Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.mft
File: YxFTku9nj6VQgFY4E_pbH4c58cY.mft (raw, json)
Hash identifier: CY+Ow1MBvI5wgMgG6m6z6ma/YzRXCJzOoc5UPtw2CF4=
Subject key identifier: 9D:EA:5E:3E:64:27:82:C6:EA:C2:6E:10:2A:45:8B:AE:1A:6C:FD:01
Authority key identifier: 63:11:53:92:EF:67:8F:A5:50:80:56:38:13:FA:5B:1F:87:39:F1:C6
Certificate issuer: /CN=63115392ef678fa55080563813fa5b1f8739f1c6
Certificate serial: 01A0D9BA3FA63D8983C71DA4EC315DCFFA15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxFTku9nj6VQgFY4E_pbH4c58cY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:00:56 +0000
Manifest this update: Fri 25 Sep 2026 18:00:56 +0000
Manifest next update: Sat 26 Sep 2026 18:00:56 +0000
Files and hashes: 1: 6as5WEbBHVftxoYno52EYXpZJiI.roa (hash: v8PZ1y8/898BpzA4Z9n4//Ktbh68yLyotavSi4xBa6U=)
2: YxFTku9nj6VQgFY4E_pbH4c58cY.crl (hash: lDbTtFyHIS2Hb0y9RQrtV9Pi+BFEKvz3mR8h0Uk/J3A=)
3: ar0Ts0ryzvDGOQY7d4ho9EY6si0.roa (hash: gqTbGzgaeb4B0LTSvn8godbTwE4G30IwqmkEqQ/zzHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxFTku9nj6VQgFY4E_pbH4c58cY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:3f:a6:3d:89:83:c7:1d:a4:ec:31:5d:cf:fa:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63115392ef678fa55080563813fa5b1f8739f1c6
Validity
Not Before: Sep 25 18:00:56 2026 GMT
Not After : Sep 26 18:00:56 2026 GMT
Subject: CN=9dea5e3e642782c6eac26e102a458bae1a6cfd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9b:fa:68:61:67:58:41:46:8f:fc:c2:08:47:
05:9e:ca:f9:48:66:66:f7:9a:c7:9f:2a:d7:0c:45:
b5:87:2c:7a:37:9b:75:21:b6:fc:1f:ff:b7:8e:23:
1c:7c:bf:a9:d3:da:81:aa:5c:48:7b:48:7c:fe:ee:
87:19:28:d0:f8:f6:d5:bc:2b:df:f7:3e:26:48:87:
e6:fb:9d:25:d7:7b:37:4f:ba:04:ad:3f:98:b2:d9:
5b:ec:99:62:92:ce:85:f6:ef:c2:dc:d9:46:53:97:
b9:41:4e:ec:8a:81:b7:3c:a7:d1:f5:1d:c3:24:8b:
d3:b1:8e:d1:da:e2:52:c1:69:4b:2d:1c:31:5e:9a:
15:34:e8:f9:0c:20:b1:f8:d4:af:82:a5:af:e5:e8:
eb:44:73:e1:86:5f:e6:ab:f3:5b:44:82:10:e8:7a:
3f:dc:39:a2:2f:cd:c9:c3:0a:70:5f:b4:7f:e0:49:
cd:ec:5c:44:cb:7b:59:d8:bc:0f:0b:49:e6:97:9e:
f6:5f:c8:0e:b3:5f:e6:88:dd:d7:a3:8c:be:4f:05:
de:a9:ad:d6:11:60:ac:39:94:52:62:85:53:e8:28:
ee:2a:f9:f2:39:5d:22:6d:b0:15:c2:18:b8:89:f6:
61:52:08:2c:2e:fd:91:ef:07:1a:b3:65:0b:13:51:
99:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EA:5E:3E:64:27:82:C6:EA:C2:6E:10:2A:45:8B:AE:1A:6C:FD:01
X509v3 Authority Key Identifier:
keyid:63:11:53:92:EF:67:8F:A5:50:80:56:38:13:FA:5B:1F:87:39:F1:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxFTku9nj6VQgFY4E_pbH4c58cY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1a:3c:39:c5:f6:2d:03:f1:f0:cd:a9:ef:ad:42:ca:6d:de:
1d:a0:42:18:16:3f:99:a2:ce:74:d5:67:20:81:2e:5d:27:06:
66:86:64:e6:0b:f6:74:c4:58:f8:47:38:9e:2e:f7:46:84:ca:
22:23:0c:c8:89:b5:f5:ed:c0:97:03:a7:78:f6:0a:dd:2d:ed:
4c:58:3c:ec:e0:81:eb:ef:87:4d:08:ac:86:59:9f:37:26:24:
b2:7d:91:b0:28:d2:35:1f:b2:7b:c2:99:68:cd:17:90:e2:de:
09:7c:ee:0f:92:99:fa:4a:8e:7f:44:bc:44:4f:16:6b:f4:08:
d2:d7:8a:e8:84:2e:62:d6:a8:fe:33:60:7c:e1:b6:08:0c:48:
44:ca:7a:d1:27:37:5a:e7:85:96:55:08:4f:8b:e5:ee:aa:93:
1c:07:c6:15:a4:df:83:b4:99:e6:ad:94:26:0d:02:48:6e:92:
dc:12:fc:c0:97:d9:62:da:a0:a2:00:5a:7d:55:4d:27:d5:47:
72:da:3b:83:9b:20:59:09:e9:72:70:e9:4d:59:43:21:44:91:
f3:f0:eb:e2:b1:96:1e:4a:08:4c:5f:34:66:99:a4:b0:ce:a8:
22:3d:38:b3:40:e8:ad:e2:83:90:5c:25:80:28:98:0b:f9:52:
90:53:34:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:49:06 2026 by rpki-client