Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: eeh8VAVSsTGJNYf8NRhvGwZsAcurnGAW7QGIp/dv6co=
Subject key identifier: 98:6F:91:60:9D:5C:00:09:E0:7F:3A:14:78:EE:B1:3E:73:8C:17:A4
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 01A0CC357E0CF609224E4B44B66C99088316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 122F
Signing time: Wed 23 Sep 2026 03:00:52 +0000
Manifest this update: Wed 23 Sep 2026 03:00:52 +0000
Manifest next update: Thu 24 Sep 2026 03:00:52 +0000
Files and hashes: 1: txC54j_S7HZrQJFinO7KZYt-RYQ.roa (hash: Brb/AGg54bXB31WxKutqNfmuYrMVTPjvpdr/gdDFZQ0=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: hUL/84IQ22VN2s8AmcUpkDUnRJsmmQiWjbHLMWbylh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:7e:0c:f6:09:22:4e:4b:44:b6:6c:99:08:83:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Sep 23 03:00:52 2026 GMT
Not After : Sep 24 03:00:52 2026 GMT
Subject: CN=986f91609d5c0009e07f3a1478eeb13e738c17a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fc:1c:d5:fb:e9:23:9a:2e:1a:e4:f8:42:8b:
e9:f1:95:b8:f7:14:37:fa:7a:11:1e:40:18:c3:03:
77:2d:ec:e2:ac:90:a6:d6:67:84:55:cb:cc:e4:69:
d5:ff:d3:ff:a2:a9:32:e2:c1:e9:66:1e:e5:b8:03:
c1:47:48:3e:f9:59:54:7d:ba:25:fc:bf:23:53:fa:
da:59:85:89:ac:61:5e:b4:bc:69:5a:c8:24:9c:ab:
f1:3d:e9:f3:09:46:47:63:a0:40:a7:15:66:2f:3c:
14:df:66:7b:fe:9b:f2:cd:b0:13:50:cb:a3:13:2d:
d8:ec:30:16:a6:68:1c:c6:13:f6:50:a3:51:5f:6f:
48:41:db:3a:80:f8:ab:c0:85:be:42:15:4c:03:43:
87:90:c8:7d:ac:71:7e:2f:59:54:96:d0:93:9b:b3:
49:a5:b8:a1:02:5f:76:ad:7b:fa:d2:97:e9:f2:4c:
de:0b:4d:21:fa:21:a6:5c:2a:c2:3d:37:56:de:d0:
bf:81:55:20:a2:ee:db:30:41:bd:8b:50:13:65:8f:
e2:48:01:e2:f5:05:63:cf:64:a1:65:37:77:75:5f:
89:68:6d:3a:62:e9:b7:1d:db:4b:53:1f:61:5a:72:
47:fb:ae:f7:f8:59:2d:5a:12:4f:54:4b:a3:bc:c3:
71:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6F:91:60:9D:5C:00:09:E0:7F:3A:14:78:EE:B1:3E:73:8C:17:A4
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:13:1a:99:29:e0:fc:13:f6:3f:3e:94:96:68:54:13:a8:0c:
19:44:28:2f:5a:2e:d9:97:87:e4:c7:6a:d1:21:d8:bf:4f:3b:
69:6b:6a:fe:54:48:a9:ea:ef:3d:59:da:f5:de:a1:34:32:61:
f1:c3:2f:10:57:e3:38:a4:16:94:84:01:44:07:24:ba:3a:14:
e6:56:e5:32:e6:d8:bb:56:d9:52:08:e1:0c:69:86:58:67:c8:
a1:44:9e:d1:a8:06:91:ca:fa:33:e4:42:11:56:50:81:5a:16:
93:5a:8e:79:ed:ca:8d:4a:1c:f0:ce:b8:1c:ce:70:e7:b0:5c:
36:94:fc:60:79:5b:00:e0:43:ec:2d:32:95:35:ea:20:fb:0b:
95:21:75:95:72:ce:cc:27:dc:20:08:70:fa:ca:33:ae:e6:49:
1e:30:cb:aa:95:2c:d5:23:91:0b:9d:1c:da:98:03:08:05:9e:
2d:67:20:b7:fb:40:52:9e:6c:b2:5b:ca:24:1e:31:09:ec:01:
4a:2f:52:a5:83:f2:e1:75:a5:1d:4c:9e:cc:c4:ea:64:0a:fa:
f7:6d:bc:bc:54:b5:19:94:75:9c:fd:84:35:83:96:f5:8c:b3:
25:b2:52:ba:1a:ab:37:b3:12:76:b7:9b:3b:11:58:79:bf:68:
c4:77:a3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:38:18 2026 by rpki-client