Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
File: YjUmrZ--xXT6TsPZuttUM_2qyns.mft (raw, json)
Hash identifier: DIclLVHi1+jX3KcW1yX1O/EBpn0lhRuwHPEHcZIm4qk=
Subject key identifier: E1:14:A4:3E:EC:70:01:AF:1B:7C:CF:7A:1D:86:DF:9B:C6:72:62:0C
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 01A0CEFF84C109951D3FEEE9F2B99B425B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
Manifest number: 1085
Signing time: Wed 23 Sep 2026 16:00:47 +0000
Manifest this update: Wed 23 Sep 2026 16:00:47 +0000
Manifest next update: Thu 24 Sep 2026 16:00:47 +0000
Files and hashes: 1: 4Mc33bIPqXNt0WBKTY6IWbhZhyI.roa (hash: 0CyjN4fDt2gePEzz6GNI+6v2hHdu94zd3doXA9mCmrY=)
2: E7S8kk0v-3rKEWlslioybHa5U2o.asa (hash: CrfGOpfT92BFeNnmG2NLzbIsZjJeDSaj2z6bEyCVnBE=)
3: P5w8UdbfAfDa1DxOi4VrhWTzLpM.roa (hash: +0DQfwomOYLD75ppkH2FpMEhDzxTGpHuszvhO6Ri7kw=)
4: YjUmrZ--xXT6TsPZuttUM_2qyns.crl (hash: c9BPP0ZmPRkIb6mGHSoBfz9TO0Y/Kf+fq59nXe4KUDM=)
5: YrZcQqizcm-6Ws7265yR5ro3QoE.asa (hash: MFAOo3Xix00XFxAQiqGQoGajsrjp1l0fhfv38HvzhSI=)
6: fAgTSS_ONStFnLvEGPMgmGZBmpo.asa (hash: TOVMYJAfL34na7IHXLihlNeKoxMB/uFVliwHd1D3Uzc=)
7: i2ZN82VS7VSqjYAHCBTpFBgLiEo.roa (hash: gw1xxGQ0BqeQr6XFI4+gKsjUN/m1I0WJsAj9BQrH0uA=)
8: uq7KjFfupPB_i8cccfycTh05AaQ.roa (hash: q7ZkYvBa6WisIOhSf12hByjNMV7uSrIgT5csQL8UbvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:84:c1:09:95:1d:3f:ee:e9:f2:b9:9b:42:5b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Sep 23 16:00:47 2026 GMT
Not After : Sep 24 16:00:47 2026 GMT
Subject: CN=e114a43eec7001af1b7ccf7a1d86df9bc672620c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:73:e1:1c:ef:4f:a1:73:ad:76:ee:33:39:
33:6c:96:ea:a6:a3:b0:64:a3:67:df:3b:0b:bc:6c:
57:6f:70:14:c9:dd:fe:85:ac:84:35:37:73:d1:d5:
bd:2f:39:66:be:9a:43:a2:71:b5:e1:c7:da:2b:50:
2c:16:b8:dc:f4:5e:1d:c4:3e:68:19:69:d1:62:0d:
6f:95:72:7b:53:10:28:56:19:4e:46:e1:6a:b3:0a:
a1:29:51:13:d7:9d:b1:3f:8e:77:5e:4f:81:29:67:
33:b7:1e:7c:cb:a4:10:48:ac:0e:49:74:c8:04:5d:
0f:2b:15:9e:42:69:a1:14:5a:e4:9c:4d:9f:d5:19:
30:4e:7a:26:e0:2c:05:4b:a3:8d:cb:0f:8b:c0:b6:
e5:9a:63:29:34:ca:8f:7b:f2:b5:46:70:9c:da:5d:
b0:60:88:d2:b4:f8:91:64:e4:55:33:54:7d:90:98:
d5:09:31:43:f5:be:5c:5c:e6:64:cb:79:e1:66:41:
aa:6d:cf:73:81:8a:20:a1:33:21:ea:9e:5d:2a:ab:
27:7a:d0:59:76:1b:43:31:89:12:2d:0e:74:ba:0e:
7e:da:45:26:5f:8c:a2:55:83:de:76:93:e5:c8:ca:
6c:74:9b:14:c1:41:b5:74:9e:a9:b5:50:a4:cc:a6:
89:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:14:A4:3E:EC:70:01:AF:1B:7C:CF:7A:1D:86:DF:9B:C6:72:62:0C
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:df:b5:4d:3a:37:fa:be:bf:0e:de:d4:5d:37:1e:19:2f:01:
07:ed:93:32:0c:b4:b1:44:40:52:97:c0:23:cd:67:68:6a:22:
2f:bf:9a:09:aa:83:00:31:f5:d9:c5:3a:93:7f:6d:b5:3c:4f:
d1:5b:7c:ca:f4:28:1b:6d:90:6b:5b:88:b0:29:74:a6:53:d7:
76:16:67:67:bd:e5:15:c7:d9:d5:dd:13:5d:f1:42:f3:7e:1f:
f8:4f:a1:3d:af:39:53:67:25:ab:eb:34:01:a0:3c:a3:7e:cb:
ee:19:19:4b:e7:8b:3c:4a:f6:54:5b:f6:d8:a8:85:d4:46:4b:
86:99:e0:d3:d6:1e:08:5e:f3:fd:e1:4e:e9:81:1b:57:27:0a:
d1:f8:2d:fe:ea:e5:d8:a6:cd:42:f8:b1:58:30:27:e2:80:95:
59:99:ac:28:2b:6e:f6:ad:0f:0d:6b:57:e1:d9:8b:e1:82:32:
b4:9f:61:9e:fb:4a:2b:6b:61:42:6d:86:5c:01:42:b7:88:b3:
60:38:4d:0e:aa:5c:42:25:b2:da:37:9e:10:d7:bd:9c:ee:59:
cf:09:67:76:03:7d:25:7b:cc:13:03:09:ca:66:c7:2a:59:d8:
29:4f:a2:ae:3d:7d:5b:70:bf:4f:fc:df:95:45:96:06:b0:da:
03:33:19:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:19:47 2026 by rpki-client