Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: 4tzAxXJvgTrCFYVbNN0fLeFOAUHwUnI7u2yGQYTmX4w=
Subject key identifier: 05:67:44:96:31:42:F4:4E:F2:D8:4B:CD:B0:79:08:D3:CA:42:CC:D5
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 01A0DB3B3DADCA5961593E3C931E7547C757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 1A71
Signing time: Sat 26 Sep 2026 01:01:27 +0000
Manifest this update: Sat 26 Sep 2026 01:01:27 +0000
Manifest next update: Sun 27 Sep 2026 01:01:27 +0000
Files and hashes: 1: 6C5H6weklOvyIUmH6upyoLS9Fjk.roa (hash: 4tDaLUdULnIJjiPlfBjB5U5pwdeJP/TF6DH4C/OJMZ4=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: KXCxLDIpOEK5g7wF8QXMnJpIbiCiD0EC+tm1cZEI/y4=)
3: uTaIFz1uKDcuAGI72zb9cgQJSDU.roa (hash: /chT2KHjwm4Z4cMac2BTFt3alYJEDlnfPwAVuuzxgMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:3d:ad:ca:59:61:59:3e:3c:93:1e:75:47:c7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Sep 26 01:01:27 2026 GMT
Not After : Sep 27 01:01:27 2026 GMT
Subject: CN=056744963142f44ef2d84bcdb07908d3ca42ccd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a3:a0:33:a2:92:20:3a:1e:d7:13:60:9c:c9:
60:5c:fb:e4:41:ee:4e:fb:a4:4f:1c:d1:46:23:93:
33:41:f9:03:bf:52:79:5f:fe:4a:37:10:bb:ed:ae:
c8:92:da:71:36:b7:38:0f:36:62:bf:b1:51:15:0c:
1d:4c:ce:e9:11:27:02:79:5e:82:9e:55:f7:4e:1e:
0a:24:dc:c3:56:ba:6a:cb:bc:6a:54:1d:c2:48:20:
17:f8:4f:39:d3:ac:03:41:b5:92:ce:3e:f3:dd:9e:
f8:ad:a8:41:ae:b1:40:f0:d4:c6:08:1f:4e:60:a9:
3c:70:e0:4f:8d:1c:f1:02:fb:df:d6:34:b7:49:d9:
98:d3:b0:65:ae:ab:4c:64:d3:33:23:00:1d:4d:b7:
96:56:81:06:ab:6c:bf:fc:6f:d5:51:40:da:a4:d6:
64:99:5f:41:1d:d1:02:e8:a3:d6:9a:51:45:f9:21:
68:72:47:30:fe:27:65:27:44:99:dc:d7:86:00:48:
96:77:c0:85:fd:96:d9:b5:c5:d7:7e:3c:06:5f:ff:
41:43:bb:c8:73:84:8f:ef:01:bd:09:6e:15:1d:97:
ad:8e:c0:3a:46:b1:ae:ed:0c:d9:54:dd:af:66:74:
8c:46:28:5e:a3:5e:37:bf:62:5a:7c:e2:be:ce:7d:
ab:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:67:44:96:31:42:F4:4E:F2:D8:4B:CD:B0:79:08:D3:CA:42:CC:D5
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d2:fe:1f:8c:ab:eb:6b:98:42:e8:a3:2a:8e:8e:68:07:3b:
1e:bd:86:08:02:4c:3c:a8:49:b9:a9:14:27:9a:21:31:4b:c0:
60:75:77:ab:6f:3e:28:75:38:b6:8f:aa:7e:35:f9:2a:6e:e4:
92:dc:c5:f7:14:77:0b:9c:c8:e7:d4:dd:85:61:c0:65:3f:87:
89:39:38:e8:33:fc:0f:5e:92:97:94:50:b8:cf:6a:1f:00:20:
db:14:3c:9d:cf:57:1e:80:fd:71:fc:be:e2:8b:b6:88:75:90:
54:10:04:ec:c6:02:1f:28:9a:cc:a7:05:4e:36:bf:93:82:a1:
9c:15:8b:a0:1d:f7:eb:89:f4:0e:26:4c:0b:a3:9a:58:66:7c:
0d:25:cb:ff:a0:03:01:26:92:55:c2:35:87:46:f7:f7:56:87:
ea:e8:7c:fb:d4:b0:d0:96:1b:ee:51:65:68:7f:ed:38:42:85:
9b:da:f9:1a:f7:b2:a8:64:b2:9b:5b:67:c7:63:cb:2f:48:83:
1d:cb:33:df:4a:ac:cd:c9:50:77:b8:4a:b3:1e:6f:78:59:ae:
1b:7b:91:02:d8:89:bd:c4:03:1e:fc:11:71:87:ea:ae:df:84:
ff:36:9a:80:b7:d1:21:40:81:2a:ef:78:90:fb:56:09:98:11:
8f:69:85:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:26:33 2026 by rpki-client