Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/1326da-0994-4eaa-83c9-05a01582b9ca/1/1YMmDGbhIphKfAy7RDwS0iv2_pU.mft
File: 1YMmDGbhIphKfAy7RDwS0iv2_pU.mft (raw, json)
Hash identifier: odyiBR9fPMlqDnPsF+OgWDWGM1OgrRAt//oVRPOwD1g=
Subject key identifier: 3D:A2:03:57:95:67:BD:B9:3F:8E:E6:16:79:D3:86:33:CE:7F:B4:45
Authority key identifier: D5:83:26:0C:66:E1:22:98:4A:7C:0C:BB:44:3C:12:D2:2B:F6:FE:95
Certificate issuer: /CN=d583260c66e122984a7c0cbb443c12d22bf6fe95
Certificate serial: 01A0CFDAE6CA4AB1461AB03C195DFA4B87E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YMmDGbhIphKfAy7RDwS0iv2_pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1326da-0994-4eaa-83c9-05a01582b9ca/1/1YMmDGbhIphKfAy7RDwS0iv2_pU.mft
Manifest number: 10
Signing time: Wed 23 Sep 2026 20:00:24 +0000
Manifest this update: Wed 23 Sep 2026 20:00:24 +0000
Manifest next update: Thu 24 Sep 2026 20:00:24 +0000
Files and hashes: 1: 1YMmDGbhIphKfAy7RDwS0iv2_pU.crl (hash: MecFTUXv0FAkgp0vUEKtcZZjirqPVVnU6AxVhbkhz5Y=)
2: wtv5JlsouerZ9mKF0DSWEKwQb2A.asa (hash: G3PiXJBr8Bpr8DEk3v6Lnn84qnwslGloPpsFmCCklQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1326da-0994-4eaa-83c9-05a01582b9ca/1/1YMmDGbhIphKfAy7RDwS0iv2_pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1326da-0994-4eaa-83c9-05a01582b9ca/1/1YMmDGbhIphKfAy7RDwS0iv2_pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YMmDGbhIphKfAy7RDwS0iv2_pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:e6:ca:4a:b1:46:1a:b0:3c:19:5d:fa:4b:87:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d583260c66e122984a7c0cbb443c12d22bf6fe95
Validity
Not Before: Sep 23 20:00:24 2026 GMT
Not After : Sep 24 20:00:24 2026 GMT
Subject: CN=3da203579567bdb93f8ee61679d38633ce7fb445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:d2:36:34:ec:14:90:5e:d4:5e:99:91:2c:
86:38:84:73:5f:25:fb:f6:20:0f:29:d3:5a:bd:13:
c1:6e:8a:ea:af:ec:cb:b0:72:32:3d:70:a5:a5:f1:
b6:be:85:67:c2:55:69:52:4c:4b:6e:ca:8e:9d:64:
39:ac:49:17:3c:7a:b6:e9:3f:2b:8a:3b:9d:1f:f7:
4d:65:80:d5:28:e7:3a:d4:56:7d:49:c5:11:b2:5d:
68:68:de:14:d9:e9:6a:3e:e1:44:76:98:d0:fd:4d:
23:f8:4c:41:bd:07:61:fb:10:ad:94:19:39:33:42:
58:05:98:52:29:37:c3:24:a1:70:e1:bf:6e:95:75:
77:48:8e:62:87:47:01:1f:22:0d:fb:a4:cb:06:0d:
32:cc:7f:3a:0a:bb:ea:65:90:8a:76:b6:df:af:6b:
fb:dd:c4:05:5e:db:3f:f4:1e:76:d2:87:38:76:36:
87:6f:36:33:e5:a4:d5:a7:f8:c6:5c:68:14:ff:96:
43:6f:80:c2:3d:bc:a3:38:6a:0e:f9:f9:6e:64:ff:
5a:9f:15:3e:0b:7a:7f:eb:f1:1b:8b:60:c7:5d:7c:
37:ff:16:c9:5e:20:24:cc:2f:d6:53:a3:28:28:a9:
b2:e5:42:b6:a1:b4:54:ce:5e:7d:f4:0a:40:79:31:
f9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A2:03:57:95:67:BD:B9:3F:8E:E6:16:79:D3:86:33:CE:7F:B4:45
X509v3 Authority Key Identifier:
keyid:D5:83:26:0C:66:E1:22:98:4A:7C:0C:BB:44:3C:12:D2:2B:F6:FE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YMmDGbhIphKfAy7RDwS0iv2_pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1326da-0994-4eaa-83c9-05a01582b9ca/1/1YMmDGbhIphKfAy7RDwS0iv2_pU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1326da-0994-4eaa-83c9-05a01582b9ca/1/1YMmDGbhIphKfAy7RDwS0iv2_pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:cf:19:85:e4:ce:57:a0:dc:9c:fd:50:df:ae:4c:2c:80:ce:
60:30:e4:36:61:4e:05:2e:cb:57:d1:3d:e3:dc:5f:54:89:8d:
7a:5b:c3:de:94:88:07:9b:e2:3c:3f:70:b7:ec:78:31:0e:0f:
45:b6:d2:75:e8:b0:1d:f8:ad:82:57:9a:14:80:35:16:ed:6f:
1b:10:d3:bb:59:c2:ba:0b:03:cf:66:0a:5b:48:d9:3e:a7:94:
ac:97:44:25:a8:74:ff:e9:f2:b9:4e:51:6c:06:cd:77:39:a8:
9f:70:69:dc:82:65:94:0d:0e:85:fe:b6:9d:ad:22:7f:4c:71:
4e:3a:ef:e2:37:a7:40:ce:9e:b2:b9:d2:e3:c3:f3:86:4a:76:
60:ed:05:b1:a1:cb:44:4d:fe:91:68:ce:1d:e7:70:ce:76:53:
13:12:ae:d6:42:b5:d9:72:eb:be:d6:53:dc:ef:96:7c:e2:23:
69:4c:01:0c:88:2e:b9:8e:de:39:4c:22:70:54:6f:7c:70:9c:
83:2d:9c:f4:40:b4:75:b0:e4:82:89:bc:63:e0:e3:56:16:eb:
91:db:e1:07:34:aa:11:b8:4d:b5:fc:0b:e1:34:5b:b4:f4:b8:
c2:f1:c8:3d:25:c3:b6:14:5d:28:33:36:20:a6:bc:0b:ff:a4:
b6:f9:18:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:24:28 2026 by rpki-client