Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier: h9MvSTJQpI4D09wq7m+Usx2gpf8s6fNi7BXqtrkdK0s=
Subject key identifier: 53:FD:FB:90:46:96:CB:9D:42:FE:BB:4C:97:42:85:96:4B:7C:DF:68
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial: 01A0EA0971F7695500741A67C26510CA358B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number: 1A7B
Signing time: Mon 28 Sep 2026 22:01:22 +0000
Manifest this update: Mon 28 Sep 2026 22:01:22 +0000
Manifest next update: Tue 29 Sep 2026 22:01:22 +0000
Files and hashes: 1: 1-Npj9uH2lNWYpla7MTqgqwt83iQ.roa (hash: JQmankrBVBlqdCQ8Vwvu+tFNWtJX5/kU02hONf99fCo=)
2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: RQVMHRlTK1EnL4Hd0Wmar0r9lzgaxqXm0sMnG1juj0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:71:f7:69:55:00:74:1a:67:c2:65:10:ca:35:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Validity
Not Before: Sep 28 22:01:22 2026 GMT
Not After : Sep 29 22:01:22 2026 GMT
Subject: CN=53fdfb904696cb9d42febb4c974285964b7cdf68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:8c:03:5c:cb:f8:a8:bc:da:8f:62:b6:4c:
5d:95:45:cd:85:43:ef:51:79:61:3e:80:fd:6d:0c:
a1:d2:bd:0e:24:c8:1f:e5:68:fb:8f:66:7a:9c:af:
18:e7:bc:3b:04:16:f1:de:5e:65:eb:8f:c7:ad:8c:
a0:7b:2e:91:d2:44:85:8b:4a:d0:55:b2:89:28:fe:
7b:9a:24:d4:24:0d:c4:32:64:e6:0b:46:39:ba:14:
4b:b0:2d:5d:39:30:cf:c1:0f:fb:fd:e4:58:cd:ce:
b3:26:b7:2f:63:e7:7e:44:69:ae:28:9d:fa:b7:3d:
0b:eb:a7:3d:25:18:5f:bf:b1:fa:2d:3e:99:11:72:
92:71:b6:f4:9f:03:53:d6:b0:18:3d:27:08:42:63:
7f:d7:d1:fe:bf:22:7d:44:5a:87:d3:a7:d4:9c:a7:
70:95:96:12:11:1c:d9:07:fb:7b:f0:ed:42:e4:72:
d4:14:ee:98:81:9a:c3:e7:7a:9f:70:d7:af:8a:2c:
47:d7:48:65:ac:58:6a:42:f3:70:c9:88:7a:2f:98:
dd:ae:d0:bf:a6:05:fb:e8:36:dc:c7:87:c2:41:a3:
a2:7a:8c:47:5c:40:ec:c6:b1:fc:28:a0:5a:de:c2:
28:66:03:cd:be:8e:22:12:0f:79:f6:cc:ac:32:f0:
51:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FD:FB:90:46:96:CB:9D:42:FE:BB:4C:97:42:85:96:4B:7C:DF:68
X509v3 Authority Key Identifier:
keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f0:d6:80:61:d5:a4:eb:af:1f:a1:92:7a:71:9b:f6:c0:2e:
78:a7:61:9d:8a:53:84:88:73:75:bc:37:00:db:b1:06:0f:be:
83:2b:1a:e4:a1:9e:c7:29:d4:36:81:86:e2:3c:bd:28:d2:41:
21:2b:60:8e:dc:b6:17:ff:b7:20:8f:cb:45:ab:70:8f:e3:61:
c0:62:30:d1:44:8d:72:01:d0:17:15:71:c0:e2:15:f4:ab:e2:
27:6a:d7:a9:00:da:b0:ef:47:63:7c:24:47:ab:65:5f:d8:7b:
73:9e:5b:7f:f6:d1:75:0b:f6:d7:f0:40:8c:08:9d:f9:0f:2f:
6c:03:ba:91:2b:cb:75:95:85:4a:19:2b:40:e8:23:1a:82:de:
7f:70:39:6e:be:91:c0:b6:4b:68:f5:20:4f:42:6b:22:ac:bc:
cf:9c:2f:d9:4b:98:5b:3b:1d:6b:88:ad:de:8b:34:5f:64:4f:
b8:12:06:20:33:1a:0e:1e:85:85:96:ef:8f:86:e2:58:18:2f:
fc:66:b3:d9:11:a5:ed:64:9a:9c:29:4a:4e:32:e8:53:6b:e4:
37:6f:8c:41:21:7f:b1:ee:ae:32:29:74:54:a0:e0:fd:65:66:
ac:5c:40:9d:7c:28:e0:f7:a5:49:fa:9b:b9:0f:77:1b:68:60:
65:9e:bc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:11:24 2026 by rpki-client