Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
File: ygAblIWVvOJJE_gRr_cePM5F1lY.mft (raw, json)
Hash identifier: 7SbIff1812RWOXLcLWnyj6XhrxIczzy24LcMBb6LKN8=
Subject key identifier: 30:4F:2F:77:18:0F:24:00:BB:F5:C7:84:28:1F:E4:A4:F2:03:E9:A4
Authority key identifier: CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
Certificate issuer: /CN=ca001b948595bce24913f811aff71e3cce45d656
Certificate serial: 01A0CB59EA1019525F9D9D39AB05DE0D860A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
Manifest number: 1A6D
Signing time: Tue 22 Sep 2026 23:01:02 +0000
Manifest this update: Tue 22 Sep 2026 23:01:02 +0000
Manifest next update: Wed 23 Sep 2026 23:01:02 +0000
Files and hashes: 1: 1-n4qoDeH_AFoIM1FMICyUPczB5Q.asa (hash: D4WVSyy2uZCferDWc9Gow+tNKkPdq4P9+8uq/V2yGyw=)
2: _xsLd4qUBjb6_7VD2WkixJfaVoY.roa (hash: nohQUdIFn7a7lR0P0bYRkbo26wNDU405wKs7TmIgPaA=)
3: ygAblIWVvOJJE_gRr_cePM5F1lY.crl (hash: 3pcUA254WBtIGB9AqrKUppqPmtZsP0nBHm4VfO6QYf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:ea:10:19:52:5f:9d:9d:39:ab:05:de:0d:86:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca001b948595bce24913f811aff71e3cce45d656
Validity
Not Before: Sep 22 23:01:02 2026 GMT
Not After : Sep 23 23:01:02 2026 GMT
Subject: CN=304f2f77180f2400bbf5c784281fe4a4f203e9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3d:b5:3d:ea:2d:3a:c6:91:28:d5:0a:0c:38:
17:6e:8f:46:05:3d:07:55:7e:37:4f:96:63:29:45:
c9:16:09:cc:93:ff:64:a8:de:d2:49:d7:34:a8:84:
dc:80:86:f5:99:cb:e1:a4:18:69:77:c3:15:d0:59:
9e:ca:7f:d1:fc:8a:93:34:6c:95:28:ca:08:a6:69:
14:df:7e:bc:8e:ad:f7:74:74:d3:da:60:52:14:d4:
1d:58:31:ee:14:04:d4:ab:35:5c:d5:ab:ea:45:d5:
25:00:25:11:61:a8:b6:f9:82:b9:6e:77:d7:bd:5f:
50:6d:4d:7e:ac:66:5f:0a:a9:34:35:cd:64:cb:57:
1f:7c:c4:00:93:f5:f7:0b:38:de:f4:68:b9:9b:02:
24:62:dc:3f:f6:a9:f8:b4:c4:ea:98:12:1e:5f:9b:
dd:c4:60:4a:85:ac:6d:55:80:94:3f:70:1f:44:78:
3f:91:bd:15:84:4e:f2:03:9c:0a:2e:67:bc:d3:22:
ca:dc:5d:49:ca:1c:67:db:c9:3e:0f:e8:0e:05:d8:
a9:d6:ce:d2:59:cb:b8:6d:29:80:09:40:90:ae:57:
80:2e:ab:87:4c:40:91:94:73:ce:7d:0f:d5:ec:4e:
e2:80:5e:93:8f:f7:bb:30:13:a4:61:ab:3d:32:ea:
d7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4F:2F:77:18:0F:24:00:BB:F5:C7:84:28:1F:E4:A4:F2:03:E9:A4
X509v3 Authority Key Identifier:
keyid:CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3a:28:9e:44:d0:9e:6b:9b:92:9f:a8:cd:45:25:e7:2d:66:
8e:56:4d:9d:80:1e:5f:9a:ff:9a:9c:fe:0a:7a:f5:ab:ed:db:
50:0c:4c:ba:03:02:31:09:c8:7b:85:21:c5:90:1c:fa:b9:fd:
11:71:98:1e:61:2e:84:99:3f:88:b7:b8:10:6c:8d:98:e9:13:
d0:a7:06:e6:8f:ed:a7:a5:64:5c:21:27:2a:e5:e8:25:63:12:
ce:32:3e:c6:75:80:8a:8e:9a:24:a8:cd:3b:08:45:3a:50:bf:
83:50:e4:23:3f:7c:cd:3f:a5:ca:9a:fa:48:4d:e5:18:99:a2:
43:a7:64:b5:01:b6:1f:15:12:89:0e:84:65:e5:ae:47:e5:86:
99:05:be:ea:a3:68:71:ff:c0:c4:26:85:b5:3f:3e:25:c9:b9:
cb:f1:60:00:b5:71:dc:82:ba:15:5b:e0:9d:8b:ba:bf:50:ce:
a3:eb:af:4f:a8:83:f4:bd:4c:ea:29:7e:6f:a1:ca:85:ab:e3:
58:25:6b:96:39:52:d0:5c:e5:64:04:e5:8d:93:c6:24:ee:5c:
e9:5c:d2:7a:5c:66:6e:60:8b:2e:31:1f:05:99:db:2b:1b:d7:
27:95:8d:1a:cf:eb:4d:f3:0b:31:8b:ae:d2:d1:f0:8e:d3:7c:
2a:ae:7e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:47:25 2026 by rpki-client