Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
File: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft (raw, json)
Hash identifier: npnQs7ZxMkSwlc6ZR69cef3U4BwpiOfR6niIfW59iE8=
Subject key identifier: 12:8D:B4:93:B0:8D:8F:01:EB:7D:A8:37:AD:65:92:B5:35:AC:AD:C6
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial: 01A0CEFF80080D5F5A6213123EFDC40142D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
Manifest number: 1A73
Signing time: Wed 23 Sep 2026 16:00:45 +0000
Manifest this update: Wed 23 Sep 2026 16:00:45 +0000
Manifest next update: Thu 24 Sep 2026 16:00:45 +0000
Files and hashes: 1: 8Q0Zf_p2yrZ0sNHZrjCdOSKVFH0.roa (hash: yTf6BtJWlrsaOEBrk5U/warCLRXhsKvIf1U8hGm0E84=)
2: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl (hash: jwam1bjWd32Ly/SZRbadWWDuf8HEsydqDKFIM4xRgE0=)
3: ZcwqCFu-ugccIfT-C61LOqP6Rms.roa (hash: zUv7VdLIHUw6+UwEQbFc7BcKwkxW2AOANbLeMf0i6t0=)
4: rs6yJB-ATXmRXu9gnNIG7o1cIYA.roa (hash: hRdyzbfU/p9o7os4bIOu1TBbp1XcS6MpucnHy6ueOrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:80:08:0d:5f:5a:62:13:12:3e:fd:c4:01:42:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Validity
Not Before: Sep 23 16:00:45 2026 GMT
Not After : Sep 24 16:00:45 2026 GMT
Subject: CN=128db493b08d8f01eb7da837ad6592b535acadc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7d:3b:83:d1:a4:8d:51:4f:db:69:9f:79:f2:
39:b2:01:2a:e5:bb:2e:21:47:e2:93:f5:58:60:b6:
81:08:38:18:50:d6:85:ae:36:df:30:84:0c:1c:af:
cb:57:b3:96:fe:dd:f1:43:be:6a:6c:7d:2e:2f:68:
7f:cd:1e:74:20:57:78:28:9f:08:88:2f:4a:0b:ea:
0c:44:d8:45:00:59:9c:f6:66:5a:06:f6:4d:6c:a6:
af:cf:55:f6:49:0d:de:06:7a:c1:25:09:63:51:37:
87:50:56:ab:77:66:bd:97:04:93:84:04:b1:5d:6e:
bd:fd:c2:cd:0d:b0:b8:44:19:5a:8b:5c:c5:22:4c:
a9:7b:13:c9:b3:c9:9e:64:06:6a:38:05:78:9e:ca:
dd:ed:4e:f3:f0:09:7e:57:c1:8d:0f:9b:fa:ee:43:
8b:bf:0a:2e:1d:cc:ea:80:c9:22:bb:e1:2b:c3:6c:
71:c7:73:20:cc:e6:02:18:fa:bb:b7:78:d4:e9:0e:
13:0a:90:9a:33:01:41:7e:85:2b:10:21:4c:df:f3:
95:fa:2b:aa:b5:7f:2d:f5:f4:ce:8c:be:f0:36:cd:
06:d4:23:65:73:1b:41:2f:a2:de:3c:54:4f:e4:3a:
f1:b0:70:1d:a8:75:52:4a:3b:32:ac:64:81:b4:ea:
db:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8D:B4:93:B0:8D:8F:01:EB:7D:A8:37:AD:65:92:B5:35:AC:AD:C6
X509v3 Authority Key Identifier:
keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bd:5c:90:8d:15:06:60:c0:8d:a4:f1:a0:1d:9f:78:c5:cb:
b9:6c:0c:bc:c4:a9:0a:38:17:4a:e8:b9:70:fe:2d:d2:74:73:
4f:78:f3:90:0a:34:92:4b:dc:e5:26:d4:f8:f5:32:73:a2:0d:
80:f9:31:de:5a:4a:5d:ed:c2:cb:20:01:64:64:71:c8:0e:64:
2d:b4:91:20:66:44:a3:05:93:0a:d8:9b:b5:97:47:96:5c:cf:
9e:2d:ad:4c:fe:b6:b3:61:76:75:ab:2b:94:cf:17:d8:c5:a3:
1e:07:15:1c:1e:82:23:67:eb:29:3d:ff:4f:e8:ca:2b:d5:5a:
c1:67:48:ff:f5:83:08:88:ab:d6:2d:8a:ad:6e:a5:55:38:02:
51:8f:b6:67:81:c1:5b:b3:b6:f5:87:ef:3e:5f:16:b7:a1:8e:
28:2c:53:b0:2a:12:aa:20:ea:fc:cd:4e:96:83:93:e0:b6:0a:
3b:df:25:0c:20:8c:cc:6a:3b:5c:25:2f:85:d4:3c:b4:ff:9a:
10:98:35:cc:91:19:5c:d1:cb:68:f3:a2:cc:05:d8:33:b0:19:
d0:0b:47:0e:19:f1:0d:fa:bd:df:49:16:56:77:fe:46:1c:56:
bc:e9:d3:15:eb:bf:58:4a:76:88:18:fc:12:59:6b:e1:9c:ac:
bd:22:8f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:25:39 2026 by rpki-client