Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File: yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier: +eOXTnSMKC2glXzKM52Iectimn0KHAgM+Ma0Mu/BeFs=
Subject key identifier: 6B:83:AA:04:BC:3C:D3:E5:47:B0:21:9C:61:66:98:87:DB:BD:A2:5C
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer: /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial: 01A0C28E051DBC79C72FCFFE4F4EDB60CEB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number: 05D7
Signing time: Mon 21 Sep 2026 06:01:22 +0000
Manifest this update: Mon 21 Sep 2026 06:01:22 +0000
Manifest next update: Tue 22 Sep 2026 06:01:22 +0000
Files and hashes: 1: TTJb2RAURlKPWvYkNwaWkyT09qY.roa (hash: lOE8Ruv9RewYP7cpvq3aqRSVFYYOIUiYC9/cShdcpDM=)
2: Y6tlWJsn2-eO2pGWaQiPAUkPW7g.roa (hash: uARQVpL4FEL+I59HsU9UtUVf5F4ZPPjEs1mpi4DNxXs=)
3: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: s9yE1z8qB1p0yuknCQKoR9pWD5vDkXziblb6XNrk03w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8e:05:1d:bc:79:c7:2f:cf:fe:4f:4e:db:60:ce:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Validity
Not Before: Sep 21 06:01:22 2026 GMT
Not After : Sep 22 06:01:22 2026 GMT
Subject: CN=6b83aa04bc3cd3e547b0219c61669887dbbda25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:16:df:87:42:ef:75:08:46:70:ed:50:1a:20:
94:39:87:2d:d1:39:f1:30:a4:f9:5d:76:14:6d:bd:
53:a3:cc:89:ad:8f:90:83:d3:71:82:7f:d0:e4:cd:
c0:1d:86:f3:d8:42:b7:13:af:11:6c:75:1f:3e:f3:
c0:0c:16:b4:aa:d7:d1:8b:f6:20:49:39:89:9b:ce:
12:4f:47:a2:a3:46:58:88:2c:cc:03:31:7b:45:3c:
1b:cd:ae:94:0f:c3:24:f3:fe:f6:88:3e:89:aa:02:
a2:74:f8:88:d0:e2:06:df:50:a8:06:6d:ff:df:86:
fc:8a:7e:bc:2f:06:5e:bd:8c:f1:67:89:5f:70:34:
1c:ae:3a:a3:f0:05:d4:54:b4:1f:da:19:6e:96:1e:
76:12:29:b4:84:8f:af:72:13:4a:98:50:99:ba:88:
72:47:b1:f5:45:a0:fa:b2:f7:a9:e2:5f:ac:58:15:
a8:32:03:aa:bd:7b:ee:91:65:93:f0:86:28:b3:1b:
32:d9:52:82:5d:2d:18:66:0c:b7:39:45:77:85:2e:
c8:79:44:60:42:4f:c1:22:72:39:95:c2:1a:e0:1f:
30:9a:10:84:d4:02:b0:d7:a5:65:0a:33:83:3c:26:
8a:0f:fc:5b:d3:a3:80:eb:d7:be:67:af:3a:89:28:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:83:AA:04:BC:3C:D3:E5:47:B0:21:9C:61:66:98:87:DB:BD:A2:5C
X509v3 Authority Key Identifier:
keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4d:2e:63:a7:da:7d:58:aa:1f:6d:41:1b:58:a0:86:db:19:
ec:80:01:a0:f1:70:1c:d0:8d:58:41:bf:d5:f2:df:67:cc:d7:
90:7e:a6:08:30:8b:a4:1c:2b:86:0b:c2:ee:62:9c:0f:b2:9c:
d1:fd:81:62:a3:ca:69:17:7a:11:70:7e:38:dd:cc:0f:f3:d8:
11:87:83:da:5e:4a:5d:29:80:02:cf:0c:f3:3c:1e:30:65:cd:
8f:47:56:b0:ad:b1:12:60:e0:3e:35:3b:49:98:f9:92:b1:38:
4a:26:ee:f1:fe:24:67:c7:52:95:66:66:4f:08:f7:9e:ae:42:
1f:90:eb:da:c0:79:0f:4b:6f:84:32:25:31:6e:9f:2a:48:63:
ed:a8:84:df:59:f8:87:55:d6:8d:ff:cb:6e:82:12:18:7e:76:
fe:4b:6f:dc:85:7d:90:5f:57:7f:4b:3d:17:2c:5f:09:5a:43:
55:b4:be:c1:c7:bd:3e:f2:a7:bb:e5:c6:28:04:72:50:5d:d8:
dd:ee:0a:d7:06:18:2e:cb:23:2d:53:55:8d:19:8b:9b:44:25:
2b:5b:57:dc:22:73:48:d8:aa:ca:2c:81:44:3f:5a:74:e4:4b:
ec:6b:17:f5:a6:e0:d8:a7:4e:80:65:ab:0a:41:d7:e3:9c:50:
53:45:c8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:36:40 2026 by rpki-client