Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
File: YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft (raw, json)
Hash identifier: PH9yMvVSBil7AMccsd2uGSEnfLtcp1TM+jKcBufBCNc=
Subject key identifier: 4E:49:B0:A7:7D:DF:AD:ED:BF:B9:85:1A:C0:82:19:91:4C:74:4B:2B
Authority key identifier: 62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
Certificate issuer: /CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Certificate serial: 01A0E0CF4E749329384A01E55AFA9656A36C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
Manifest number: 049F
Signing time: Sun 27 Sep 2026 03:01:17 +0000
Manifest this update: Sun 27 Sep 2026 03:01:17 +0000
Manifest next update: Mon 28 Sep 2026 03:01:17 +0000
Files and hashes: 1: YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl (hash: n3TtWECUtz6Rv81PTCxllyeoaLQu9ivrHXRgE08urBE=)
2: otGdouxrN50G3K6_VfBD4sUjZsk.roa (hash: KaxlTsTV8jPWF44UBDhZygEc33e9Bf3O7Tb4YHBXJsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:4e:74:93:29:38:4a:01:e5:5a:fa:96:56:a3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Validity
Not Before: Sep 27 03:01:17 2026 GMT
Not After : Sep 28 03:01:17 2026 GMT
Subject: CN=4e49b0a77ddfadedbfb9851ac08219914c744b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:78:7e:27:9e:64:8b:18:44:8b:15:79:07:
84:43:25:9a:a7:be:96:7b:ab:f1:54:e2:de:0b:eb:
36:b5:b4:ed:62:6a:d0:e8:88:5a:37:3e:be:1e:49:
07:24:4e:96:83:93:9a:fe:2e:c7:45:69:28:ba:bf:
a3:8a:95:f6:03:6b:a9:52:56:34:97:df:2a:c9:a7:
ba:6c:30:d4:74:0a:26:ce:37:6a:44:93:69:19:65:
a4:10:25:7d:8b:d6:e6:8c:88:cf:1f:a5:ff:70:25:
0c:85:3a:e1:b1:1b:f0:d9:07:59:3d:2b:2d:f0:d9:
dc:8e:1a:7b:41:b8:90:9f:75:c1:32:07:98:15:7d:
9c:10:5e:9b:35:65:8a:ca:3e:57:1b:5c:33:53:d7:
49:4d:a8:42:4d:d4:a4:07:7d:49:4d:f6:6f:ee:05:
f3:69:64:64:17:27:2b:13:b9:4f:46:75:62:f9:31:
68:67:c3:da:a9:ad:fb:7d:5c:13:66:b3:cf:4a:8b:
ba:5b:52:74:f0:63:a0:ec:95:21:b0:8d:21:e0:07:
e1:67:d0:4b:b5:3c:e9:aa:b8:8e:59:34:02:52:b5:
22:35:6e:43:91:6c:03:3f:e5:76:d8:b8:8a:58:aa:
35:8b:70:d9:b8:68:4f:6a:03:85:5c:95:a6:47:4a:
31:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:49:B0:A7:7D:DF:AD:ED:BF:B9:85:1A:C0:82:19:91:4C:74:4B:2B
X509v3 Authority Key Identifier:
keyid:62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:60:f3:66:00:65:c6:3d:60:0b:24:36:37:fc:b4:01:23:9d:
18:6e:5d:af:ce:ea:54:08:67:eb:d9:98:29:95:97:eb:a0:82:
c5:ea:b7:e0:f3:1c:55:e1:19:22:93:b3:40:ac:7b:e1:f0:12:
e0:80:53:8c:9f:81:68:6f:40:24:8e:4e:22:73:0f:c1:31:80:
4a:37:46:39:a1:e9:3d:46:99:79:36:cb:8d:90:b6:73:3b:b8:
22:10:4f:51:d3:97:e2:e1:86:1b:18:6b:8f:2d:80:56:7d:40:
18:35:8c:7b:fc:7b:9b:37:be:17:14:78:3a:ad:05:b9:90:cd:
a5:c4:b8:30:43:d1:bd:b2:6f:3c:af:26:42:ad:e0:1b:a3:66:
16:36:09:6d:53:da:92:39:bc:c1:26:cd:28:4b:ad:5f:a3:0a:
c0:17:b4:20:dd:49:78:14:84:bc:62:40:ca:70:d3:8a:db:bf:
b0:84:5e:f5:f6:be:bd:dc:bf:e3:c6:4e:12:28:15:58:50:dd:
f9:c2:91:9a:be:53:44:8a:af:57:ef:b7:ef:88:e5:73:64:c8:
2a:01:cf:a2:e8:c9:f0:9e:df:41:fe:b8:93:ae:88:4b:66:93:
5f:3a:1e:e0:88:42:5d:9b:d1:e2:5d:39:85:15:67:b5:c8:21:
31:72:11:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:46:09 2026 by rpki-client