Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
File: Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft (raw, json)
Hash identifier: snuVJ7zNjD/n9qlW9ate2OyA3SOISN+khpV+rfq2rsY=
Subject key identifier: 1E:B5:86:E5:50:E0:7F:90:A4:C5:5F:AA:7D:F1:CB:8A:89:F4:74:D3
Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
Certificate issuer: /CN=6353829c061a8af26de946fc9e81885c74c174c7
Certificate serial: 01A0D3837E5FBC8DC4870DAE7E0FF89F1C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
Manifest number: 0C70
Signing time: Thu 24 Sep 2026 13:03:25 +0000
Manifest this update: Thu 24 Sep 2026 13:03:25 +0000
Manifest next update: Fri 25 Sep 2026 13:03:25 +0000
Files and hashes: 1: Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl (hash: qyk4lBhPk9qVE7gT5rHdlNmyxObLjIMtHXOyD5Gj2QI=)
2: oVwFkvdTGoRcoIaCVoJWao9067c.roa (hash: mNDuB88yYB2a1hk5GC2+5PKmqMUPggl9sv+jUF9m7GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:7e:5f:bc:8d:c4:87:0d:ae:7e:0f:f8:9f:1c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7
Validity
Not Before: Sep 24 13:03:25 2026 GMT
Not After : Sep 25 13:03:25 2026 GMT
Subject: CN=1eb586e550e07f90a4c55faa7df1cb8a89f474d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:e5:40:40:16:56:37:6d:80:ba:0f:14:8b:
a4:e5:c7:c0:4c:5c:7c:cb:df:96:51:57:16:6b:78:
7d:05:18:4a:cb:c0:bb:0b:83:1e:95:93:a3:7b:40:
1d:de:f4:9b:cb:49:a8:41:c3:ca:db:40:7a:ad:df:
df:e0:08:54:ce:bf:1a:a1:d5:16:6b:c4:3d:08:62:
fa:ad:39:fd:8d:6c:69:bc:a0:c8:81:41:40:36:3c:
35:a6:e2:22:00:04:80:fd:dd:6b:94:57:d5:05:fb:
96:cf:52:38:8d:0e:57:40:e8:bd:32:53:0d:0d:f9:
79:1b:9d:44:4f:ac:27:36:cd:8a:f6:41:69:3b:80:
09:97:84:17:1d:16:48:1b:43:80:d8:56:30:d6:d0:
21:43:92:0a:a6:e9:79:99:06:11:e9:42:8b:22:b5:
2e:17:73:28:cb:fa:bf:a3:ee:1f:0e:07:fb:da:6c:
0c:ed:2e:d5:44:cc:a2:4e:66:b0:42:dc:46:7e:35:
e4:9e:54:cc:60:9f:83:08:3a:01:6f:a8:ef:3b:2d:
8b:c4:71:06:4e:74:3e:ed:4f:93:10:b7:22:32:73:
cc:9e:fa:65:72:1a:cb:81:9d:ff:5a:51:d9:5e:60:
b5:8c:10:97:19:08:78:2c:3c:16:6c:cb:ca:31:9f:
5a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B5:86:E5:50:E0:7F:90:A4:C5:5F:AA:7D:F1:CB:8A:89:F4:74:D3
X509v3 Authority Key Identifier:
keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:fc:f3:0d:50:01:c9:f6:b9:40:28:66:a1:63:41:2e:5a:6a:
07:1f:30:bf:16:25:8d:ac:82:eb:1f:32:8e:c0:f2:c9:55:7a:
a2:96:14:93:a0:a0:24:e0:c9:ac:52:cf:14:cc:a4:31:a4:cd:
0d:01:18:d2:dd:26:5a:2b:ae:29:0b:c8:2a:8a:03:7f:d4:ff:
fb:3f:ad:d8:7c:9c:c5:e7:cc:24:f2:f9:b4:c7:96:ca:8a:ab:
96:8d:8c:7d:6b:9b:fc:33:c6:9f:80:46:e5:bc:8e:63:ed:0f:
03:05:91:59:f0:75:2b:f5:e3:51:37:ca:f0:15:c0:cc:fc:58:
2b:74:e2:d8:c7:a6:1b:a3:bb:ed:ff:03:1d:f0:87:cd:a7:d0:
ec:2f:23:2c:d1:09:9d:51:41:19:f6:89:e6:cc:c0:24:66:8f:
f4:1f:a6:38:97:cc:c7:c6:c5:57:01:28:5b:24:b3:e7:52:ae:
bb:c0:ad:0a:fb:92:d8:b6:1b:4e:b8:a5:e8:44:4f:c6:1f:d9:
e9:bb:47:f4:62:4f:f3:d3:e5:3f:28:19:73:96:44:3a:8f:76:
d4:76:28:f4:89:23:ac:1a:a4:51:c9:be:c5:ee:9e:d1:ee:ee:
28:c7:e0:5a:f7:1c:06:a3:30:fb:f5:b6:60:2b:63:c5:58:ff:
45:c0:b9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:44:28 2026 by rpki-client