Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
File: YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft (raw, json)
Hash identifier: scBKcoDAzVSIFXLP1TCAH2yalgfJFKWs1INV9Gioh9Y=
Subject key identifier: 48:74:37:4D:16:46:6D:E8:0E:B7:9D:27:21:D9:B4:B9:58:03:B4:95
Authority key identifier: 60:2C:CC:74:B4:FD:14:DA:17:BD:6B:69:BA:9E:19:C2:48:97:F3:3D
Certificate issuer: /CN=602ccc74b4fd14da17bd6b69ba9e19c24897f33d
Certificate serial: 01A0E551D0860467A0F9E34D8D026AA29384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCzMdLT9FNoXvWtpup4ZwkiX8z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
Manifest number: F0
Signing time: Mon 28 Sep 2026 00:02:19 +0000
Manifest this update: Mon 28 Sep 2026 00:02:19 +0000
Manifest next update: Tue 29 Sep 2026 00:02:19 +0000
Files and hashes: 1: YCzMdLT9FNoXvWtpup4ZwkiX8z0.crl (hash: QBgkUvX99V2WZ4cyBB/O69e/tYDFDHPNAQxu9QE29X8=)
2: yvqKASYvxT3MxhtOS5-emaUxBc8.roa (hash: tVq+tnubXS3rvDyuKQj8/nMobzt5kNaE/XUuamGgdBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCzMdLT9FNoXvWtpup4ZwkiX8z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:51:d0:86:04:67:a0:f9:e3:4d:8d:02:6a:a2:93:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602ccc74b4fd14da17bd6b69ba9e19c24897f33d
Validity
Not Before: Sep 28 00:02:19 2026 GMT
Not After : Sep 29 00:02:19 2026 GMT
Subject: CN=4874374d16466de80eb79d2721d9b4b95803b495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:5c:a8:ef:2f:53:22:fb:9c:a4:fb:e7:5d:
f6:d1:d0:61:86:e7:aa:27:0d:86:a9:92:e5:db:79:
94:66:a0:44:d3:2c:83:4a:b3:3e:b7:20:6d:a0:93:
d3:13:4d:d2:28:05:b3:29:c6:9f:af:6c:16:db:65:
45:26:74:0e:9f:65:90:4c:5c:57:93:73:62:96:3c:
f0:fa:cc:0a:d8:35:aa:61:7c:6d:d5:a3:b2:b4:96:
66:dc:49:87:25:7c:65:b1:6d:11:b5:3b:9d:fc:05:
25:38:c6:68:c3:14:10:7c:43:4e:55:00:bd:0a:87:
3a:da:ff:5a:87:25:5e:c1:08:7f:e4:a0:82:c3:68:
9a:6d:e1:d5:25:f4:45:22:a1:f9:82:70:45:4f:81:
6e:18:8f:9b:23:86:c6:57:89:92:56:bf:da:9f:da:
73:01:36:f6:45:4a:8f:f2:79:47:24:15:59:15:ea:
0d:c8:df:ec:95:92:d2:07:ae:f6:df:f0:d7:79:83:
8d:de:a1:78:55:e9:f2:92:12:42:6a:89:79:d4:c0:
21:42:c2:73:ea:7a:c8:a6:c1:69:a3:c0:81:01:50:
a2:31:0d:24:ca:8c:bd:4d:e8:aa:6c:e6:3e:bf:a5:
72:83:a9:c4:59:28:43:f5:ed:8a:61:aa:54:ce:04:
d1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:74:37:4D:16:46:6D:E8:0E:B7:9D:27:21:D9:B4:B9:58:03:B4:95
X509v3 Authority Key Identifier:
keyid:60:2C:CC:74:B4:FD:14:DA:17:BD:6B:69:BA:9E:19:C2:48:97:F3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCzMdLT9FNoXvWtpup4ZwkiX8z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:94:b6:b5:e1:9c:22:bf:55:73:ad:29:71:34:5e:b7:3d:e5:
d3:d4:f6:d2:03:a2:03:32:6e:a6:bb:a1:35:d8:5b:48:98:75:
52:7a:80:5d:70:1c:54:a1:fd:d3:7a:04:51:48:9f:ef:14:90:
3e:c8:84:3c:c6:4a:d5:6b:6d:1e:61:13:e6:a2:f3:64:19:32:
e4:92:96:18:eb:11:dc:0b:d7:5b:eb:bc:14:01:bc:dc:12:e1:
bb:70:37:67:92:9e:a5:e4:1c:cf:69:f0:85:b8:35:9d:b2:b1:
6f:c1:a4:a0:bf:31:3d:13:7c:a7:3d:dd:ab:3c:60:29:72:29:
60:06:98:42:c6:b1:71:75:8d:fb:33:d5:59:a6:27:3e:e0:65:
ca:af:ea:f1:77:bf:c1:8e:fe:39:e4:42:c1:53:32:46:59:ae:
82:f6:03:a5:9c:20:2a:6e:b5:0a:3a:71:f2:7d:0c:78:8c:64:
6f:19:15:59:9e:be:c2:b7:82:cd:20:18:c7:f4:6d:cb:71:66:
44:d7:3a:de:06:9f:88:31:fb:9e:ca:63:89:51:3d:00:f5:f2:
7f:77:e5:39:d5:dd:d3:89:cf:47:f3:05:66:c9:16:ea:1e:ca:
00:a6:5f:46:71:9d:d1:06:9f:1c:81:e3:ce:d5:03:b6:4e:39:
bc:62:0e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 04:18:41 2026 by rpki-client