Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
File: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft (raw, json)
Hash identifier: 6USkgF/7+0SC+Za/B4IxKBHiDRhVWi+ANc3o2XHrzVY=
Subject key identifier: EB:F2:2D:69:87:91:61:E6:2F:E1:85:75:51:9D:8B:85:8A:D5:E6:52
Authority key identifier: 61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
Certificate issuer: /CN=61041121ccc6e65d933961fd572d59e261f21a31
Certificate serial: 01A0DA9671F91C15333BA16B06CE006B05C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 22:01:27 +0000
Manifest this update: Fri 25 Sep 2026 22:01:27 +0000
Manifest next update: Sat 26 Sep 2026 22:01:27 +0000
Files and hashes: 1: 8x9EixpS_cTo1YUsFO5RBhE9yQg.roa (hash: H+557dvreWM3Tp/NNdorNLcHs2h/JJEHvmmY5yieUec=)
2: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl (hash: /ekVaI1mbYnMW1cgdzRAhF0Dj3X2lhKSscI9kR+rAjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:71:f9:1c:15:33:3b:a1:6b:06:ce:00:6b:05:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61041121ccc6e65d933961fd572d59e261f21a31
Validity
Not Before: Sep 25 22:01:27 2026 GMT
Not After : Sep 26 22:01:27 2026 GMT
Subject: CN=ebf22d69879161e62fe18575519d8b858ad5e652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:de:61:54:ce:08:a6:89:8c:86:67:31:f2:
49:78:0f:fd:ae:6f:8a:bd:72:c6:14:ac:6e:35:df:
39:51:75:73:93:6d:ed:b5:27:cc:71:2d:a3:f4:79:
78:61:80:df:47:65:79:7d:b4:46:e7:a5:31:77:e5:
3b:f4:cd:96:ca:9f:ae:54:ad:f0:57:1e:3d:00:f7:
72:3e:ae:87:4f:61:66:41:1d:74:40:2b:0c:f4:74:
57:dc:76:ce:f1:86:ac:fd:07:c2:ea:5f:cd:a3:a0:
c8:b2:98:58:24:28:55:7c:00:d4:1f:74:d3:b0:f6:
3b:10:f0:4b:c5:b2:c8:87:a6:d4:09:e9:48:94:4c:
c0:d7:79:35:e6:60:9c:a3:22:f8:52:19:6f:8d:63:
0e:09:9e:2f:e6:43:56:41:ef:94:3e:3c:8b:df:1a:
97:f9:11:b8:60:70:d2:6f:da:31:e3:eb:35:a4:22:
0b:9e:bb:cb:02:2e:8f:27:de:56:22:b8:e4:c4:72:
fc:9b:7f:d4:39:ec:dd:4f:cf:e9:c9:46:cb:d8:16:
20:53:9a:97:97:ee:e9:93:ac:3c:bd:55:c2:7c:31:
f6:7c:6e:b9:5c:65:08:6b:d9:6e:eb:15:ec:d9:bd:
40:32:35:aa:da:7f:8a:18:fb:68:3a:36:a6:10:18:
12:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F2:2D:69:87:91:61:E6:2F:E1:85:75:51:9D:8B:85:8A:D5:E6:52
X509v3 Authority Key Identifier:
keyid:61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f9:4c:d3:8f:8e:70:c3:5f:fb:5a:95:a3:25:5b:6b:e2:ac:
0d:6c:5d:e0:44:c7:e8:f7:90:c8:b0:5a:ea:44:df:22:43:4e:
64:0d:37:d6:d3:a1:74:b0:e4:b8:92:2a:21:fc:27:d6:03:6c:
dd:f7:73:cb:25:29:5e:2f:f0:27:e3:fa:b1:43:6b:bc:29:1f:
53:9b:fa:4c:5e:b3:d0:7b:3d:36:b5:28:bc:4e:86:89:28:93:
68:4b:fd:4c:ba:b6:3e:e5:ab:a4:bf:f9:a8:07:95:55:2d:e6:
0e:34:04:cc:c0:e1:f9:70:e2:19:4f:ec:c6:19:a7:1e:dd:68:
78:f7:0d:c5:9a:5c:19:5a:0b:af:67:36:8a:90:1d:62:94:0f:
1c:42:0e:db:76:2c:c3:84:ce:5c:98:b8:2a:77:15:0f:8e:63:
8a:85:c2:2e:2d:6b:85:ce:d6:a2:13:16:02:c9:ec:89:70:6b:
b1:5b:bd:9a:6e:5d:b3:77:4e:39:58:4c:7c:c3:b8:7e:5c:40:
b7:f4:da:27:a3:63:a9:91:65:68:ef:48:df:03:a3:19:a8:5f:
e1:dc:2b:96:da:43:f2:ac:f1:ca:aa:2c:6a:17:1c:c0:c0:37:
3f:5f:ce:32:c2:57:09:25:ab:e5:e3:fc:14:70:6d:7b:8c:87:
3d:56:9e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:14:58 2026 by rpki-client