Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: y/+ZUpf7dwju0edmsWZ3PnLVMiQT4QzrImpA2oo0A1M=
Subject key identifier: 54:FE:D8:B4:FF:22:B1:EE:41:A9:56:68:57:EE:67:85:B0:2B:11:67
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 01A0D07FAD9D07949190948FE693E8270082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 23:00:23 +0000
Manifest this update: Wed 23 Sep 2026 23:00:23 +0000
Manifest next update: Thu 24 Sep 2026 23:00:23 +0000
Files and hashes: 1: Nh5n5OS_FgNSU_CRCZBVspz1rhI.roa (hash: IWrNPYpBRnCN3KoAH2/hYR5dMaCc3BE8UMq5q83cyhw=)
2: wG3GrFqVGUvTRTbPHblNlTz8CLk.roa (hash: LemTu9TRxZtqMeqZqR+9skKyltQynjo4K29j1dzL0vI=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: kOQweg2zUzMW52Roc8zBqd7ZjWYVssh5EN3F5sdlb8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:ad:9d:07:94:91:90:94:8f:e6:93:e8:27:00:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Sep 23 23:00:23 2026 GMT
Not After : Sep 24 23:00:23 2026 GMT
Subject: CN=54fed8b4ff22b1ee41a9566857ee6785b02b1167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:49:03:8c:fc:22:fc:60:df:9f:0f:2e:f0:27:
bc:c6:60:03:b1:d5:c7:34:71:0e:77:9d:86:0e:0f:
8b:10:14:b3:30:dd:2c:c1:cc:84:ba:9f:fe:15:3b:
88:f7:a7:82:57:64:74:e1:a5:f7:d7:4e:77:71:77:
be:2e:2f:33:f8:58:e8:cb:fa:fa:e5:cd:7c:1a:dd:
34:31:58:40:91:d6:82:e0:32:eb:83:44:1d:78:63:
38:e9:5c:1d:16:3d:a0:d6:2d:63:60:e3:57:72:32:
a7:42:51:62:5a:3f:88:83:49:6b:26:1a:5b:05:cc:
45:4c:ed:53:e1:26:aa:d2:c3:86:3e:06:85:0d:d6:
08:91:c6:16:c3:0f:3c:e6:b6:b4:6f:82:5a:90:ac:
0d:18:df:f1:ff:10:69:87:59:40:2a:93:ae:69:01:
bb:3e:b2:e9:99:8f:69:2c:c3:c3:0e:8e:58:75:ef:
70:a7:bc:0e:50:98:d2:ce:e0:0a:0f:03:5b:e0:50:
f3:9d:fa:67:4c:04:e9:1c:f5:ec:6c:98:17:dd:ad:
bf:18:ca:35:ef:a3:dd:7b:dc:0b:8b:d7:f7:b1:4e:
69:ef:25:9c:e2:b6:48:4d:37:5c:91:73:32:36:bc:
51:c7:4b:17:06:06:48:79:05:12:32:95:72:1d:06:
1d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FE:D8:B4:FF:22:B1:EE:41:A9:56:68:57:EE:67:85:B0:2B:11:67
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7f:7a:28:1a:cd:10:86:56:ab:fc:6d:b3:b3:79:f3:99:08:
c8:a8:ae:93:fd:37:23:24:29:2c:b5:ac:f4:56:a3:f0:2e:fd:
0a:38:f1:8f:63:98:93:29:18:53:4a:82:cf:de:ef:dc:e1:9e:
63:d6:61:65:3d:e2:73:d2:4a:e2:52:e6:27:cb:b0:c2:b3:35:
02:d8:e5:e0:04:3c:8c:f8:9d:d6:d0:33:42:f0:3b:d4:92:de:
67:1e:6b:32:77:17:1f:e0:82:a1:84:e2:13:65:c9:9d:f5:c7:
6e:da:0f:96:a6:77:c0:d3:d4:c7:8f:f0:59:92:8a:29:0f:2a:
e4:81:cf:7d:96:56:1a:48:1c:d7:56:cf:cc:0d:61:c5:ec:b1:
bf:d5:eb:91:5c:31:20:83:2b:29:0b:ee:0a:3d:83:5d:f1:4d:
e9:d1:01:04:5e:36:65:bc:96:aa:1a:51:ac:0d:f8:60:51:92:
ca:30:5f:79:ac:ef:d7:ab:f0:c8:b1:f1:8c:1a:7d:ae:ba:53:
f9:a8:37:91:6c:34:05:b7:47:99:16:6c:9a:58:86:f7:50:26:
66:53:71:a5:d2:36:3c:b8:ea:6b:e7:85:cd:d1:f9:b6:ea:fa:
01:f2:98:4d:08:b3:a8:4f:3e:b4:f1:14:d9:69:8f:32:87:71:
0c:13:4b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:28:01 2026 by rpki-client