Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
File: YOdz2_t1lX8Mxchj_M52ylijkwg.mft (raw, json)
Hash identifier: tFDCsTXI/Z2D9TrSzk9gj6PEn4tc1MYI/TrDERBLz7U=
Subject key identifier: 07:0B:7C:8E:A3:C7:D7:A7:2D:A9:1E:46:18:39:9D:84:9A:EF:69:E6
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Certificate issuer: /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial: 01A0CEC8A64A51393F7BD0937AE83F1B2B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
Manifest number: 0D3A
Signing time: Wed 23 Sep 2026 15:00:51 +0000
Manifest this update: Wed 23 Sep 2026 15:00:51 +0000
Manifest next update: Thu 24 Sep 2026 15:00:51 +0000
Files and hashes: 1: FaiCCLCJ_22L37bTLhekiTS6xWk.roa (hash: 0rF76R7VaTqT7h2AWynmZ6U6C8XdF6nPrpTOFBQQBKw=)
2: YOdz2_t1lX8Mxchj_M52ylijkwg.crl (hash: Nl4dCiSFmb2Q40UHhbS8177ZWhT2yU/JsqfGgje4xMo=)
3: fbVmVDZSr2N5vEu2YR2iNEUtIwY.roa (hash: XF+oa0yHniCseXwIDuAlr+pULGrTcD83gldJXfm1CQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:a6:4a:51:39:3f:7b:d0:93:7a:e8:3f:1b:2b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Validity
Not Before: Sep 23 15:00:51 2026 GMT
Not After : Sep 24 15:00:51 2026 GMT
Subject: CN=070b7c8ea3c7d7a72da91e4618399d849aef69e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f0:d2:ae:d0:8a:b5:65:b7:74:1d:2d:5d:3b:
09:7c:07:67:fa:d4:19:f8:7d:ac:7b:fc:4d:46:79:
4f:76:a4:d5:15:86:86:3f:50:34:80:4d:e9:81:b4:
34:73:4d:ee:ec:a3:d8:40:3e:aa:5d:51:91:47:83:
05:18:5c:6e:b2:9c:c0:da:8b:71:01:e7:7e:8e:80:
56:ff:69:1d:ff:ee:25:14:c5:dc:59:65:70:c0:f3:
ac:2d:96:e1:35:f6:59:3c:ef:c4:9d:1c:fe:7c:ce:
d0:8f:5c:91:aa:64:f3:cc:7c:9b:89:1d:bb:53:ec:
f9:9b:f7:fe:b4:1a:b9:b9:3a:f4:cc:56:d2:a6:eb:
3e:22:5b:9a:3a:d7:21:f0:3d:c0:bb:68:de:0d:47:
75:ec:f4:b5:13:0a:16:7d:66:2d:e4:45:ea:10:0a:
f8:6c:3b:ac:0b:5f:91:a7:3c:1e:5a:13:ff:1a:07:
1d:3b:27:34:8d:e4:22:62:cb:16:f6:6b:e0:1b:fa:
23:60:ee:f1:e8:ed:66:75:49:fe:b8:ba:c2:e1:83:
9d:50:48:83:ec:0c:fb:ca:26:72:31:af:6b:83:31:
e9:58:35:a6:03:b4:cd:54:98:d3:44:9f:7d:4c:22:
df:0e:5d:85:ca:46:59:d8:a1:89:d2:03:2f:d8:1b:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0B:7C:8E:A3:C7:D7:A7:2D:A9:1E:46:18:39:9D:84:9A:EF:69:E6
X509v3 Authority Key Identifier:
keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a8:26:24:cd:d3:3f:e2:d6:f1:f1:12:3c:fe:08:85:29:68:
0b:fd:e2:e9:61:78:eb:14:bc:8f:c0:94:1f:a0:53:a7:f6:75:
8b:65:ab:2f:fc:97:df:b4:2c:d4:9a:84:8d:15:f5:9d:58:35:
b4:e7:3c:85:22:b1:c7:ef:2c:d9:99:be:82:1d:87:38:23:88:
59:ab:1c:02:73:ce:5f:4b:19:ec:7c:c0:02:a9:c9:0f:c4:00:
a7:e9:4a:53:4c:4c:76:35:a8:7f:75:8c:86:b7:67:19:c2:a3:
0d:ab:96:5c:e9:8a:1d:57:e2:2e:0c:b9:63:96:8e:a0:63:7f:
42:d0:23:1c:6f:08:3e:49:8c:2f:5b:9b:9d:52:3b:d0:6f:9e:
f8:5b:50:2b:3a:6f:db:6f:d3:3c:0a:6c:77:e9:c6:69:fd:79:
e3:34:76:a0:61:59:c1:7c:23:8f:0c:a6:a0:3f:f2:b0:7b:7e:
d4:e9:e4:08:0e:76:c1:e4:16:7a:89:5f:61:9f:43:c8:86:54:
58:84:65:54:23:9b:02:3a:5e:f8:1f:ab:85:08:2c:dd:b3:ab:
84:b4:86:98:44:32:6e:15:74:7f:38:71:29:6f:9d:bb:86:01:
2b:e9:74:ee:ce:78:fb:e4:00:fa:18:c0:3d:77:51:0d:9b:8a:
60:45:02:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:29:46 2026 by rpki-client