Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File: yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier: DrR0nh4diUlS6Zy6QUWDzB2SOdS3DvO1QRTrWC9Dtn0=
Subject key identifier: AD:08:F7:8A:9B:22:5B:43:96:E5:99:4D:64:D1:4D:03:C2:50:F9:53
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer: /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial: 01A0C09F9B7D68E0603733B8D2D9A460C2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number: 05D6
Signing time: Sun 20 Sep 2026 21:01:20 +0000
Manifest this update: Sun 20 Sep 2026 21:01:20 +0000
Manifest next update: Mon 21 Sep 2026 21:01:20 +0000
Files and hashes: 1: TTJb2RAURlKPWvYkNwaWkyT09qY.roa (hash: lOE8Ruv9RewYP7cpvq3aqRSVFYYOIUiYC9/cShdcpDM=)
2: Y6tlWJsn2-eO2pGWaQiPAUkPW7g.roa (hash: uARQVpL4FEL+I59HsU9UtUVf5F4ZPPjEs1mpi4DNxXs=)
3: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: kl9pWLP5cE7gltGO+hl+wzm8R89953tm+iDpHb5v2iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9f:9b:7d:68:e0:60:37:33:b8:d2:d9:a4:60:c2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Validity
Not Before: Sep 20 21:01:20 2026 GMT
Not After : Sep 21 21:01:20 2026 GMT
Subject: CN=ad08f78a9b225b4396e5994d64d14d03c250f953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:d9:1d:76:cb:a5:d2:72:1b:8a:4a:fc:a3:
dc:44:e1:84:c7:c1:ec:be:04:84:39:1d:ee:af:7b:
93:f8:5b:89:ce:27:b5:59:5c:bc:04:c0:33:25:52:
4c:18:c2:41:3f:be:d0:d3:26:15:ce:63:32:7c:fe:
23:41:d0:05:9a:49:d3:f4:57:e8:b0:be:0e:f2:ae:
9a:12:c6:d9:c6:02:9c:1c:a2:74:94:f4:a5:ab:fb:
8c:20:3f:1b:72:28:f7:79:dd:df:3a:ed:ef:77:fe:
a5:79:0c:76:b2:55:e0:a4:4b:17:d0:59:8d:64:4d:
e5:40:ea:76:79:a7:17:c5:b0:0d:4a:cd:b4:32:e3:
aa:f7:98:6d:f7:f1:2d:46:ce:c6:b2:57:4e:54:54:
65:b4:51:7b:00:d2:13:09:18:ae:9e:80:c3:71:63:
c6:79:5d:f0:1a:7c:8d:88:59:a4:04:14:fa:61:81:
5f:7b:f7:c2:d8:ab:ed:15:c5:c7:10:f4:6a:35:4d:
78:0e:0e:5d:b9:e6:a7:09:a5:0a:46:ab:fa:34:11:
a1:2d:cc:61:75:7c:46:7d:32:90:fe:25:ae:54:40:
e9:50:e6:4e:d4:4a:fb:40:24:98:28:42:a7:8f:97:
eb:c1:da:92:22:22:c2:08:89:a1:dd:35:ce:ae:04:
bf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:08:F7:8A:9B:22:5B:43:96:E5:99:4D:64:D1:4D:03:C2:50:F9:53
X509v3 Authority Key Identifier:
keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:30:ea:86:e8:73:65:49:9f:16:26:e8:c0:3f:1e:66:29:1a:
b6:d9:10:64:3c:45:9d:ed:2b:00:cd:2e:6c:30:f2:41:a5:f5:
5f:57:d5:59:28:f0:5d:73:62:9b:6d:4d:91:5b:ff:55:99:37:
59:e2:c4:ca:1f:90:b6:14:26:a7:96:15:f9:c2:13:e0:9b:db:
97:64:a3:b5:d6:43:43:a0:40:39:a8:22:3c:58:3a:f7:90:2d:
85:40:4b:f8:e2:97:d0:cd:f4:e9:d7:65:da:1a:59:39:37:5e:
bd:a0:5c:27:0c:f8:88:e5:d9:6f:77:4f:5d:f6:90:7b:91:b9:
58:dd:e7:28:be:e0:23:e3:cf:b6:ff:a7:4b:9f:93:4d:32:ae:
2a:67:72:ed:8b:b6:b3:6b:5d:15:7c:c3:0e:e7:99:ec:40:cb:
12:e6:47:8e:8d:d4:ce:15:82:4e:c5:ef:aa:2b:38:c4:5f:d5:
93:ce:9f:14:0f:df:a2:16:92:70:2b:d4:89:82:48:4c:7f:e1:
0d:28:de:48:0d:28:44:1d:06:6e:31:98:39:b2:48:d6:24:47:
54:37:60:c1:c5:8f:1e:b6:ae:2e:d5:fb:86:77:d0:b9:ef:a7:
35:e6:ea:90:1b:02:7e:82:f8:71:a6:5b:d0:16:28:3b:b7:e1:
c6:92:90:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:38:02 2026 by rpki-client