Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
File: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft (raw, json)
Hash identifier: l7wYc9cCHbLsgL4pI+EYBiET3hIJCzi4CIil15y7NJ0=
Subject key identifier: 3C:6A:6D:2F:2C:2E:5D:BE:C7:59:40:67:BB:05:FA:56:98:1F:0E:EF
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial: 01A0E7AF4A1120BD2E8A672F205E90078004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
Manifest number: 0A94
Signing time: Mon 28 Sep 2026 11:03:39 +0000
Manifest this update: Mon 28 Sep 2026 11:03:39 +0000
Manifest next update: Tue 29 Sep 2026 11:03:39 +0000
Files and hashes: 1: 1xbn_UMCw0INiad24Fz-EfLf1Gw.roa (hash: SZrNeUwfQoqqElnDWbZPqxb5PbXGACF+9AzBOt+xfa8=)
2: 6XExm7Uo-EU0Ms0tsb7xKnyJkVk.roa (hash: BWgqT1gKxehU5OIENtOQqrP4y0cmP4jYKvHGk1A4LAc=)
3: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl (hash: wKhdk08VNFZUu3ma4tzaKZ2J6PAxFE0xmMB8Ah1mJX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:af:4a:11:20:bd:2e:8a:67:2f:20:5e:90:07:80:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Validity
Not Before: Sep 28 11:03:39 2026 GMT
Not After : Sep 29 11:03:39 2026 GMT
Subject: CN=3c6a6d2f2c2e5dbec7594067bb05fa56981f0eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:49:36:8e:93:a8:7b:a8:51:25:9b:27:37:
f3:27:3f:0e:33:61:4e:aa:8a:73:44:53:4e:c3:dd:
79:97:7b:eb:5d:ae:0d:04:fa:6a:b7:26:29:12:18:
a3:76:e3:8b:4b:3b:fa:32:e4:30:e3:b1:80:20:59:
1f:7b:68:f7:43:95:97:e4:78:de:ec:8b:29:dd:ca:
82:7b:22:bc:a6:99:58:a9:60:e1:c3:dd:6c:9b:b8:
f7:3b:fb:2d:77:3f:6b:27:d8:f0:5d:fa:53:2d:f9:
8c:d3:d5:66:f8:49:59:b0:c7:60:56:ad:12:1b:d8:
ef:4f:99:6e:ea:5d:ba:a3:34:ad:d7:75:02:3c:90:
d0:72:62:8a:69:e7:c5:47:f3:8c:66:32:ac:c5:cf:
ef:88:a6:33:0f:4d:44:b1:89:ad:79:f6:91:ec:ee:
4a:3e:74:af:eb:13:0e:ee:1f:8e:b2:c7:6e:20:a1:
cb:ae:50:13:38:b7:54:ed:e8:cc:6b:3a:ee:43:39:
6a:03:f6:b0:70:48:77:dc:07:8f:2e:a0:02:71:5d:
f8:27:bf:3a:8b:57:e3:2a:91:2b:f7:a7:df:3a:f0:
b8:d6:36:8d:a0:27:18:a3:04:eb:b4:ee:95:4a:b1:
65:d9:3b:42:31:03:80:85:09:52:08:7d:b3:ef:8f:
6e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6A:6D:2F:2C:2E:5D:BE:C7:59:40:67:BB:05:FA:56:98:1F:0E:EF
X509v3 Authority Key Identifier:
keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5b:7b:6e:2f:8c:ec:a3:b9:cd:cf:67:c9:fd:2b:12:ff:0a:
18:78:84:b8:9e:61:30:7f:ef:c8:e1:3d:f3:97:c2:14:f7:78:
97:69:15:23:76:c1:94:5e:66:de:24:02:59:f5:01:6d:38:7e:
c6:03:b9:48:8b:b2:24:22:2d:06:86:f1:1a:3c:c3:26:9a:ea:
ad:49:93:de:ab:40:59:a3:e2:e9:5f:b5:1b:ba:37:05:26:dc:
30:31:4b:c1:cd:84:72:56:57:9c:74:85:40:64:9a:68:78:ee:
25:6f:41:c9:8d:c2:9b:21:93:79:d3:6a:5f:10:24:b8:3e:7d:
98:14:62:16:1f:da:b4:fd:ec:5a:70:47:cb:d5:28:b9:3f:e3:
b8:ce:3b:96:98:e6:34:b7:89:14:8e:31:8d:5b:75:37:24:9c:
20:71:5e:b5:9b:42:c2:3d:5b:2e:3a:22:ad:b1:d9:a3:67:b1:
75:c4:17:a8:8c:39:ab:49:9d:f4:2c:69:9c:7e:66:23:ba:67:
73:61:d3:fb:3f:ca:94:da:d9:66:d1:5b:0d:d2:e6:67:3f:f7:
86:94:49:d0:68:bb:0a:03:9b:a3:ff:b1:42:c2:b1:38:bf:19:
bb:94:94:e7:7a:6c:9d:50:da:7d:3f:f9:25:6b:01:17:78:c5:
11:fd:32:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:21:59 2026 by rpki-client