Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: 9jKzhYffITpD9M0Ab3Xb3GfxUlNlUWsuvdfdFu4KZ2Q=
Subject key identifier: CD:6F:FA:DC:3F:67:22:9D:CF:7B:63:F0:8B:AE:E8:1F:62:7E:AF:A7
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 01A0DEE0FEA3B4B3D1B0E0A95FF55C72ECAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 18:01:22 +0000
Manifest this update: Sat 26 Sep 2026 18:01:22 +0000
Manifest next update: Sun 27 Sep 2026 18:01:22 +0000
Files and hashes: 1: Xz1YPhwlgcFJn9H6zKCHQE9OZMs.roa (hash: E23r1ViDJSDDunuaw4r4shrNSmLJDRKbQsrvll9ROpQ=)
2: Y6uXwuSAMDltrgK47G1JT4Ly1MU.roa (hash: kINCl8tG1shq70mte4iuRzZgEl60hKLBpRpKxfDa3dE=)
3: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: Wd9F5VrNQRWIVBjHUa38JqV/bvuHPzTmdgXv7QJq1Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 18:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:e0:fe:a3:b4:b3:d1:b0:e0:a9:5f:f5:5c:72:ec:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Sep 26 18:01:22 2026 GMT
Not After : Sep 27 18:01:22 2026 GMT
Subject: CN=cd6ffadc3f67229dcf7b63f08baee81f627eafa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:11:89:1b:da:ec:79:4e:0f:5b:9c:2a:f0:
a4:8a:40:45:3a:9a:6d:ab:51:1b:4f:57:29:f5:ac:
42:e6:15:40:61:79:7d:6c:de:5c:10:1a:2d:a7:0c:
05:89:ce:d5:d4:0d:a0:d5:eb:ca:b2:93:a8:a5:6f:
b3:6d:0b:71:7c:9d:b9:4e:85:c2:96:67:a3:5e:bf:
30:90:7a:e0:15:b7:bc:58:d0:21:cb:45:75:eb:42:
9a:d3:dc:46:06:f5:06:6d:27:32:ae:a7:f9:a7:d8:
37:e3:68:5c:22:d1:8f:7a:05:51:66:f0:33:3e:9f:
3d:98:20:b7:8c:2d:3e:06:b1:17:cf:86:44:0c:0e:
27:66:9e:f4:6c:ee:c6:00:c8:73:f5:53:da:86:88:
c8:44:82:fb:82:83:33:a8:53:6e:3d:e1:d2:b1:7a:
a2:50:d4:b1:6c:5a:d6:6a:32:4b:c3:aa:bf:52:2f:
a1:8d:19:a6:0c:c6:17:8e:90:ac:01:ca:7a:10:db:
2b:22:c4:4b:c8:6d:35:eb:25:e1:58:c9:32:07:8b:
9b:a3:1c:83:02:48:44:65:b9:9d:02:5c:2e:3b:73:
3a:10:db:12:c1:f5:cd:a0:da:58:77:0f:49:88:e1:
76:0a:3d:27:ab:bd:bc:a3:ea:05:bf:f5:62:04:48:
3d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6F:FA:DC:3F:67:22:9D:CF:7B:63:F0:8B:AE:E8:1F:62:7E:AF:A7
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:50:dd:13:05:d3:af:a3:fe:58:ea:37:6f:d3:9b:1a:45:55:
a5:52:d6:a5:a7:bb:b7:71:2e:f5:cb:d5:97:32:1b:5d:ed:34:
8b:2c:24:11:fa:73:f5:f0:a8:0b:21:38:cd:33:91:0d:5a:58:
60:95:be:6f:b7:09:78:65:7a:27:41:4f:5c:1f:6f:ce:a9:41:
ce:8f:c4:ba:04:72:ae:99:b7:0d:71:c4:dc:03:ef:7d:6c:2e:
73:60:b1:87:4a:04:f6:7a:c3:5c:23:e1:aa:77:e0:e9:37:de:
dc:5b:b1:ac:55:d7:fa:16:67:7c:d3:93:48:51:f7:3a:e7:da:
f9:8c:ce:a0:d2:58:7c:29:29:91:52:bc:e8:38:8e:a7:5f:4a:
24:79:db:e7:1e:7d:9f:ca:03:eb:fc:53:db:cf:74:0c:e5:d6:
42:ee:64:f2:0c:81:90:93:d2:fa:54:cd:50:ad:c5:6c:46:cd:
de:47:44:0a:4e:a8:74:a6:39:bb:66:f8:51:5c:65:6d:a5:be:
7a:30:66:de:15:23:90:cb:61:21:71:73:4e:ca:c9:e9:7e:36:
84:4e:2a:3c:a6:97:49:a9:03:fd:10:7e:66:28:3c:fa:fa:fb:
4e:c8:70:1c:fe:28:c7:a0:8e:84:f9:16:b3:93:52:cc:aa:78:
90:80:a3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:14:55 2026 by rpki-client