Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File: YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier: D5PSkKznPDhlfYjLldXAg5Cwrr2d081f3oY0IHWi3Cw=
Subject key identifier: 2A:12:8F:F5:00:28:F0:7B:5D:45:B0:EC:97:F5:20:76:C2:F5:F4:90
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer: /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial: 01A0D3F02555E0BB4B51AD63FB60D0854CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number: 1395
Signing time: Thu 24 Sep 2026 15:02:05 +0000
Manifest this update: Thu 24 Sep 2026 15:02:05 +0000
Manifest next update: Fri 25 Sep 2026 15:02:05 +0000
Files and hashes: 1: TNfS4qjFMyp6FRl_4ldjm_Y_i3Q.roa (hash: V9e1y2xxqghsyNge3bSzEeJvbCQltZtzBhjXNsBZP/k=)
2: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: DQqNhTGTQ5UcwyWBDXoEIxND6JN1bOy6ZZwpHatBahc=)
3: aL2Fa93Pq0uyo59pgUgspQyUPKc.roa (hash: Bga4XDZkfRChSZnLWZqmel++JYpGqGLT7JPEKTaVvO0=)
4: rxVxvq80s018HousURd0ic36W10.roa (hash: 4vWzh852MFR+K32Ov40708je2OYVViB9fVjK6c0oRMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:25:55:e0:bb:4b:51:ad:63:fb:60:d0:85:4c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Validity
Not Before: Sep 24 15:02:05 2026 GMT
Not After : Sep 25 15:02:05 2026 GMT
Subject: CN=2a128ff50028f07b5d45b0ec97f52076c2f5f490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:d6:1a:b0:b5:7a:9d:42:5d:8e:aa:a1:af:
6b:13:ae:77:01:73:fe:42:b9:69:b8:c3:fc:e6:2b:
eb:21:5a:0a:30:4f:b1:8c:ea:3b:0e:ae:c1:98:b3:
b5:de:3c:88:29:7e:55:2b:41:08:65:db:e3:39:d2:
0f:8c:0c:b9:2f:e2:d1:fb:5f:30:56:8a:df:75:81:
6d:a6:a0:69:40:01:51:50:6a:0d:4c:96:83:f6:25:
21:fe:e0:5d:58:4e:12:5c:b6:41:72:75:c2:d1:34:
e4:fa:fc:e8:a4:da:8c:3e:04:d3:ba:2a:6c:32:79:
a3:89:09:11:90:4c:d4:0e:72:53:46:2f:31:7b:50:
f5:d2:b8:aa:0b:6f:59:a3:96:16:93:51:b4:ae:cf:
e5:8a:d3:19:84:f5:f2:8b:fa:c7:b5:b5:75:b8:60:
6c:db:a8:86:35:74:7f:37:f9:69:28:99:db:d7:10:
7c:09:68:5d:b1:47:66:f4:fa:4f:73:21:02:f7:f4:
78:56:52:3b:8f:6e:9c:78:08:56:8b:15:15:b2:19:
56:dd:74:0b:9a:39:66:0b:17:b3:57:eb:d1:f8:89:
4c:f2:46:d8:f5:0c:87:ea:2a:1f:3a:8b:91:c7:1e:
b2:ca:4e:94:99:77:f4:28:a9:e9:53:b1:4b:12:6d:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:12:8F:F5:00:28:F0:7B:5D:45:B0:EC:97:F5:20:76:C2:F5:F4:90
X509v3 Authority Key Identifier:
keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a3:09:6b:de:15:d1:c8:ed:66:ad:76:e7:a0:59:d7:5b:ff:
2d:20:ef:61:97:70:ef:95:27:1a:7d:78:c0:6b:33:ae:04:9c:
a2:e7:8a:c6:f8:15:bc:a8:47:74:3a:68:d4:ea:13:0c:54:16:
ea:da:5f:e9:cd:b3:87:fe:b4:58:9b:dc:29:6d:15:7d:0c:0b:
bf:93:38:02:89:bf:b5:c7:f8:cc:54:b9:90:b7:39:d4:4e:ec:
ca:a2:af:27:6b:79:6e:27:85:de:87:fb:04:19:fb:a4:2a:68:
5f:7d:4a:95:29:11:3a:b0:99:da:07:31:39:ec:15:cb:01:f7:
4b:2d:22:8e:03:ca:7b:3b:ae:c2:8f:0f:cd:9e:fb:87:ea:78:
0e:c2:ad:cc:b0:41:e3:d9:ba:6a:97:06:82:bb:d8:fa:58:3c:
e9:14:31:df:89:d2:7c:13:e9:8b:22:5b:62:2b:10:3b:dc:ca:
b5:39:ea:9a:3c:80:47:70:91:33:f2:bb:d7:fd:31:ac:2c:f1:
76:57:36:42:a5:e5:e9:60:92:fd:4c:3f:8b:13:8b:bf:c8:03:
63:ea:cb:34:d9:c7:c7:ca:45:22:33:dd:8c:7d:3e:e4:72:91:
02:21:4c:41:04:c9:76:22:81:2d:3a:4e:40:d8:fa:eb:c3:6b:
a6:99:00:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:48:49 2026 by rpki-client