Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: uHLEsYv19ko6floLPxpwNqE7ofpBbjn+Fgd579jzBi8=
Subject key identifier: 7D:02:AD:28:59:D0:C9:BB:82:0F:60:7D:9C:2D:E2:6F:68:0B:9F:CB
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 01A0C88F7456D46C112B542C8AF97C7CB1B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 0E24
Signing time: Tue 22 Sep 2026 10:00:39 +0000
Manifest this update: Tue 22 Sep 2026 10:00:39 +0000
Manifest next update: Wed 23 Sep 2026 10:00:39 +0000
Files and hashes: 1: 6PWOGz_KqRkb1zSJBPSYqwA3Obk.roa (hash: 2QNX7SpmW+cQkXWOHdllDN5APRnT1YGjOBVoLe9iX0U=)
2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: j09C7hUEXP9pBL6fg/jAL5CwVgQrOqd10o6ymntlNIk=)
3: prAX8QK9sJ83-_8sb5b9uyxyLB0.roa (hash: MGpYm8TiAMHtR6UX1RiE9OEkX3HH/xl2rU9chl3K2sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:74:56:d4:6c:11:2b:54:2c:8a:f9:7c:7c:b1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Sep 22 10:00:39 2026 GMT
Not After : Sep 23 10:00:39 2026 GMT
Subject: CN=7d02ad2859d0c9bb820f607d9c2de26f680b9fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:67:dc:4f:7f:54:10:92:cb:fb:98:3b:82:b4:
2a:c2:a3:7f:32:9a:d0:42:65:cf:e3:cf:fe:4d:75:
fe:35:a0:3f:bf:bf:77:03:d5:24:3d:29:fd:b2:a7:
f4:e1:3f:1c:6d:7f:8a:71:2d:cb:d3:40:ab:77:cf:
6a:0d:76:02:e7:07:9b:47:ea:02:04:ad:54:33:6c:
0c:e4:4c:3a:3e:9b:57:b0:45:a1:25:01:34:dc:03:
12:97:fd:07:7f:29:88:02:8c:0b:70:68:54:be:71:
d5:0d:27:0a:9c:38:0c:11:6d:f8:96:02:45:59:a1:
30:3e:89:cd:b2:5b:b0:c5:ac:94:18:01:77:72:00:
85:7b:37:6f:fd:2f:39:3f:4c:f6:d1:e3:05:af:dd:
7a:e2:c0:92:a9:aa:e2:c4:a3:3a:b8:8a:94:6f:11:
03:81:84:10:df:a9:33:15:3d:96:31:64:82:50:57:
e3:6f:84:91:06:cd:dd:ef:76:a0:1d:cd:38:22:ad:
90:e0:72:d9:b0:a8:d0:fd:f5:ca:9a:b8:2c:66:72:
6c:cc:15:c6:7a:61:72:f8:ef:9a:98:74:a8:01:35:
b3:29:31:16:3c:cf:66:d2:ee:84:1d:b5:15:53:2f:
fb:a2:25:0a:f9:7b:7f:ee:d7:0f:cf:38:9d:7a:f7:
56:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:02:AD:28:59:D0:C9:BB:82:0F:60:7D:9C:2D:E2:6F:68:0B:9F:CB
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ea:76:fb:d6:97:2a:24:92:f7:36:1d:85:87:fb:12:f7:85:
7a:44:21:6f:9d:d8:e9:cb:e5:a4:68:29:65:60:86:14:a2:13:
90:ed:e8:9c:e5:1e:cf:76:49:63:6b:43:64:ed:16:56:46:a6:
b0:0f:2b:74:8c:02:ec:c3:92:05:6d:84:79:f9:b3:27:54:ca:
6a:3c:77:74:26:2b:65:88:cc:d2:71:19:d8:53:28:04:e5:81:
96:ee:a7:9a:ea:91:1f:bb:21:55:c3:b7:49:17:a9:fe:5e:48:
48:ba:bd:65:c2:b6:57:be:2c:ae:1d:d0:89:21:ba:d3:73:3c:
de:f4:ad:41:24:b6:e1:e8:54:f4:6c:18:c3:f6:71:05:95:86:
8e:ea:00:ec:d3:d3:b5:6b:45:8b:0f:08:bf:e0:70:8f:0c:e6:
62:cf:20:c5:9b:39:bf:42:99:65:2f:78:eb:0b:2b:cf:bd:7a:
52:cb:d9:22:06:87:06:56:45:6a:a6:53:0d:a2:0a:99:4c:9c:
ea:db:0e:25:2d:58:21:83:1d:fe:61:b6:0a:30:69:c4:e1:6f:
7a:0f:89:04:60:6d:58:6b:f3:0e:46:f3:e5:7d:bd:dd:0d:46:
1d:36:84:90:11:57:ec:94:6d:e0:00:19:3a:b2:cc:5d:ea:3a:
09:44:7c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:13:38 2026 by rpki-client