Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
File: YBtLoTPyON1qs-CprIh1yNgL9rc.mft (raw, json)
Hash identifier: OX2W36KmRur3x0U6YgSSQLqE+zF6odrfQiGhG+X/RsA=
Subject key identifier: 4C:C1:74:88:37:55:D2:E8:8F:C3:ED:32:2C:25:FA:EB:88:8D:14:9E
Authority key identifier: 60:1B:4B:A1:33:F2:38:DD:6A:B3:E0:A9:AC:88:75:C8:D8:0B:F6:B7
Certificate issuer: /CN=601b4ba133f238dd6ab3e0a9ac8875c8d80bf6b7
Certificate serial: 01A0EE1D68860BE85A672A17C4B84884C0D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBtLoTPyON1qs-CprIh1yNgL9rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
Manifest number: 01BB
Signing time: Tue 29 Sep 2026 17:01:39 +0000
Manifest this update: Tue 29 Sep 2026 17:01:39 +0000
Manifest next update: Wed 30 Sep 2026 17:01:39 +0000
Files and hashes: 1: WwDOvongC1_X8P9dsP5SDAx3pIw.roa (hash: OvjUCdki/Xpiry32DFBQzx/CWIybLt/kwDkvEQjTH6I=)
2: YBtLoTPyON1qs-CprIh1yNgL9rc.crl (hash: jjfUIkVJb8Ith1GC4e/4IzulzCIAvopBMxsa/TlaF0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBtLoTPyON1qs-CprIh1yNgL9rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 15:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:1d:68:86:0b:e8:5a:67:2a:17:c4:b8:48:84:c0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601b4ba133f238dd6ab3e0a9ac8875c8d80bf6b7
Validity
Not Before: Sep 29 17:01:39 2026 GMT
Not After : Sep 30 17:01:39 2026 GMT
Subject: CN=4cc174883755d2e88fc3ed322c25faeb888d149e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:30:04:55:fc:90:41:d6:59:8d:6d:52:ee:
43:ff:da:7e:68:be:81:d3:c6:0b:5b:b4:4c:5b:42:
27:73:ef:58:3e:cf:72:20:e9:30:03:82:14:48:b5:
02:68:ee:92:88:51:8e:82:09:fc:59:b4:74:c9:48:
ca:0a:12:d6:a4:a6:18:8c:90:a0:e6:c9:e8:43:a3:
03:68:99:12:45:5c:78:ee:4a:37:80:da:19:9d:d0:
aa:2b:1e:13:23:65:39:2b:73:52:bf:ca:32:30:93:
69:33:c1:58:e6:e4:f7:5e:d2:4c:85:1b:0b:5e:01:
b2:d7:aa:f3:b7:5e:ac:f8:6b:1e:ab:08:29:c1:1f:
c5:d3:60:28:1f:46:54:68:37:99:5c:1f:09:e2:8c:
d6:61:d4:c4:fd:32:46:a7:cb:11:43:47:3f:69:f6:
47:4d:ba:b7:c3:78:42:36:22:6a:ca:5e:dd:6d:40:
9d:47:d0:65:d2:c1:b3:36:79:52:de:b8:75:0d:63:
39:a9:61:de:9a:80:02:19:0b:22:e0:bd:69:97:bb:
0c:c1:95:02:74:0f:cf:8f:d6:f4:82:95:c9:fc:4a:
e4:7b:97:6f:8d:58:25:62:0f:2e:72:39:bb:02:b6:
54:46:bc:58:aa:54:5f:b1:3e:f8:a6:23:27:5f:28:
75:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C1:74:88:37:55:D2:E8:8F:C3:ED:32:2C:25:FA:EB:88:8D:14:9E
X509v3 Authority Key Identifier:
keyid:60:1B:4B:A1:33:F2:38:DD:6A:B3:E0:A9:AC:88:75:C8:D8:0B:F6:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBtLoTPyON1qs-CprIh1yNgL9rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1f:7a:d1:99:57:34:2f:2a:12:b8:8f:79:7c:50:bb:91:5a:
85:66:f8:17:07:81:0a:7f:c0:22:fe:95:32:a6:dc:38:15:47:
8d:10:4c:c8:75:1d:1f:fd:05:ab:65:89:0d:43:35:3d:a6:cb:
88:10:47:4e:80:ec:83:2f:d9:e4:82:88:58:ad:b4:dd:6c:c6:
3f:0e:20:ba:5a:94:b8:df:3b:15:18:ad:5f:86:2b:72:f1:db:
66:14:37:a5:64:db:d9:f3:a1:8b:74:64:3b:45:54:36:10:0f:
29:21:7c:2a:42:25:5c:4c:71:a2:3b:a2:1a:aa:00:a7:f0:7f:
4c:eb:b5:a1:4b:f0:b1:34:10:a3:e5:8e:f3:a8:32:91:2a:d4:
83:46:50:b7:3d:ef:9b:ac:d4:38:3d:c3:66:31:f3:fe:b8:c6:
43:2d:f3:78:35:4c:a8:96:e9:27:d7:5c:fe:21:c1:ab:8b:96:
37:5f:17:72:5b:c3:7b:18:d9:7b:34:3f:2b:12:2c:99:f1:0f:
eb:16:a0:f8:73:ad:3b:2e:50:c4:75:a2:07:7f:46:58:ec:be:
8e:cb:49:77:1d:f1:55:28:54:91:eb:c0:aa:f0:d3:9d:14:33:
35:69:c6:e9:54:ff:91:45:4e:be:f2:3e:e7:c9:ba:48:51:66:
65:c7:96:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:03:36 2026 by rpki-client