Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
File: RY-YWypGQ0lCubLZHPEocHUuRvs.mft (raw, json)
Hash identifier: Azame9eEO1aVP8kQ+yoce5+XWO7c3d6cTwHrKBdYlV8=
Subject key identifier: 06:F5:4E:09:4E:09:17:51:43:07:AE:2A:AB:0E:90:29:C3:AC:8C:63
Authority key identifier: 45:8F:98:5B:2A:46:43:49:42:B9:B2:D9:1C:F1:28:70:75:2E:46:FB
Certificate issuer: /CN=458f985b2a46434942b9b2d91cf12870752e46fb
Certificate serial: 01A0E175536DA9293CCD72DB51ABDCB21AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY-YWypGQ0lCubLZHPEocHUuRvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 06:02:37 +0000
Manifest this update: Sun 27 Sep 2026 06:02:37 +0000
Manifest next update: Mon 28 Sep 2026 06:02:37 +0000
Files and hashes: 1: RY-YWypGQ0lCubLZHPEocHUuRvs.crl (hash: UP6EAGHNxcpITi6c1ovcS1nA0BCofNtaiybDBitLBCM=)
2: ZMVggC6fnvi5QFfWX49Stx3sedU.roa (hash: 2N+/qv1zdtOS6klaheqYn3TqcaLDARy95PnzfT7lVJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RY-YWypGQ0lCubLZHPEocHUuRvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:75:53:6d:a9:29:3c:cd:72:db:51:ab:dc:b2:1a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458f985b2a46434942b9b2d91cf12870752e46fb
Validity
Not Before: Sep 27 06:02:37 2026 GMT
Not After : Sep 28 06:02:37 2026 GMT
Subject: CN=06f54e094e0917514307ae2aab0e9029c3ac8c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:bc:b4:ce:66:9e:3d:bf:83:2d:a3:b6:ec:
67:ee:ac:c3:55:60:93:e9:ea:79:61:ca:94:66:91:
04:71:ff:c9:48:bf:01:ce:57:de:54:40:ac:e6:7a:
25:04:96:83:5f:23:c2:e9:3c:0a:d4:4c:d4:b7:78:
9d:e5:29:d2:3f:bb:20:0d:6b:75:f5:3f:bc:a1:c9:
4a:56:f6:48:0a:98:67:98:b0:56:16:6c:2d:87:a7:
ef:d9:09:ff:e4:9b:d2:f9:a2:3d:22:58:e1:19:b4:
31:1b:ca:5b:fe:f3:0c:6c:84:20:de:68:1a:a4:2f:
82:6b:60:2c:1b:f0:bb:de:d8:71:a0:62:4d:51:6b:
c5:5a:00:3e:99:ed:a5:50:cb:4e:c4:82:84:ce:96:
64:28:aa:9d:b8:02:db:9e:cc:76:82:5c:8c:9b:4b:
03:1b:fc:b1:93:9e:93:c4:6b:c5:fb:6a:6f:3b:6c:
91:4b:e3:15:07:2f:90:50:a1:74:4b:b4:05:d5:b4:
36:5f:ed:53:f0:74:3b:c6:99:f3:fe:53:2f:90:56:
ab:a0:3f:7b:c7:31:59:ad:4e:bb:eb:39:36:09:c0:
81:54:97:bd:e9:28:61:36:b2:49:7e:d7:f0:99:75:
ec:83:34:1c:f6:24:b2:ea:4a:11:58:ce:f8:ab:0e:
75:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F5:4E:09:4E:09:17:51:43:07:AE:2A:AB:0E:90:29:C3:AC:8C:63
X509v3 Authority Key Identifier:
keyid:45:8F:98:5B:2A:46:43:49:42:B9:B2:D9:1C:F1:28:70:75:2E:46:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY-YWypGQ0lCubLZHPEocHUuRvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3c:d9:e2:4b:cd:be:a0:9e:1a:c9:c2:03:6f:2d:88:e1:9a:
39:6d:50:3b:48:0d:9a:c9:a0:ee:ae:c6:d4:80:ee:03:ce:23:
50:a8:6a:81:88:15:13:2d:4c:58:f7:2d:2d:1c:61:06:a8:1d:
b2:28:33:ff:c8:2c:37:f4:91:c0:33:37:d0:66:60:27:d6:42:
98:38:b6:70:ae:0e:d0:fe:f2:01:85:24:b7:1c:69:73:ca:49:
7a:9f:70:d4:20:9b:b7:da:e7:28:77:b9:67:46:05:16:f4:29:
48:73:7a:5f:a0:ac:ba:3f:b5:8f:61:92:5b:19:af:31:e1:38:
d9:cb:1a:ad:2b:5e:d2:5e:1b:8d:7e:81:5a:88:d6:a6:c0:8c:
5b:cd:8f:99:8f:27:d4:ca:5e:10:bf:39:f3:93:0b:13:f2:fb:
b1:b0:2f:86:ad:09:b9:4e:29:7a:b8:17:24:00:1a:6b:fb:16:
ed:89:5b:e8:e7:d0:d4:9c:2c:5a:82:80:55:c1:09:da:ec:9a:
06:ef:cc:96:c2:65:27:d7:14:e0:0e:44:28:ab:73:c4:45:07:
48:4d:ba:f4:30:69:84:a5:13:16:9a:e6:6f:c3:76:85:3e:ac:
60:f4:38:82:31:4f:9b:2e:e0:d0:ac:be:32:b2:68:02:e3:58:
3e:62:d7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:10:33 2026 by rpki-client