Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
File: YKVAzkUEVjReyOCY709TY010vx8.mft (raw, json)
Hash identifier: gy89rvuSVYMED2DMrk0Lg7f+FtxwMwPZhpoDZPU99pI=
Subject key identifier: 2B:E0:4F:B2:54:86:01:87:74:F9:49:9F:CA:22:34:CE:43:B1:A9:88
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial: 01A0D124553FDF6228F04DB2CF2A4854840D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
Manifest number: 08D8
Signing time: Thu 24 Sep 2026 02:00:14 +0000
Manifest this update: Thu 24 Sep 2026 02:00:14 +0000
Manifest next update: Fri 25 Sep 2026 02:00:14 +0000
Files and hashes: 1: 6Mkl-omsDLx9m0bO1mz3oa6tBSo.roa (hash: Zk0U1/P1vQOMHHn2ahaAoT0XpDq9M1hljHTDc0qZE1E=)
2: AD3dL38ItgcaG-oFKVYv8zmfTus.roa (hash: DqDKMAFToDn+3i7WatsmOeHGyqsNBV2w2kEv4qRPVMY=)
3: JfzkG74hCuXipueYiQnJYRqjhXc.roa (hash: /UjZLGM2bizX+MblKNId48l/mey7CKbKk+KDmswLAkY=)
4: YKVAzkUEVjReyOCY709TY010vx8.crl (hash: 1Jg5uJL55JB9qYnWH1IykBXyNBo6ztuNaISqyvFbxbk=)
5: jjAcTZsE6SWG5o6mtHHOl3_x8mc.roa (hash: nUynGoee1lekBHyQycCWjTotr3IB8hCilEBQKb53ky0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:55:3f:df:62:28:f0:4d:b2:cf:2a:48:54:84:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Validity
Not Before: Sep 24 02:00:14 2026 GMT
Not After : Sep 25 02:00:14 2026 GMT
Subject: CN=2be04fb25486018774f9499fca2234ce43b1a988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:bd:f6:b8:a2:63:c1:52:9a:2f:b4:26:f4:
e4:e8:ec:b3:c5:93:1a:f2:52:e6:d8:3f:1c:45:7c:
f0:0c:45:d1:c6:0e:3f:6d:8f:de:ff:32:9e:fd:da:
71:a4:bb:4a:29:cc:78:e8:23:5c:67:15:f4:f4:4c:
65:32:b3:44:ed:3e:fa:bf:2c:97:62:db:d7:0e:e6:
d8:89:a9:36:09:48:d5:d1:42:a1:23:dc:6a:93:8c:
a5:2a:cf:8f:0b:62:92:d0:3b:5d:eb:54:7e:9c:93:
79:99:dc:c8:95:65:96:f7:16:80:6f:97:f6:d8:a5:
6f:75:57:48:74:7a:08:d5:17:75:0b:1a:74:86:99:
8e:5d:28:96:77:78:de:da:3b:5b:e7:e3:87:5f:4a:
98:17:c8:77:c6:66:6b:ee:39:21:bf:55:50:2c:80:
32:a1:77:48:10:08:31:72:80:b0:6d:3d:59:3f:04:
dc:37:6a:af:5e:2c:01:45:55:44:47:c7:6f:8a:5c:
8f:fa:92:03:df:dc:60:6d:38:10:3f:12:43:88:1f:
7b:a6:dc:2b:2f:b7:37:99:6f:9f:80:26:ca:44:a2:
9a:51:9f:c3:ac:19:71:67:bf:0a:a8:d4:89:ba:41:
c8:fb:0c:47:fe:2a:d9:eb:f4:b3:5b:14:9b:7d:73:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E0:4F:B2:54:86:01:87:74:F9:49:9F:CA:22:34:CE:43:B1:A9:88
X509v3 Authority Key Identifier:
keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:13:34:1a:3e:d1:ff:87:42:a9:9d:21:e4:39:73:7f:d3:ea:
d4:a9:27:f9:2a:88:0a:80:f6:21:6e:03:65:10:94:b0:45:33:
60:e5:25:86:fb:69:64:f4:d0:5e:bd:40:a6:a8:9e:54:9e:62:
ab:37:12:bf:54:f5:88:06:8a:b2:e8:9e:d7:86:c0:61:d9:29:
5e:5c:8d:7b:0a:f7:37:9b:2c:72:e9:39:4f:89:20:08:f2:f4:
a0:fc:fb:c2:49:77:0d:2a:59:a3:ba:da:59:47:ef:8a:e0:46:
03:21:4b:cf:dc:61:d2:0f:fa:2c:78:0e:ba:ae:b5:d1:d2:a6:
8b:42:c8:78:a7:50:b4:42:d3:41:d8:ce:d5:b8:79:d0:55:df:
85:1f:09:bf:bf:0d:ff:91:0f:f1:9b:29:bb:79:d3:98:ca:dd:
07:26:4c:67:4b:fb:4c:32:c6:fb:5b:ef:6d:ae:8b:55:7e:de:
95:6e:2b:de:ef:e2:c6:2c:ea:8a:36:5a:d4:7a:0c:8c:be:ce:
64:c4:c9:bc:1e:88:79:78:c2:a6:d6:a9:bf:65:ca:2d:f5:2a:
e4:12:0b:73:b0:18:74:04:11:e9:c3:ef:3a:b3:a7:83:75:f6:
0d:c6:d8:cf:f2:74:1c:74:b5:e3:55:44:68:51:d2:42:ee:86:
48:ef:90:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:10:02 2026 by rpki-client