Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
File: YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft (raw, json)
Hash identifier: 9GLdtAW/PUUPP872Q11TQWQhM52gPHhiyhSldfa5m+M=
Subject key identifier: 7F:A2:25:F3:F3:0E:0B:44:B7:19:22:3F:4B:0E:51:1E:CF:A0:5C:D2
Authority key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
Certificate issuer: /CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Certificate serial: 01A0E28723EC91A0A4E63FE5D3DFEEDB8933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
Manifest number: 1A75
Signing time: Sun 27 Sep 2026 11:01:42 +0000
Manifest this update: Sun 27 Sep 2026 11:01:42 +0000
Manifest next update: Mon 28 Sep 2026 11:01:42 +0000
Files and hashes: 1: X_VAzsonJf2-Y0J7PUgtiVvr18s.roa (hash: omFujTcefEd3WWyYkvlLAE/INtwxFEvZh0pqgOeoURc=)
2: YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl (hash: kq317ltTF0NaBpqgcGcaeUMwe6qHH0nnpzryh9RDd7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:87:23:ec:91:a0:a4:e6:3f:e5:d3:df:ee:db:89:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Validity
Not Before: Sep 27 11:01:42 2026 GMT
Not After : Sep 28 11:01:42 2026 GMT
Subject: CN=7fa225f3f30e0b44b719223f4b0e511ecfa05cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:10:93:f3:9b:e1:ea:db:4d:dd:f6:8a:ed:
05:62:25:1b:06:bc:03:42:0d:0a:29:f3:94:41:b5:
ff:a6:7f:ec:38:5e:00:aa:c3:0a:cb:2a:bd:8a:96:
ad:3b:f0:fc:2c:3e:ba:33:90:98:ba:62:46:44:21:
c7:25:36:08:5d:2c:72:19:38:6f:13:65:c8:ee:bb:
45:64:f7:40:00:14:5f:e6:b8:c7:4c:69:b7:2f:31:
5b:10:5c:92:6f:69:c6:6d:b2:21:fa:44:3c:28:19:
80:c5:41:2f:9d:55:69:0a:e8:b2:0a:9c:56:56:d9:
6c:52:26:e2:39:91:a2:48:6c:e1:f1:bf:a2:9c:e3:
be:f0:d7:58:23:71:cf:a8:aa:99:7a:3b:07:98:7a:
b1:ef:16:3e:56:7c:e2:ec:60:7e:b4:c0:35:2c:05:
bd:42:c4:ab:4f:a7:3a:63:66:17:47:5a:c0:0a:5a:
aa:f6:5c:16:02:ae:43:cb:57:a5:26:3e:15:d2:5a:
56:4c:14:9f:9f:97:37:ae:52:ac:00:30:d0:d3:a8:
8a:5d:fa:82:58:f1:34:b8:ed:4f:2b:79:c4:aa:a3:
f1:d3:99:9d:65:bd:c3:7b:cb:7f:38:fe:44:3e:81:
3a:74:a6:ba:2e:66:e4:5a:e7:8e:5d:9c:a4:38:80:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A2:25:F3:F3:0E:0B:44:B7:19:22:3F:4B:0E:51:1E:CF:A0:5C:D2
X509v3 Authority Key Identifier:
keyid:61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:4e:40:25:ff:19:8c:5d:9b:13:61:7c:d7:16:ac:ac:7f:a6:
9b:a9:8a:0b:a6:10:7f:4d:1a:d3:b3:98:16:38:74:ca:06:67:
8a:31:5d:71:a7:6b:1c:e8:64:b8:18:08:74:5d:96:34:a4:87:
bb:d3:38:4e:01:df:10:b7:24:2e:2f:4f:a9:9c:48:df:27:b9:
1c:43:e2:bf:23:d7:e9:f4:2c:1d:01:ee:b7:af:2d:57:99:60:
bc:18:fc:bb:7d:9d:ab:b7:e7:39:8f:64:d6:e5:e7:82:3e:df:
53:1e:81:ac:39:ae:4b:e1:20:26:ca:18:2e:1f:e5:eb:0d:10:
f0:cf:b0:88:cc:3f:db:c6:1b:67:1f:e3:0c:0c:35:00:b6:6b:
35:61:98:73:20:49:56:12:8e:68:ef:c2:43:91:82:23:60:b9:
db:3d:4d:78:f7:ce:ac:81:7e:b9:83:2b:44:65:a6:ae:1a:da:
f4:45:1c:51:de:66:41:48:cc:07:80:91:f0:a7:66:1e:bc:8d:
94:22:2a:21:fe:81:5c:70:60:5c:21:2b:28:61:ff:c9:67:53:
28:9b:a7:bf:21:7f:43:ea:9b:6d:3a:10:24:8b:af:8a:78:ed:
df:1c:77:9d:6a:c8:d8:2e:22:02:cd:9d:f1:23:51:34:3d:8f:
d3:4c:5f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:45:24 2026 by rpki-client