Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: wIgdhm810Q2R19fJgC6J6krNtny5VRjP/U8FmA8s8AU=
Subject key identifier: FA:4F:50:27:C1:0F:77:8C:FD:EC:E1:76:E0:95:1C:B8:04:B2:EF:88
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 01A0D727C811F71B2776E6EF4C4782AF254C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 06:01:43 +0000
Manifest this update: Fri 25 Sep 2026 06:01:43 +0000
Manifest next update: Sat 26 Sep 2026 06:01:43 +0000
Files and hashes: 1: Xz1YPhwlgcFJn9H6zKCHQE9OZMs.roa (hash: E23r1ViDJSDDunuaw4r4shrNSmLJDRKbQsrvll9ROpQ=)
2: Y6uXwuSAMDltrgK47G1JT4Ly1MU.roa (hash: kINCl8tG1shq70mte4iuRzZgEl60hKLBpRpKxfDa3dE=)
3: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: CtHadZ0vQT8pGJJk6NzyjyrGe6UmawEmoBJhC3/0NQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:c8:11:f7:1b:27:76:e6:ef:4c:47:82:af:25:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Sep 25 06:01:43 2026 GMT
Not After : Sep 26 06:01:43 2026 GMT
Subject: CN=fa4f5027c10f778cfdece176e0951cb804b2ef88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a9:2c:6c:9d:62:d2:63:21:61:d1:66:ff:52:
97:c9:52:1b:eb:f3:16:e3:d8:f7:b0:76:6d:65:0b:
ed:92:f7:ee:95:85:da:d7:c9:86:fc:25:18:9c:65:
10:06:d7:96:66:0a:40:53:3e:ea:e0:a3:77:98:3a:
7a:ee:59:c1:a3:63:fc:86:a0:28:78:a9:07:99:2b:
6d:da:bd:ef:69:8c:cf:4b:72:70:3c:7d:eb:9b:70:
63:fe:82:da:81:5d:d3:44:fe:b9:71:58:05:95:6a:
ca:f8:0a:51:2e:84:ca:35:25:4b:4c:81:22:55:f6:
ae:42:ab:ab:f8:ac:5a:42:49:e2:b9:e5:15:ee:87:
ad:75:a5:e2:80:76:d0:84:fe:e6:42:cc:c3:c0:b8:
84:d9:31:19:8e:d4:56:9d:44:82:69:73:29:9b:d5:
74:33:41:f6:e5:29:d0:2e:fe:58:d5:b3:4b:23:ce:
7d:02:0f:8b:86:9b:52:fb:8f:93:73:6e:c7:1e:16:
79:bb:91:3c:de:1c:80:b9:c4:bb:9e:9e:a1:cd:f1:
d8:d2:6c:64:b4:f9:37:dc:21:3c:f9:90:89:1f:ac:
27:46:e8:04:c0:1a:d2:60:82:53:52:6a:6d:87:89:
fe:38:28:e8:c6:13:d7:d5:b3:32:fa:45:a6:47:20:
80:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4F:50:27:C1:0F:77:8C:FD:EC:E1:76:E0:95:1C:B8:04:B2:EF:88
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ef:fd:d2:d7:8f:e9:52:1e:b8:5c:c3:33:e4:e0:98:90:80:
a9:b3:04:bd:78:25:7b:e6:05:ca:67:d1:0a:57:ac:9b:d4:2d:
c9:4a:f2:74:14:06:09:eb:9a:fc:8f:62:13:63:1a:b4:d7:30:
9d:83:bc:69:10:c3:b7:63:5a:7f:50:01:89:c3:e9:81:53:a7:
1f:02:4d:4e:42:5d:8c:db:71:2a:86:1c:26:f8:71:02:05:eb:
fc:ba:f5:64:b8:be:e9:6f:db:cb:64:1d:06:45:2e:ae:2c:c7:
f6:ab:37:90:dd:64:0a:a3:0c:d3:62:69:aa:6a:c0:c1:49:8b:
42:a6:1a:02:19:47:ce:9f:d0:c7:b6:a5:06:b6:fe:ac:74:69:
03:5f:34:f0:86:97:7e:fe:60:fc:c9:fb:44:dd:41:78:d7:d0:
5e:4c:5a:1d:8a:6b:86:35:fc:78:46:7a:88:84:1e:2d:29:c0:
70:1c:ab:32:e7:20:62:a1:78:62:fa:87:54:6e:80:94:36:6d:
de:33:0b:0b:ba:d6:2f:49:9d:a0:87:94:92:5d:2c:77:f9:c8:
89:f0:27:30:03:c1:5c:f5:e8:b2:73:78:e0:ec:6f:a0:2c:2f:
33:31:6f:2c:a0:f6:93:b8:ba:04:2b:1b:06:44:b9:4c:25:19:
65:74:e0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:14:04 2026 by rpki-client