Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
File: YAluN0CSzDAL0LsGxBZAky7Pi0k.mft (raw, json)
Hash identifier: 3TfdON3xk2Ik02E2oJ0cJ1hnXGLLFgkWiMxIVZ3F+Tk=
Subject key identifier: 37:20:30:C2:8F:1E:C9:A4:FB:93:3F:FF:FF:68:A0:9B:69:B8:03:6D
Authority key identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
Certificate issuer: /CN=60096e374092cc300bd0bb06c41640932ecf8b49
Certificate serial: 01A0E62D2B58162AADB7C7C8EA5E5ED23C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
Manifest number: 1A09
Signing time: Mon 28 Sep 2026 04:01:54 +0000
Manifest this update: Mon 28 Sep 2026 04:01:54 +0000
Manifest next update: Tue 29 Sep 2026 04:01:54 +0000
Files and hashes: 1: 09iLJ-Mwt-oGGlQePzLwscf0h0A.roa (hash: q4J6TqoqIEXUXDGYbj1FaACI7n8SQOOCFeV3Q5IYWCQ=)
2: YAluN0CSzDAL0LsGxBZAky7Pi0k.crl (hash: UfTKF4Up2Zlc8/CWMrBfz1wc0spvsxpfSInN5PWr0/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 04:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:2d:2b:58:16:2a:ad:b7:c7:c8:ea:5e:5e:d2:3c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60096e374092cc300bd0bb06c41640932ecf8b49
Validity
Not Before: Sep 28 04:01:54 2026 GMT
Not After : Sep 29 04:01:54 2026 GMT
Subject: CN=372030c28f1ec9a4fb933fffff68a09b69b8036d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:20:5b:29:61:79:8f:b2:4e:75:e2:cb:5a:1c:
1b:bd:6b:a8:e8:f5:3b:76:a9:f2:79:76:e9:5a:f2:
28:66:df:21:72:5d:9c:6e:d3:7d:0d:e2:b4:8d:4d:
6d:44:74:76:75:ee:77:30:4d:c7:84:c4:57:ae:6f:
5e:96:d0:b4:e4:a7:24:f3:c8:49:55:9a:fb:53:fd:
76:ed:a4:2f:b8:05:84:cf:be:2a:a4:80:29:6c:cd:
5c:d5:8f:c2:4a:aa:64:91:3a:60:8e:d7:3e:fc:29:
10:e4:5b:8b:46:25:ee:a8:87:fb:82:d5:43:b9:6c:
c9:5b:81:73:96:b0:63:78:37:89:99:17:97:60:d4:
27:ac:7c:e2:ed:08:21:16:76:91:56:8a:7b:a0:96:
5d:23:d1:09:e1:3f:1c:c6:33:1b:0d:8a:98:df:c9:
06:56:bd:03:47:f3:90:88:73:f2:e8:f7:85:68:8d:
b7:84:cf:d7:44:17:5a:ec:24:34:40:54:02:fc:7d:
af:ff:f5:89:c7:9b:b8:e0:25:16:3d:b3:11:12:72:
4e:1c:0a:28:2b:2c:2d:1e:a4:b9:5c:4d:5b:22:d5:
78:ad:34:27:92:4e:c2:83:0d:16:00:8b:60:bc:fd:
ee:ec:44:57:43:db:3c:a3:9c:09:fc:11:9d:44:6f:
90:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:20:30:C2:8F:1E:C9:A4:FB:93:3F:FF:FF:68:A0:9B:69:B8:03:6D
X509v3 Authority Key Identifier:
keyid:60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c0:df:18:f5:a6:96:35:0d:97:7f:dc:71:95:70:e4:a9:ae:
b3:1b:f5:3a:56:b2:b7:24:65:5a:fd:19:fa:fd:80:a8:dc:6f:
ac:25:d7:53:9e:90:42:92:0d:2e:e5:92:29:74:10:fc:e2:d4:
f3:3e:2f:98:b0:0f:4e:d7:68:e4:e6:ba:b4:62:29:e7:c9:f4:
99:66:40:62:4d:1f:0f:12:c5:02:87:39:07:56:75:d6:d8:40:
16:a3:b4:31:5c:f0:76:7e:69:96:8f:a3:73:81:aa:d3:e7:0a:
50:e8:8a:9c:1b:96:ce:77:12:8c:de:fa:ea:97:ea:2e:38:f0:
be:a9:ea:25:c5:aa:77:a0:88:a9:29:97:f0:52:0f:13:52:81:
00:17:3b:12:12:a8:54:48:3d:af:f7:97:bd:80:12:ad:c4:75:
10:14:33:af:2d:cf:09:28:5a:2b:10:1c:da:31:a3:d3:51:a9:
96:8d:9a:07:0e:b0:cb:ca:4a:3a:e0:db:3e:15:1c:cd:6f:6a:
b4:0d:eb:66:dd:73:a5:70:2a:1c:f9:8d:cf:f2:fe:77:6d:55:
fc:a5:5b:96:c6:12:0e:ad:04:56:48:c4:42:8f:e7:b6:63:ee:
f8:46:c3:67:b8:92:3b:13:7b:c7:6b:8a:9a:be:0a:0b:c5:ac:
15:ab:47:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:46:19 2026 by rpki-client