df:cb:47:13:91:e9:75:75:
71:90:1f:c0:09:57:48:a5:66:a3:44:7d:ab:86:ed:
ac:32:78:7b:55:69:5f:dd:3b:53:cd:41:fb:4f:41:
1f:43:62:78:68:cd:bb:fa:cf:b6:1b:ce:bb:13:a1:
04:4c:10:d1:f1:7e:12:b9:0a:13:12:b0:e1:d2:3c:
aa:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AE:F3:94:D6:13:19:7C:A8:D4:09:13:C3:DB:97:33:E7:BD:54:C2
X509v3 Authority Key Identifier:
keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:40:9f:bc:2f:31:d8:ee:cf:b0:6d:a0:c4:f2:fa:be:d2:06:
aa:9a:26:3e:ee:7a:71:c7:45:26:a5:94:95:2e:19:61:c9:95:
1c:ec:ad:4a:bc:e9:77:e4:4d:eb:e0:cc:92:61:b9:16:85:f3:
e0:0e:53:2a:53:ec:46:48:3e:d7:99:60:6e:ba:81:da:58:d0:
56:7c:e2:4c:57:f0:70:11:fb:32:2c:2d:6d:ff:3e:8b:15:47:
de:13:37:fb:d6:c5:88:29:1c:0e:27:e8:8f:30:24:fa:bb:8c:
b2:a9:69:ac:49:0d:7c:11:64:0a:9c:24:d8:f7:e2:ce:13:43:
2d:e3:9d:80:2a:11:4e:cb:a9:f5:1b:bc:19:7f:ab:be:a6:7d:
43:97:55:d0:e8:90:58:07:62:5e:7a:82:8e:60:de:08:72:13:
d8:31:19:04:f5:fc:0b:06:50:18:4c:e6:92:f6:23:af:62:02:
aa:ad:43:42:4a:a3:69:de:8b:8a:16:81:0d:70:b7:40:a3:b8:
1e:3f:a9:b9:45:f7:62:b0:66:4d:de:ca:24:99:89:9b:8e:bc:
77:fe:28:3e:fe:6a:45:57:45:3c:c3:07:05:62:e2:b3:70:fa:
b3:1b:3b:a5:a0:be:94:95:f7:2f:1d:17:08:8c:33:9c:fe:a5:
1e:39:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:08:26 2026 by rpki-client