Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
File: yalITKcIq3cesduQuvyKEUwsPXk.mft (raw, json)
Hash identifier: wsJLc8YKJ6Sw1ypSh5Y1ATaXQM9mB1R7iojW7F8Osmk=
Subject key identifier: AB:CC:1A:CD:36:5F:05:17:47:01:37:A2:58:8A:32:D8:B8:64:D3:70
Authority key identifier: C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
Certificate issuer: /CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Certificate serial: 01A0D2DEF506D040AF7D6D7762ACDC0384FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 10:03:41 +0000
Manifest this update: Thu 24 Sep 2026 10:03:41 +0000
Manifest next update: Fri 25 Sep 2026 10:03:41 +0000
Files and hashes: 1: 3eahbNs7sLSlMwMQAPIK4WlF5S0.roa (hash: iShcDJZ7gmNtw4FSGePEabrCqu38c4kHe0CrQJ2Q7ow=)
2: MuKPEjpSeKLvjqZfVopVa-G44-Y.roa (hash: gXY94gXYWU1Pqibv85vvI+18JY770F42380MRYt28Gc=)
3: yalITKcIq3cesduQuvyKEUwsPXk.crl (hash: mNMjjmFXHMuMpkcRTR7+IAkk8nBGvKVfjwnJwFW+9qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:f5:06:d0:40:af:7d:6d:77:62:ac:dc:03:84:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Validity
Not Before: Sep 24 10:03:41 2026 GMT
Not After : Sep 25 10:03:41 2026 GMT
Subject: CN=abcc1acd365f0517470137a2588a32d8b864d370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:e8:37:72:e0:a5:c5:68:f3:75:4a:7f:0f:
41:13:6b:3d:11:ef:b3:45:3d:36:fd:f3:f1:2d:7d:
31:4f:da:02:0e:f7:bf:52:57:3f:21:fa:35:72:69:
42:b8:4c:25:ab:1c:d6:65:f6:ac:6c:2c:86:fc:d3:
00:9b:28:a4:94:1a:64:95:eb:ad:3c:45:f4:04:54:
dc:f2:da:80:07:e9:35:69:bc:a4:98:ad:11:a5:c1:
2e:50:52:2b:82:b4:45:d1:8f:83:44:3c:dc:bd:a7:
62:e5:a6:6f:23:68:a3:19:f1:09:fa:32:19:28:a0:
5c:3e:d0:30:37:97:ce:d5:61:88:74:a2:ce:a2:2b:
98:8a:8b:b8:60:83:c1:63:75:20:ce:c5:9a:ce:ae:
25:36:f0:40:41:6e:53:9b:43:49:15:5e:ac:7a:bc:
90:53:20:e4:8a:52:12:02:5f:96:c9:41:b2:d1:d4:
05:71:dd:43:21:a9:ff:e1:f0:47:2c:f0:0d:dc:7a:
1a:bb:26:4b:d1:d0:3d:5e:19:9a:ce:13:1e:13:3e:
d1:9d:9d:c8:90:b6:51:dd:81:5e:30:b8:96:54:3d:
06:d1:0a:8c:f6:13:97:a5:ff:f7:31:3d:fa:8c:37:
9c:44:b4:69:e3:06:b2:6e:d3:2d:ed:f2:7f:1d:9a:
ed:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CC:1A:CD:36:5F:05:17:47:01:37:A2:58:8A:32:D8:B8:64:D3:70
X509v3 Authority Key Identifier:
keyid:C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:80:2b:9d:e7:ba:64:12:3a:89:0e:f2:39:99:34:68:2f:3e:
42:a2:6c:9f:c0:25:a8:ab:e4:dc:04:6b:f1:82:99:f5:a6:9a:
78:8e:19:0b:93:18:1c:c2:3f:77:d0:56:5a:99:5d:25:b2:fe:
c3:0a:bc:39:f5:91:3a:71:7e:be:2d:61:60:05:46:8c:8f:fb:
16:66:98:cd:e3:07:4f:54:00:ea:c8:0d:51:1d:de:1e:ee:82:
a7:a9:d5:ec:cb:c1:7f:57:f3:fb:19:58:68:21:fc:78:2f:a5:
39:90:ca:94:27:94:40:82:f5:b5:9c:f2:13:f6:be:94:5f:bb:
cb:cd:c9:5d:d9:56:45:64:d5:3e:29:90:56:75:dc:2b:f5:d5:
b3:3f:a3:b5:0c:71:9e:10:79:03:0c:8b:b8:69:20:11:56:58:
05:0d:86:41:73:11:cc:c7:d1:7e:f5:bc:09:62:e9:10:63:85:
94:ab:49:f3:97:2d:cb:73:e4:d8:3c:fd:f9:a8:e7:7a:37:a6:
f0:29:40:97:52:e6:16:cb:65:33:64:dd:2f:79:ba:10:21:48:
d7:8d:13:82:c7:07:4d:06:c6:90:c6:3f:2a:1d:51:3b:f2:c0:
8e:e7:88:78:c7:00:33:01:b1:d3:8b:f3:46:cb:a0:34:64:4b:
a2:bc:8b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:15:39 2026 by rpki-client