Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
File: YboL58zjgOa7dOPF_OoIHpeZrlQ.mft (raw, json)
Hash identifier: 2qHpILUpQ+Joa3S7JCmb9fuEOVveeFv1vEvx+WAvCdc=
Subject key identifier: 9E:DD:F3:50:0A:CB:4B:9F:11:F5:F6:A2:8D:6D:FC:7A:E8:AD:AE:40
Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
Certificate issuer: /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Certificate serial: 01A0D9BB05125EB61F0B2A51D3BB17DF2E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
Manifest number: 17B9
Signing time: Fri 25 Sep 2026 18:01:47 +0000
Manifest this update: Fri 25 Sep 2026 18:01:47 +0000
Manifest next update: Sat 26 Sep 2026 18:01:47 +0000
Files and hashes: 1: 63PrN8mXH55oBJX7rIWVabUHvQ8.roa (hash: pZ+Bby5HjRIxKd0d8Pj3TvHaCe/jpasI4E0danVgwOc=)
2: VFxdBR1dDp8JOaA1PwgX0ZNJHzY.roa (hash: 6wRzyykqCCxdI4kZ8Ht7eIQbCtfAS/CYcPHcXOqhj1U=)
3: YboL58zjgOa7dOPF_OoIHpeZrlQ.crl (hash: eLnyu+pRHYVDNN/8AFvTn5bba3G+wklWh4Vf4Afu+qk=)
4: wMe5BRxHj63l88AX7uqgxLFEk3g.roa (hash: FNreVADMygUCDT7FyB7Y998XcQmAqj39+EJa5oP6CCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:05:12:5e:b6:1f:0b:2a:51:d3:bb:17:df:2e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Validity
Not Before: Sep 25 18:01:47 2026 GMT
Not After : Sep 26 18:01:47 2026 GMT
Subject: CN=9eddf3500acb4b9f11f5f6a28d6dfc7ae8adae40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:cf:e7:0b:76:84:c0:04:4a:0f:73:9e:71:
77:67:e1:1f:5c:54:89:ef:f1:d2:b1:43:da:48:c6:
09:43:f7:ef:f3:f3:77:3e:8b:4c:85:92:cd:64:34:
dc:5d:ff:cd:43:19:f7:96:ac:3e:70:68:f5:76:c3:
7b:29:07:5b:20:64:02:18:bc:4f:69:61:0d:53:44:
f1:91:7f:15:b0:75:62:07:4c:fe:f7:a7:39:ae:a7:
2e:9a:93:84:ab:a6:cf:79:24:ab:96:78:80:69:12:
65:a0:51:0c:d5:10:67:6c:ec:b2:f8:ac:bf:98:18:
27:c2:49:1f:27:c5:f3:4a:eb:75:38:b9:0b:7b:d6:
7e:7c:32:57:ba:2c:45:3f:c0:e4:48:0e:02:60:87:
89:fb:34:71:26:51:84:f3:44:1b:0e:9f:96:17:8e:
5c:b1:eb:55:bb:f3:a8:df:65:74:e4:c3:38:b4:8d:
ed:46:19:40:27:ce:a9:88:11:2c:e3:ed:e3:b5:72:
66:99:3f:8e:a9:98:eb:90:bb:4e:1b:7c:00:a5:9c:
01:7c:2d:b0:22:d4:3e:88:03:4b:51:ee:2e:03:6d:
68:3f:a7:67:d8:22:f0:f9:7c:d8:9b:a0:7b:8c:a9:
d1:79:fc:c4:a1:75:88:82:ea:0d:15:ae:97:17:e5:
c7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DD:F3:50:0A:CB:4B:9F:11:F5:F6:A2:8D:6D:FC:7A:E8:AD:AE:40
X509v3 Authority Key Identifier:
keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:04:10:c3:81:c6:40:d0:12:6e:14:b3:d8:5c:39:29:6b:a9:
85:08:bd:47:17:fb:ed:6e:3b:06:71:b1:6e:36:aa:85:07:6e:
36:6a:2e:16:b6:14:74:6e:8d:14:52:f8:06:db:68:5d:4e:7d:
28:95:68:2b:fb:82:4c:a1:27:b4:8d:7d:9f:77:8b:5e:ba:65:
fc:75:0a:bb:ff:cc:14:df:b6:fa:91:20:42:2e:ae:95:61:56:
cd:cd:20:8f:69:86:bf:9f:9d:0c:d1:d3:ce:d2:68:d9:f3:d1:
84:69:5c:97:9f:47:ef:f8:17:08:85:fe:0f:6c:55:ea:97:87:
3b:40:91:49:7a:e8:46:b1:97:66:a2:3f:19:66:2c:96:f1:e7:
7d:eb:f6:c1:1e:42:43:a8:6e:35:05:d4:53:ad:ce:55:7f:f1:
e9:b8:7b:e9:b2:40:d8:23:6e:17:ee:49:09:74:4d:54:b2:7e:
1e:b0:4a:01:94:37:13:40:2a:3a:28:41:5e:c6:67:d8:23:1e:
59:a9:33:5e:4e:9b:d5:82:81:e8:61:be:38:56:17:1e:77:92:
f8:0d:d3:ca:f5:df:f7:36:f7:04:80:7f:7f:15:03:d2:0d:ae:
12:8c:57:67:23:f4:28:2c:15:eb:1d:5b:37:cd:46:f1:47:77:
8a:19:fd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:08:51 2026 by rpki-client