Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
File: YJ6nq6_FLH_6IKemquSuLSYlIHY.mft (raw, json)
Hash identifier: +o75yEwL5HYERmlID6H9b8ebcvGWQ7IEOUFb5i453WI=
Subject key identifier: E8:DA:5F:E4:57:C0:9B:57:A8:13:C5:DB:D7:EA:94:49:E3:B7:38:7E
Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
Certificate issuer: /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Certificate serial: 01A0D3EF3802F20AFF6421FD8DCC6D703F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
Manifest number: 04DC
Signing time: Thu 24 Sep 2026 15:01:04 +0000
Manifest this update: Thu 24 Sep 2026 15:01:04 +0000
Manifest next update: Fri 25 Sep 2026 15:01:04 +0000
Files and hashes: 1: IPEVX9NburliCOkL_8My8KZEvxc.roa (hash: vKtzd4qXyz9EWKAKarv5HXYhJ7hA2jvu9rmJAemDTXw=)
2: YJ6nq6_FLH_6IKemquSuLSYlIHY.crl (hash: 2ssb9Lnnn/gTz8eatDjJcuzx8fD12UeJtRjb0+qlDhA=)
3: g3UM-mxo9surPyGX-ua-Jw8Hwy0.roa (hash: rLTMTj/qJ9X8Z52HM7aUZCnlG5iT1wzURKa+BIyHlNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:38:02:f2:0a:ff:64:21:fd:8d:cc:6d:70:3f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Validity
Not Before: Sep 24 15:01:04 2026 GMT
Not After : Sep 25 15:01:04 2026 GMT
Subject: CN=e8da5fe457c09b57a813c5dbd7ea9449e3b7387e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:36:30:f4:d4:0f:b7:46:f6:86:2e:f5:40:36:
51:19:c6:ef:c1:4f:f3:fc:87:49:3b:0b:ec:1d:37:
0f:93:17:c7:23:fa:38:7a:3d:26:f1:f4:19:ee:2a:
fa:0d:42:fd:6d:68:12:3b:d5:40:39:79:dd:1e:9c:
89:6e:23:c4:bc:f3:68:2f:59:52:07:44:c7:9b:df:
62:ce:5d:6d:69:07:03:3f:5c:09:cc:42:ac:45:06:
49:fe:80:8a:3c:5f:90:bc:d3:89:1b:3f:5c:f0:63:
d1:50:3a:69:c3:03:07:e9:93:b6:4b:c2:ca:ef:b4:
32:41:d1:4f:b5:5e:77:d8:9e:9f:60:e0:a2:bc:81:
55:88:e0:69:0e:1e:05:48:32:9d:fd:84:93:d9:d6:
17:03:07:67:6d:6f:fb:aa:06:dd:0c:a8:66:cb:41:
19:f5:6a:b8:54:90:89:4c:09:56:c8:34:6b:f9:e2:
3f:a3:4f:24:6d:02:ae:71:01:30:5c:68:03:3b:f7:
1e:0b:0a:e9:89:ad:c8:13:2c:19:c9:98:4e:18:6e:
e3:f9:79:d2:75:fb:9f:46:b3:32:a2:8f:52:7b:c5:
11:45:0a:09:d1:89:06:5a:e5:3c:dd:7d:96:45:51:
ce:70:07:d5:b0:62:16:eb:77:94:11:99:6b:29:96:
f8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DA:5F:E4:57:C0:9B:57:A8:13:C5:DB:D7:EA:94:49:E3:B7:38:7E
X509v3 Authority Key Identifier:
keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:9e:92:06:cb:88:39:e2:a5:06:70:95:6d:35:91:ea:1b:42:
cc:a3:2a:c1:dc:b5:5a:bb:5d:27:0e:28:e3:89:a4:3a:dd:1e:
2f:27:a7:37:f4:5f:59:dc:c5:bf:b4:c6:62:19:5e:b6:0d:65:
ec:70:25:48:4b:b0:32:4b:27:91:c5:a6:d2:ad:07:9f:cf:9e:
d5:cd:db:b4:cc:b8:72:6e:42:2d:bc:3d:00:a7:f7:f9:98:f6:
5a:d0:1a:ca:81:3b:89:c2:70:ad:6f:63:2b:33:32:92:2d:cf:
b7:c9:b2:1a:b3:4b:ed:0b:43:64:42:95:19:fe:a9:27:f9:c5:
9f:b0:3c:f5:10:48:15:c3:93:99:5a:50:49:d7:47:e2:03:75:
df:fc:23:76:50:ab:aa:9a:c2:d5:a2:08:0c:c7:db:84:62:60:
25:e6:85:43:1c:d2:62:e4:2f:a5:0d:cf:af:00:84:f2:3e:b4:
5e:14:4a:60:ba:bd:9d:0a:c2:3e:c8:c4:d8:97:f6:e3:b5:63:
66:41:a0:e9:d5:1c:e7:51:d4:c4:93:e8:a4:02:a0:17:4c:08:
de:9f:8b:7f:e9:93:53:89:a1:95:74:d7:36:c6:95:dd:86:fb:
93:f3:a8:b9:29:92:53:1b:4f:37:3c:52:0f:4d:8d:b1:c8:61:
96:3e:69:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:34:04 2026 by rpki-client