Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
File: ytecEmuC93zGO1prbNi9rm4PWjw.mft (raw, json)
Hash identifier: 6tCAUTsWzwTl7wqwSeIX9/ZfHl/TzpwnlOyB+8CxX80=
Subject key identifier: 68:A0:08:E8:54:C2:E9:5C:B8:B5:CE:B4:81:19:07:D7:75:F9:3E:DE
Authority key identifier: CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
Certificate issuer: /CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Certificate serial: 01A0DCF2CF16BF74CC104397F51E9D44B3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
Manifest number: 1A05
Signing time: Sat 26 Sep 2026 09:01:35 +0000
Manifest this update: Sat 26 Sep 2026 09:01:35 +0000
Manifest next update: Sun 27 Sep 2026 09:01:35 +0000
Files and hashes: 1: 39TW_rteZEmG2yqgCNBCF7PjZJA.roa (hash: QiC1evAcCRcezlzRHbRvqDU6mKjNFQuGOEOLFGB1NnM=)
2: ytecEmuC93zGO1prbNi9rm4PWjw.crl (hash: xzMqQAupHPnGxn8Qy1huQSEjr9raJPkSdc4WMCOgLXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:cf:16:bf:74:cc:10:43:97:f5:1e:9d:44:b3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Validity
Not Before: Sep 26 09:01:35 2026 GMT
Not After : Sep 27 09:01:35 2026 GMT
Subject: CN=68a008e854c2e95cb8b5ceb4811907d775f93ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:01:7a:fa:30:e9:8e:43:0c:a2:a9:31:35:d1:
24:cd:75:d5:a1:b1:00:89:df:06:f0:32:66:49:75:
d9:59:ae:f6:18:d9:1d:9d:27:43:cf:bb:2f:61:7b:
0c:68:53:c0:35:1a:88:18:7b:60:d4:f4:94:70:9f:
c0:bf:f6:b3:9a:f8:3a:59:be:e2:06:03:19:f5:e6:
3b:f4:68:f4:9f:ba:e7:60:83:1a:12:83:e8:90:8f:
a6:3d:10:2a:50:38:00:05:8b:38:96:a9:d1:cb:ae:
80:04:df:00:23:45:be:6f:f9:5e:45:53:d3:fd:2f:
9a:74:46:37:ae:57:96:e7:fe:e5:62:43:7e:5d:ae:
05:ae:dc:06:30:93:65:30:16:44:03:5a:61:8b:0c:
54:0c:e3:80:b7:26:f1:63:b6:ca:10:57:4b:71:b1:
18:8d:ec:cc:8d:d0:e3:d8:b5:6e:41:a5:0b:38:46:
c7:04:90:94:d5:11:96:aa:4d:72:74:91:6f:e5:e1:
63:ad:6f:97:fd:60:98:8d:a1:11:33:95:65:b5:87:
81:ff:e8:ba:f3:91:80:7b:6a:f0:de:0c:96:d4:41:
d3:00:1f:51:f2:d3:7e:4c:66:d5:99:22:6b:d8:ab:
7d:d2:a1:84:5f:99:31:c6:25:0a:bb:1d:d5:6c:1f:
28:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A0:08:E8:54:C2:E9:5C:B8:B5:CE:B4:81:19:07:D7:75:F9:3E:DE
X509v3 Authority Key Identifier:
keyid:CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:74:62:b5:2c:f1:94:40:35:a2:c9:63:e5:c3:4c:c2:cd:31:
db:d1:e6:2b:38:2d:a0:6f:1e:d6:5c:86:5c:10:b0:e2:c0:a8:
13:83:f3:f3:90:22:76:0a:09:f9:a5:53:22:b8:63:16:f8:24:
c5:cd:d5:53:b9:23:22:33:b6:4a:06:5e:ef:fd:d5:9e:7f:82:
49:35:0c:12:2a:93:90:76:8c:2a:1f:12:53:ee:81:53:42:8e:
d1:9e:ff:47:82:e2:1c:48:ca:4b:d9:75:d7:05:e4:5f:98:45:
8e:21:d6:cc:5d:8b:83:ed:04:ae:61:07:3f:fe:81:56:f1:03:
10:24:af:7c:28:76:b7:13:78:21:c5:8f:73:ea:65:f7:ee:69:
64:d1:35:4d:54:e3:38:bd:41:ab:ce:ae:bf:8c:7f:7a:bb:b5:
04:00:e3:3e:e4:75:db:2e:01:ef:92:c5:21:82:5c:65:54:d5:
7c:4b:62:5f:fb:e3:32:79:e1:c4:69:2f:0f:cb:25:7b:72:21:
bd:8d:b0:89:7e:83:dc:ba:62:53:39:ff:a6:a0:70:f7:76:c0:
5e:8b:79:39:22:59:28:d6:19:f4:c1:06:7f:1c:d8:8f:50:00:
f5:65:58:61:8a:e5:21:94:f4:c7:34:23:b3:ab:d5:55:3a:e2:
cc:8d:d3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:51:02 2026 by rpki-client