Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
File: ymFHjk1lm-zoIDxei6jo-C8EcNc.mft (raw, json)
Hash identifier: +aQpMCwKxMMgDZ8RXOH88kuAvlYF4flz+i6n6/W2aqs=
Subject key identifier: F1:9B:14:A7:7B:50:28:7A:E8:10:70:3F:E7:AF:98:C3:7A:D7:4F:8E
Authority key identifier: CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
Certificate issuer: /CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Certificate serial: 01A0D42644346F6F072B3D36AFFBF862A8D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
Manifest number: 049C
Signing time: Thu 24 Sep 2026 16:01:12 +0000
Manifest this update: Thu 24 Sep 2026 16:01:12 +0000
Manifest next update: Fri 25 Sep 2026 16:01:12 +0000
Files and hashes: 1: OT57yXSbDNvvHun6s7sHVisvfQk.roa (hash: 3pa538tOYg66gGxDb3UhtAM2x4zp7Zx6CRCpsE/DupM=)
2: ymFHjk1lm-zoIDxei6jo-C8EcNc.crl (hash: rNIA6KqU1LbU0glEpIQrpgirCXw0FeCLMhhFOC89btI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 16:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:44:34:6f:6f:07:2b:3d:36:af:fb:f8:62:a8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Validity
Not Before: Sep 24 16:01:12 2026 GMT
Not After : Sep 25 16:01:12 2026 GMT
Subject: CN=f19b14a77b50287ae810703fe7af98c37ad74f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:1d:99:e9:cd:8f:d9:da:83:ce:9d:b2:9d:
ea:3d:d8:03:04:91:2a:c0:90:3d:15:9c:a0:9f:b8:
f3:bb:c7:8b:4b:28:20:da:34:03:c7:c3:84:19:1e:
95:76:76:9b:04:ec:f1:f7:bf:3d:19:b8:15:33:b2:
89:9c:28:7a:74:e5:7d:6b:e5:c5:2b:64:f1:0c:b9:
4c:76:34:42:3f:02:42:28:b0:ec:f9:49:cf:01:db:
27:cf:f0:31:38:d5:e0:d5:0d:00:88:a9:ef:5b:06:
1f:ce:67:c4:d6:d5:76:9b:d8:2b:a4:66:ae:58:2c:
33:a2:64:93:95:97:65:23:22:83:4f:f5:85:02:43:
00:f0:79:cf:43:14:92:4b:86:64:06:9a:4a:1c:ef:
0e:63:c7:6f:32:f8:be:bd:0d:98:36:16:43:c9:dd:
41:ba:99:59:b7:8b:f7:ba:da:cd:25:33:25:47:e8:
a1:f9:0f:73:f6:17:84:6b:e9:4f:9f:dd:ec:c9:44:
62:c8:0e:26:07:b0:7c:a0:2e:7a:27:ca:a2:eb:db:
69:cd:78:6b:3a:e2:1e:33:c5:b9:93:36:10:31:98:
5e:1f:93:67:c7:c1:ca:68:38:af:e4:94:84:f4:9b:
1a:18:fd:9c:60:76:4a:78:be:2b:38:53:8f:4d:00:
d7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9B:14:A7:7B:50:28:7A:E8:10:70:3F:E7:AF:98:C3:7A:D7:4F:8E
X509v3 Authority Key Identifier:
keyid:CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:06:86:37:e4:49:1e:14:67:97:a0:65:f5:b6:fa:46:ad:5b:
5e:d4:47:40:79:9a:3f:8d:72:85:56:c3:72:49:2a:26:5b:a7:
a6:54:b5:02:74:8f:99:a6:99:23:21:ce:bd:a4:54:c6:10:d5:
a2:72:de:27:2f:7e:ae:ca:a5:4d:6d:3e:05:4f:81:07:e0:76:
4b:48:43:59:ca:3e:a7:a2:7a:e0:1d:28:66:af:f2:71:62:cb:
3f:eb:e4:50:71:14:85:95:00:38:d8:d1:2b:92:45:f9:75:d3:
d2:a6:74:2f:da:8c:9c:3c:21:c7:19:d7:e0:99:ac:23:09:aa:
97:b2:85:fc:71:40:1a:76:97:6f:89:f3:ae:18:bb:42:57:ef:
f4:92:44:d4:d1:c2:ee:8b:77:28:0d:3c:b4:a4:1f:8b:be:2a:
0f:04:ca:88:07:08:8f:3e:8a:34:36:63:9f:1f:c9:3c:f9:61:
38:90:65:eb:58:54:aa:26:6f:39:c3:fd:4c:45:e1:ce:67:a5:
12:b6:f0:aa:f7:f7:ff:5a:28:7e:87:c0:b7:da:1d:cb:9d:b2:
9d:7a:15:7a:85:ee:8e:b4:cd:c1:42:90:9a:dc:2b:bf:c5:b8:
44:fe:44:70:05:3d:30:e5:55:ae:e4:9c:16:9d:0d:e6:5e:0d:
43:d8:7f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:19:26 2026 by rpki-client