Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
File: YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft (raw, json)
Hash identifier: Gfq0FZn4AkebkoPrl0twgP/5fFW0riu+bFvL58G0+G8=
Subject key identifier: 74:10:66:ED:C9:27:54:45:31:1F:BB:5A:85:72:23:3B:1F:0A:0F:75
Authority key identifier: 61:F5:FB:83:DA:45:58:46:EA:64:1A:A7:21:11:C5:FC:2C:7C:46:83
Certificate issuer: /CN=61f5fb83da455846ea641aa72111c5fc2c7c4683
Certificate serial: 01A0E02AFC5A6B70FC8A8D30949504EEF567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
Manifest number: 0138
Signing time: Sun 27 Sep 2026 00:01:48 +0000
Manifest this update: Sun 27 Sep 2026 00:01:48 +0000
Manifest next update: Mon 28 Sep 2026 00:01:48 +0000
Files and hashes: 1: YfX7g9pFWEbqZBqnIRHF_Cx8RoM.crl (hash: KbcexrtTRalDHJwMLS3gdG1KUxAYuBdI7HFzIRltq3U=)
2: r4vw3CV_1lGW-7JvXgWzIRjbm3U.roa (hash: 0TvJ5qpmjC4SexSyQHzjCW5fHWTpVt06kKMKKnnsoV0=)
3: w-zL9cm1eAuLHEkbGACu_Uty4Ws.roa (hash: 4C8sJjkhX9FkHPcP/da4C31h5T/IA24CkXSEegBHM68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:fc:5a:6b:70:fc:8a:8d:30:94:95:04:ee:f5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f5fb83da455846ea641aa72111c5fc2c7c4683
Validity
Not Before: Sep 27 00:01:48 2026 GMT
Not After : Sep 28 00:01:48 2026 GMT
Subject: CN=741066edc9275445311fbb5a8572233b1f0a0f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:fa:2f:e4:9c:4d:e5:30:6e:a3:39:6b:b2:
7e:1b:e3:51:57:5b:cf:ef:91:19:5e:7a:ae:96:9b:
fc:aa:5d:e2:bb:11:88:9e:d0:1b:5a:9c:b8:70:c8:
aa:50:cb:f2:80:de:92:52:2f:2c:59:39:7a:18:22:
d1:08:98:81:86:84:18:33:cc:07:f8:7e:06:26:36:
92:1e:41:54:14:b2:6e:b5:82:5b:3d:b5:69:78:bc:
68:bc:a2:81:f5:fa:32:e1:3d:96:8b:97:9d:82:d8:
3f:15:0c:b1:07:18:29:18:d7:f4:5c:d6:b6:54:95:
a6:d7:77:be:66:4d:c2:80:0f:2f:b0:42:03:81:f7:
e3:60:b6:cf:b6:c3:29:f9:a4:3a:6c:08:bb:1a:a2:
ba:c1:22:e9:f0:8b:ae:ee:60:1b:34:7e:9f:8d:52:
ea:34:7c:d0:5a:5b:fc:34:9b:a6:2d:77:8e:c7:21:
5c:99:01:85:7d:28:96:42:6a:28:85:ac:e1:a4:d3:
b3:70:0c:df:04:5d:f9:88:35:55:76:bc:bf:99:01:
54:85:16:df:b0:49:58:44:d7:c3:1c:4b:a7:cf:30:
00:38:0a:ae:b1:46:4f:39:9b:7a:f2:e7:bd:cb:27:
2b:20:6f:29:50:e6:b7:bb:1c:82:53:f8:f3:86:e6:
71:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:10:66:ED:C9:27:54:45:31:1F:BB:5A:85:72:23:3B:1F:0A:0F:75
X509v3 Authority Key Identifier:
keyid:61:F5:FB:83:DA:45:58:46:EA:64:1A:A7:21:11:C5:FC:2C:7C:46:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d9:be:9e:bc:fb:3b:06:09:d1:fb:ee:6b:72:9e:f3:d7:5a:
69:2d:89:b3:7b:2b:79:ed:90:2c:66:c1:48:cf:4a:d8:e7:3a:
a5:9e:e0:8a:7a:35:6f:19:a0:66:2c:aa:ee:d0:80:f1:78:3c:
4a:de:86:e6:55:39:6b:9b:8f:a1:15:d2:71:b2:e7:d3:8f:89:
37:ea:6f:fa:da:f4:d6:ab:e2:c0:df:b8:54:8f:4a:70:25:7b:
e7:40:71:16:43:5f:20:5c:39:c7:22:9c:08:4f:50:96:65:cb:
11:6e:9b:c9:fc:8b:08:05:fb:3e:4a:4a:fc:e3:56:e4:0f:22:
c4:09:aa:a2:b8:13:86:0f:4b:ae:81:8c:73:35:c3:66:3b:01:
e0:49:d4:74:bf:fe:38:55:f2:84:8d:27:0e:33:0e:d7:eb:01:
ac:4b:07:cf:24:2f:c6:e2:6c:87:38:16:06:56:ad:ae:0c:56:
c0:1d:0a:3f:a2:e5:02:a4:43:28:2f:ab:cd:f1:97:4c:87:66:
db:cb:8e:75:87:59:a2:b6:ff:71:94:cb:c3:ac:ca:ff:18:f9:
1a:66:1e:ca:35:e7:09:b5:36:e4:70:92:69:af:c4:6d:5d:42:
40:e0:ba:b3:97:8f:79:d9:16:4d:02:b0:3c:f1:b7:44:91:05:
4c:9a:a7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:14:53 2026 by rpki-client