Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
File: YAluN0CSzDAL0LsGxBZAky7Pi0k.mft (raw, json)
Hash identifier: KDhkV0bxazcO5JnzJh4H0ZHQ69CTjB2vLujyARyAtbI=
Subject key identifier: 1B:7E:7D:D5:2E:AB:0B:62:4D:85:18:32:76:DF:FB:92:4B:CE:C0:A5
Authority key identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
Certificate issuer: /CN=60096e374092cc300bd0bb06c41640932ecf8b49
Certificate serial: 01A0E81CCE6F6FF7C3DDF975BBF53CC1F45F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
Manifest number: 1A0A
Signing time: Mon 28 Sep 2026 13:03:16 +0000
Manifest this update: Mon 28 Sep 2026 13:03:16 +0000
Manifest next update: Tue 29 Sep 2026 13:03:16 +0000
Files and hashes: 1: 09iLJ-Mwt-oGGlQePzLwscf0h0A.roa (hash: q4J6TqoqIEXUXDGYbj1FaACI7n8SQOOCFeV3Q5IYWCQ=)
2: YAluN0CSzDAL0LsGxBZAky7Pi0k.crl (hash: ykmanBIcPyR+H36X68uz53gyTzCA2R58h2ftW/rrm9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:ce:6f:6f:f7:c3:dd:f9:75:bb:f5:3c:c1:f4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60096e374092cc300bd0bb06c41640932ecf8b49
Validity
Not Before: Sep 28 13:03:16 2026 GMT
Not After : Sep 29 13:03:16 2026 GMT
Subject: CN=1b7e7dd52eab0b624d85183276dffb924bcec0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:d8:90:4d:d0:4a:85:f3:23:a4:c2:60:e3:
87:f4:be:00:d2:4f:f8:3a:97:f0:c7:71:1e:cc:2a:
c4:53:c7:f8:24:95:a8:ae:5e:c5:bb:61:6c:26:c0:
4d:48:b5:26:7b:6a:1f:94:10:9e:22:48:9f:4f:6f:
cf:ab:1a:de:a7:db:92:8d:ca:67:83:6f:c8:94:1c:
a6:c3:26:cd:89:29:f1:6a:60:13:76:ad:b7:98:5e:
48:f4:db:06:31:e9:b2:f8:a5:66:b5:4c:2b:6a:bd:
f9:2b:71:20:44:9a:15:b1:10:9a:cc:a9:ae:2d:11:
65:46:40:67:4e:37:c2:07:38:87:62:46:80:1d:c0:
e9:5b:9c:66:c6:a0:45:cd:4c:fe:c0:96:3c:cd:91:
77:12:ad:35:bf:5b:32:65:87:f2:a3:a6:a4:49:65:
35:49:ed:6a:47:d3:3a:60:a0:95:c5:b4:b4:ff:ae:
45:88:e9:74:37:c0:27:d8:69:04:d9:ae:df:b1:4a:
39:8a:fe:9f:41:af:05:a3:b8:5c:e9:8e:f6:a8:ea:
6e:74:42:3d:e3:01:21:56:f7:1e:18:c7:35:81:e0:
f1:80:bf:4c:4c:e3:0c:37:4c:a5:f9:91:83:66:b9:
8b:d2:0b:fb:87:0c:36:17:8b:7c:d2:87:61:e1:dc:
15:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7E:7D:D5:2E:AB:0B:62:4D:85:18:32:76:DF:FB:92:4B:CE:C0:A5
X509v3 Authority Key Identifier:
keyid:60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ba:e9:c2:52:c0:1b:df:85:f7:ff:5e:ee:a8:8d:e9:37:64:
45:d7:b0:84:53:ca:9f:60:52:f9:7f:2e:cc:8d:c2:bc:f8:f3:
3c:51:7f:6e:94:ae:06:16:12:f5:98:ba:67:24:5b:04:4f:4b:
30:45:ee:6e:c6:a7:d1:0d:92:ab:f2:36:86:65:ab:f4:bd:14:
ef:24:cb:b6:f0:66:82:1c:ff:d5:2a:cb:91:b3:2b:ed:88:9b:
ce:26:96:55:9a:da:68:2f:ff:c3:f3:0f:62:28:2c:43:49:12:
f8:61:3c:23:9a:b0:4a:b9:a2:67:9d:de:d0:c7:96:9c:b5:a9:
84:45:86:05:41:e1:f7:11:90:39:56:1a:52:62:1f:79:1e:d7:
84:21:41:68:ad:19:54:3f:3e:01:59:2e:5f:ea:b1:91:d5:91:
83:42:2d:cb:21:a0:61:48:ec:f4:ef:f9:ec:4b:7a:4b:a9:61:
c7:10:51:a2:c6:be:ef:9b:c5:6b:64:00:47:56:57:02:b8:ba:
93:5f:f7:f9:a2:f9:60:6d:77:99:af:dc:93:8d:eb:8a:ba:20:
00:a9:72:1f:50:44:64:95:d8:f6:a5:ff:fb:b0:a2:58:20:ec:
a8:12:48:59:ae:a9:5d:72:ba:8c:95:7e:db:2b:f8:51:c8:80:
fd:05:0f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:27:42 2026 by rpki-client