Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier: qNeJ/ASSmiyE1aIn0msOfEQr2RPYgp9cw20Nk3M/o+4=
Subject key identifier: 64:4C:14:E3:68:43:CA:6E:21:5E:15:B0:9D:5A:47:20:C9:7A:1E:99
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 01A0D0B69FE53A9322F589BDDE95B29DB159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 00:00:24 +0000
Manifest this update: Thu 24 Sep 2026 00:00:24 +0000
Manifest next update: Fri 25 Sep 2026 00:00:24 +0000
Files and hashes: 1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: fJcZB8kqYjkdp2Cr2WiNjobzEEv9NwoxH81XUz2PN18=)
2: LbD2tYPsPC8uP37pndvidAshgOM.roa (hash: ePxnnXcYkNMYiZIwMvTVXJah+jChUGFP5Kv/37gIREs=)
3: yV2l8jCuUkBjhG1YrGK34ROvjco.roa (hash: OW+ZvGgaMJR1U5WGE2eB0o2w9cCprc/bpgV1/vZl/uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:9f:e5:3a:93:22:f5:89:bd:de:95:b2:9d:b1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: Sep 24 00:00:24 2026 GMT
Not After : Sep 25 00:00:24 2026 GMT
Subject: CN=644c14e36843ca6e215e15b09d5a4720c97a1e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:ef:4f:82:1d:2b:c8:0e:a8:26:16:5d:0a:
3b:ec:e4:64:44:60:a4:ae:b4:e7:10:fd:22:8f:26:
5f:c1:f6:50:e1:e6:e0:6c:9d:58:4a:e1:9d:23:c3:
8e:0e:84:e4:8c:32:63:fe:f2:fc:a4:4b:8e:39:83:
4c:b4:42:48:1f:2e:49:3a:f7:8d:6d:89:78:8c:c9:
61:25:0e:32:2a:6c:02:9d:22:21:6f:0d:a1:89:10:
11:b0:f0:bd:44:ec:71:d3:c7:db:17:7a:7d:bd:d2:
84:df:65:6e:2f:ee:81:a7:ba:d1:a0:9f:46:fa:51:
44:04:36:4b:db:0e:43:1b:13:d5:6f:a7:a0:af:8c:
72:29:67:d4:ae:7f:e7:79:a8:c8:b5:b3:72:47:1f:
56:6e:9c:2c:8a:8b:5a:6b:cd:d4:4c:0a:2e:35:0e:
db:c6:88:db:85:15:f4:52:59:11:10:c4:5d:0b:84:
5f:de:72:e4:93:d7:b5:c9:55:36:84:47:da:e7:35:
ce:48:a5:5d:d6:34:9f:89:91:4f:b6:5b:c6:24:97:
bd:9f:b7:9f:10:b3:4f:96:e5:f0:e2:02:1c:90:04:
9b:cc:10:58:42:26:ce:d7:b3:ef:91:aa:66:79:e4:
c7:d4:e0:78:11:68:e7:fc:7a:24:c9:2d:71:2e:e5:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4C:14:E3:68:43:CA:6E:21:5E:15:B0:9D:5A:47:20:C9:7A:1E:99
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b6:f1:bc:5d:b0:29:ba:47:04:03:33:16:d4:9b:92:fc:da:
05:17:bb:80:1b:ab:41:4a:b4:2a:5f:70:ad:e3:eb:22:49:49:
1e:f1:8b:08:f6:7f:58:cb:3b:19:6c:99:7b:ba:2d:86:0b:e0:
40:4a:02:60:03:bc:de:d4:91:69:8e:a1:9f:7a:28:5a:90:04:
85:fb:05:43:36:1a:04:28:32:56:ae:dc:10:92:20:b0:18:70:
4d:39:66:92:59:8b:5e:98:5a:d3:60:2c:29:3a:87:0a:c4:0c:
5e:cd:7f:32:db:c8:0e:77:64:a5:dd:94:96:76:f9:69:31:46:
db:22:63:f7:b6:26:01:1f:4f:8d:55:0b:78:4a:d2:70:da:39:
fb:86:b7:b5:11:85:1e:54:5e:43:8b:68:d2:6f:58:be:18:58:
df:fd:a6:01:fd:00:cc:4b:c4:ab:bb:d8:16:52:c8:1f:70:ad:
c6:ba:4f:df:4a:ae:a1:f0:a7:b4:8c:9d:30:93:86:28:d1:5f:
fc:03:64:17:e3:21:2c:20:a5:53:42:d5:1b:a9:02:ed:13:a9:
70:a6:4c:3a:d0:a6:3d:30:a1:a7:a7:07:85:25:96:35:94:ce:
3c:06:1c:e4:81:5e:79:06:af:ab:24:51:37:2a:02:bf:d2:65:
c6:97:78:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:17:07 2026 by rpki-client