Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File: YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier: NeZwplCMRQ+p5Vea0Ouu1ldQYENg/Y/gS7NsrebAgIQ=
Subject key identifier: 2C:48:BB:C9:75:00:3C:CF:95:9D:5C:93:2A:E6:D8:48:42:5A:A8:F9
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer: /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial: 01A0D34B14912AB46C3CD1B031D4847FD4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 12:01:47 +0000
Manifest this update: Thu 24 Sep 2026 12:01:47 +0000
Manifest next update: Fri 25 Sep 2026 12:01:47 +0000
Files and hashes: 1: D8kmbrxGH990IEjHOfCChDR_0RI.roa (hash: av49JGDKCD6wMkJgxe4+rUguaf8/22rVV0DlSQeu/3g=)
2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: xYVIthPM4M20HLyv5I1xWStUjSj3K/fRWIbJwhi3T7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4b:14:91:2a:b4:6c:3c:d1:b0:31:d4:84:7f:d4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
Validity
Not Before: Sep 24 12:01:47 2026 GMT
Not After : Sep 25 12:01:47 2026 GMT
Subject: CN=2c48bbc975003ccf959d5c932ae6d848425aa8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:7a:4f:cd:44:2a:8e:4f:b0:9b:e7:94:36:
a5:0a:ce:97:d9:0b:16:33:bb:e6:ec:bc:0e:62:69:
6f:75:5a:ec:d8:1b:fc:49:82:0c:d8:b9:86:4b:48:
8f:a8:4f:c6:ad:42:6c:e8:3d:98:7a:0b:4c:75:7a:
31:cc:4f:70:ce:9c:05:55:fc:30:09:94:dd:e6:29:
f4:93:26:7b:68:20:29:a5:b0:e8:34:63:f8:63:07:
b4:ca:e1:96:4b:1a:7e:fc:1d:ed:53:11:76:e2:03:
58:eb:ab:95:33:6e:45:95:f5:61:96:61:ad:83:a6:
b3:22:df:b9:78:45:d7:28:a7:9c:ba:84:ff:25:f9:
4f:e0:63:98:91:70:a4:8f:a4:21:0e:04:5d:f5:1e:
ab:7e:b2:89:60:7d:d3:ff:58:8a:a3:e8:53:fd:68:
7d:5b:eb:bf:ee:3f:61:9a:e4:6a:13:38:e4:34:2d:
48:9d:02:4c:e0:82:b2:1b:6f:bf:66:46:8e:6d:61:
ec:11:09:17:03:e6:17:61:5b:8c:dd:ee:56:f7:1d:
ed:74:3c:f5:89:77:c9:ce:e0:8a:c5:71:da:7b:ed:
8b:6a:5c:bb:04:e1:6a:8d:d1:12:62:77:41:22:b6:
82:4e:85:14:d9:69:f8:58:db:a2:83:2a:16:27:a4:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:48:BB:C9:75:00:3C:CF:95:9D:5C:93:2A:E6:D8:48:42:5A:A8:F9
X509v3 Authority Key Identifier:
keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:38:ba:ad:9d:fd:18:50:56:d8:99:bb:2d:6f:91:0e:2c:60:
f6:27:b0:cb:7d:6a:dc:9b:a0:9b:29:bb:98:15:71:3f:0a:9c:
aa:b1:44:b2:8a:1e:09:97:5a:23:73:4d:89:8a:e1:23:f0:62:
49:4f:dd:e9:ce:d2:6a:d8:c2:b7:ad:fd:6e:8c:77:7f:50:dd:
03:d6:b6:c9:6d:0b:5c:fe:a7:12:7c:b2:29:2c:3a:6a:e4:35:
b5:35:3a:8f:b5:73:8e:60:25:d2:fc:64:ec:d7:28:04:f4:11:
37:d6:b9:c2:89:92:ee:37:44:75:0a:a2:d4:7a:dc:31:fb:ce:
b3:57:2f:d9:6f:b0:c1:3c:4a:02:35:c2:c7:b0:38:95:34:e1:
90:26:4c:4f:c9:3f:d2:4a:45:1c:b7:a8:47:ef:eb:1a:18:59:
71:a7:7d:37:7b:db:1a:85:b0:fb:e7:2d:1c:97:fe:7a:cf:e6:
7b:3b:e7:68:b6:dd:ec:ed:a7:87:16:c2:99:ac:87:93:5a:60:
89:69:d3:7b:19:08:f7:35:d5:e6:9a:21:c5:26:cb:db:92:5e:
f2:a1:6d:00:1e:59:74:23:07:13:80:d0:f8:0d:8c:f1:b3:78:
27:70:d4:5a:18:95:fe:ed:f7:c0:9c:56:6e:33:1d:4b:34:42:
8c:63:57:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:06:01 2026 by rpki-client