Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
File: YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft (raw, json)
Hash identifier: WM2lUUkRynCbiNmGsJ2VXLEgL55NaCXIkltTpLK1+us=
Subject key identifier: D6:69:BB:8A:BC:DA:BE:81:98:84:A4:61:F9:81:73:51:F7:66:49:E2
Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
Certificate issuer: /CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Certificate serial: 01A0DC17978D2AD903FE16DAC350BD2DD639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
Manifest number: 1A76
Signing time: Sat 26 Sep 2026 05:02:08 +0000
Manifest this update: Sat 26 Sep 2026 05:02:08 +0000
Manifest next update: Sun 27 Sep 2026 05:02:08 +0000
Files and hashes: 1: DrwW4sKSqTZEXvxPzEr4f3uBsog.roa (hash: GYviIhAWt+rJxTgokFxh6w4GldBuIX4UFW6S+3JXsHk=)
2: P98wNmnJTHdJLeeJu4aYozQSfd0.roa (hash: KbHvAeiSMHCPMC0OSmiZKSqrSyacLzZFYJdIlBywl7g=)
3: YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl (hash: //+GXUH4NtrinGpFfDwGvcwUthRruXJ5EqLI3+fW80k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 05:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:97:8d:2a:d9:03:fe:16:da:c3:50:bd:2d:d6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Validity
Not Before: Sep 26 05:02:08 2026 GMT
Not After : Sep 27 05:02:08 2026 GMT
Subject: CN=d669bb8abcdabe819884a461f9817351f76649e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:30:c7:a8:8d:e2:27:33:10:72:e7:64:36:9e:
18:fe:75:42:08:8b:8e:10:7a:b6:fd:51:ee:41:b8:
34:fd:04:85:a6:c9:6e:c2:4b:cb:11:74:e3:99:da:
03:ca:78:61:4a:64:17:49:7c:b7:11:6a:92:38:3d:
18:99:8c:cf:68:96:aa:ad:a6:0c:cb:61:c0:31:9c:
9e:0b:50:be:40:5f:ac:01:d0:9a:af:a2:4d:68:6a:
7c:d6:20:16:5d:73:14:3b:d4:25:68:04:7f:c4:de:
ae:b6:e2:7f:38:9e:6c:c5:79:9f:1f:5a:63:18:19:
72:2d:ee:2e:05:d8:09:77:b6:36:6c:90:05:c7:16:
27:01:61:e7:2f:fc:90:8d:78:9b:40:18:67:8d:d9:
94:d0:b5:f6:00:1d:ed:cd:14:66:53:ea:7d:16:dc:
95:f8:b9:47:7c:20:42:80:db:05:b7:d7:4d:0f:93:
23:17:e9:02:e6:42:ca:0c:e0:70:ff:ae:f7:ce:3f:
bc:76:d7:eb:fe:8f:bd:da:9d:3f:15:c4:43:f0:82:
8e:c0:3e:97:69:62:06:83:2d:f8:8a:a9:58:c3:33:
29:8b:db:6a:b7:a9:86:de:89:02:79:b1:8b:7f:d5:
9e:bb:39:e8:f6:5d:7f:71:bd:38:fc:24:ac:57:ad:
f8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:69:BB:8A:BC:DA:BE:81:98:84:A4:61:F9:81:73:51:F7:66:49:E2
X509v3 Authority Key Identifier:
keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4a:c5:25:78:ae:b9:21:f1:1e:0e:e4:7d:db:53:4c:7f:ac:
d5:e5:3c:0d:47:1f:1a:52:8b:19:7b:54:bc:01:a2:58:87:7d:
0d:3f:9b:d2:e8:33:50:81:b5:32:fc:a8:50:58:09:84:46:e7:
b5:dd:18:5f:7b:a5:ca:4c:1a:cf:4a:4a:2a:ec:53:5d:56:76:
83:40:d2:f5:87:3e:0c:1e:d5:b0:87:79:9c:28:dd:c2:37:e0:
f4:1d:ec:d4:41:0f:a0:b4:21:ea:e2:cf:d1:c0:9f:18:44:eb:
ac:29:88:77:35:98:58:c7:cc:78:fb:64:ff:22:65:0f:53:62:
2c:c5:26:c3:ff:1c:0f:2e:d7:8d:50:a5:2f:51:ab:fb:27:5d:
e3:3d:44:10:b9:b1:d2:bf:f2:64:40:67:67:19:37:43:57:31:
e7:a2:2c:09:68:ef:db:94:02:b8:51:76:4b:a0:e8:3f:27:42:
6a:d6:16:fb:46:1b:da:3c:81:e9:22:99:91:b3:86:b5:a6:c7:
bf:79:68:a7:66:17:b5:99:96:25:fb:d3:c1:c2:b0:62:5a:9b:
94:46:ea:bf:e3:bc:73:2f:ee:d4:0e:4d:29:e0:af:e7:60:b9:
4d:0c:fc:5d:05:4a:fa:d5:46:87:87:ba:0d:c8:be:0e:04:ef:
d7:b2:c6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:53:06 2026 by rpki-client