Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: N/OEewEPAf+TDX8wKFfWibiOVEbOUHAeTnxpR3t1HSo=
Subject key identifier: 4E:6B:B3:71:15:34:75:DB:8B:B7:5A:4F:44:6D:3A:6D:CB:17:DF:6C
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 01A0DC1713D5B673CE58CE7CCA58DC09988A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 1A70
Signing time: Sat 26 Sep 2026 05:01:34 +0000
Manifest this update: Sat 26 Sep 2026 05:01:34 +0000
Manifest next update: Sun 27 Sep 2026 05:01:34 +0000
Files and hashes: 1: Yo0ULWlGFniFl0kRIQzZJN8mg9o.roa (hash: j8hGB111jdt0RcgrUrjkuMAFRhv/pdlUdsj0AvFMkmM=)
2: jioszf8WkcygR-sUCmeQ22hRJBQ.roa (hash: GlPRmHwlYfAxgr1RqMrlQqRp2B9t9+qwJKez8uOIIxI=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: NJZJCPdXVmKUjW7y+iNfFoL/4bNLVNhKBuyrvh1uKsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:13:d5:b6:73:ce:58:ce:7c:ca:58:dc:09:98:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Sep 26 05:01:34 2026 GMT
Not After : Sep 27 05:01:34 2026 GMT
Subject: CN=4e6bb371153475db8bb75a4f446d3a6dcb17df6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8a:be:74:4a:3f:9a:e5:4b:72:51:28:6d:df:
0d:91:f9:4c:73:77:b4:2c:96:82:36:f4:b9:0e:b8:
6d:e8:1c:11:2b:4f:a9:b5:e7:87:93:bb:c6:49:a1:
62:48:2f:51:02:e5:51:de:1a:22:5f:db:f2:2e:fb:
ce:f2:ef:4c:5f:b8:2c:c5:f2:d1:df:7b:ec:12:49:
a4:91:6f:e2:12:6a:e5:ca:b7:1d:f1:36:a4:65:10:
23:68:9d:da:33:ef:e9:b4:da:33:e0:42:a8:38:13:
ca:63:17:c2:6e:23:69:a5:60:a3:1e:1a:f7:c2:a5:
51:db:b1:47:42:f5:fd:96:f4:25:5d:ae:8e:cc:28:
a5:72:49:6f:67:10:f6:82:df:78:a2:a0:a7:65:a0:
f0:3d:a8:25:18:c9:8c:f7:f5:d5:38:71:8f:c3:16:
d7:68:4a:3c:40:bb:53:18:d0:45:97:fb:71:9b:d0:
b0:8b:ee:a3:74:aa:cd:d5:f4:d1:c8:0e:b7:8e:9f:
77:f4:59:cc:7e:52:10:0c:47:e1:44:56:c2:ac:87:
1c:52:6c:b4:78:67:38:95:8d:5e:81:da:51:c2:61:
a1:e6:bc:f6:f4:20:a0:bb:e6:ee:fa:65:d5:16:61:
20:6b:f4:43:ad:3d:32:99:da:c3:15:10:23:d2:fc:
dc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6B:B3:71:15:34:75:DB:8B:B7:5A:4F:44:6D:3A:6D:CB:17:DF:6C
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0a:d2:db:08:07:bb:07:b2:19:9f:ea:e3:7c:ab:92:8a:f1:
14:1c:b2:8c:0f:20:aa:47:5e:eb:d8:1e:f7:0a:3e:7a:80:a2:
57:ad:a6:39:1c:d6:2e:27:0a:8a:92:56:3c:73:a2:5c:db:f5:
54:37:2b:4b:4d:9b:40:75:bb:02:65:df:67:02:1a:23:31:a5:
cd:16:d3:34:e7:e5:52:f0:6b:8b:06:0a:1b:33:40:74:ea:c6:
33:a3:76:a7:29:60:f4:cc:71:50:be:6c:be:45:11:e8:2a:b4:
92:27:3a:5b:d3:6d:60:ae:56:64:ab:5a:86:a3:bb:8a:e1:c2:
83:48:48:64:09:a5:49:25:46:1f:19:77:91:f3:15:9f:82:24:
a1:d0:73:b3:5f:4c:98:d2:b6:b7:13:ef:ef:8b:a9:59:47:d9:
9f:dd:9f:35:61:9f:37:56:ce:5f:ea:01:5e:26:68:77:af:5e:
97:fe:21:0d:75:78:e1:6d:0b:55:8b:39:a8:33:f3:ff:9b:3c:
ff:c0:61:09:be:99:a5:97:44:91:19:0e:3b:77:02:7e:cb:b8:
d7:8f:50:23:bf:a5:71:33:11:ed:10:e8:70:21:02:e6:e4:03:
dc:2d:e0:d0:42:d8:5d:1c:c7:b4:80:bd:a0:34:4a:05:98:3c:
d6:35:f4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:27:12 2026 by rpki-client