
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
File: Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json)
Hash identifier: yjhVgfpNXMQjP7UT1SU5jNoZc1KpTQ1RdEqT9ORmlRs=
Subject key identifier: F2:AE:DC:C5:63:E8:E5:38:A6:D8:9C:86:51:E4:94:CA:F4:C8:A4:62
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 01A0D9BB1505E981B63B83D3B6D62C971B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
Manifest number: 1A7A
Signing time: Fri 25 Sep 2026 18:01:51 +0000
Manifest this update: Fri 25 Sep 2026 18:01:51 +0000
Manifest next update: Sat 26 Sep 2026 18:01:51 +0000
Files and hashes: 1: 8EQw8scn945EBI3nr8f8oaXNu5k.roa (hash: Pc5eAGErA0CLNaCRm8m5LzZW6f6RQyf0pkKeLb9c9vc=)
2: GkXYgdVFP2_HexVVs3gomnNY70U.roa (hash: Aaxv9YVnKsaCjNY2StCqQ1xmto/cCalggSwSd56aIwk=)
3: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: 1GJxPV4xLct0LbH7+53rOirjbZMFsLNVdyLMRF9QZng=)
4: hcEiOVl0IV3IE4216hs1e5DZGR4.roa (hash: ZC5U5qcJYYjeF6N2SbLW1XrnWze6Jseft5QLvx76FJw=)
5: jVymcQq0h9Y68MDNVjUwnbOR388.roa (hash: MSWDR6kx5EFIH7f8Omshc4kgj1g3khlr4OFNZuTrRzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:15:05:e9:81:b6:3b:83:d3:b6:d6:2c:97:1b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Sep 25 18:01:51 2026 GMT
Not After : Sep 26 18:01:51 2026 GMT
Subject: CN=f2aedcc563e8e538a6d89c8651e494caf4c8a462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:51:78:66:c2:0e:47:9f:7d:86:79:af:05:
f1:37:16:e1:4d:63:84:bb:71:79:a2:d2:05:87:06:
f8:1f:97:b8:e3:d3:ae:01:47:ce:18:74:b0:74:ed:
9a:ae:94:24:a8:62:0a:1d:bb:ee:3b:02:61:95:88:
ce:0a:e1:fb:72:a4:8e:67:cc:b1:8a:c4:e7:10:7b:
21:84:f3:21:a2:67:73:88:85:0c:9e:ea:c3:0e:be:
4b:92:6b:70:6d:a7:4a:7a:8c:4c:66:1d:4b:dd:1d:
48:dc:d0:a0:d3:41:5c:65:69:49:c2:f7:ed:58:a9:
87:1c:8b:13:a1:b0:80:54:75:0e:2b:ce:43:e3:a6:
77:37:2c:e2:fb:2c:d4:56:05:e6:b4:b0:a9:7e:1c:
a9:01:a2:2f:13:98:5d:2f:a6:30:ff:8a:54:1f:59:
98:30:eb:28:0b:ea:45:97:c4:53:64:21:a2:92:11:
43:58:e2:db:91:fe:7b:f1:57:58:1c:9d:fd:b7:e1:
d3:46:e6:ce:4e:b0:6a:f5:e5:0d:81:b2:db:ca:96:
33:3d:ee:61:91:98:ce:21:b7:f4:c7:6d:2c:97:d9:
3a:9a:b7:7f:e8:c6:39:df:da:a6:72:92:9a:50:70:
63:d2:00:14:e7:1f:4a:56:11:03:03:cc:ce:c1:f9:
5f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AE:DC:C5:63:E8:E5:38:A6:D8:9C:86:51:E4:94:CA:F4:C8:A4:62
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:df:99:05:b8:77:db:b3:a5:94:2a:12:84:d9:b7:7b:34:3e:
cd:3c:20:ec:9e:33:3b:06:7d:27:8a:14:72:89:1d:88:5f:d7:
48:34:ac:0c:a8:36:11:5a:aa:79:dd:21:1a:53:ee:a3:a9:d4:
39:7e:76:d5:19:57:a2:77:d4:d8:2e:82:db:d6:a9:e7:d8:36:
b3:a5:1f:6f:f2:5a:cc:9e:6e:8d:38:b2:de:e9:0d:f4:66:aa:
40:3a:7f:98:0f:88:ee:be:0f:f5:76:b2:09:56:ab:b7:9c:f3:
d9:a5:17:f3:38:88:53:a5:3a:84:71:a8:ae:a9:83:24:77:65:
91:77:b1:5c:31:6c:39:1f:46:1c:b2:f9:c6:e6:ce:0f:6a:05:
0a:4a:a6:21:15:67:a5:e8:81:46:73:a8:76:c5:59:85:a7:7e:
a9:08:97:de:c8:74:35:19:b8:65:8e:bf:09:00:de:db:a3:3c:
08:bc:8b:9c:9a:7c:1a:49:46:90:ed:f1:23:2b:8f:95:04:5b:
1d:01:37:6e:e8:cf:28:df:06:14:1c:61:d4:34:bc:cf:6f:4b:
7a:e4:e2:cf:68:f7:c8:26:04:d6:98:99:b1:06:7b:07:c4:4c:
3e:04:2c:73:84:3a:ae:04:69:3f:fa:71:5e:8e:ea:5e:d2:17:
f1:05:7c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:19:15 2026 by rpki-client