Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: 7lHYpfMBbqvOr1SocZ01DgQjs1cOItkYNsc3/F84Sl4=
Subject key identifier: D9:AF:F0:6D:D4:9E:7E:8F:7D:02:4F:9B:B5:37:45:A8:21:3E:AA:95
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 01A0D614D13CA5AA5D01AADFB87DF9E0A3B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 126A
Signing time: Fri 25 Sep 2026 01:01:23 +0000
Manifest this update: Fri 25 Sep 2026 01:01:23 +0000
Manifest next update: Sat 26 Sep 2026 01:01:23 +0000
Files and hashes: 1: 3ExD7nKcCYNGR68ATw2vAixFfPw.roa (hash: PRfZSceh3jh1FTBUXpKPdAPCRhio/qZFjdbYjEajKSY=)
2: EyM4wivbpkVOKedhB97D1lcXuLE.roa (hash: ztSlxeB82WQ5Ip3+c+gguWX+u1grG8UgGeYQslXQHlM=)
3: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: c+vSVFcWxR7KQ9hcaDq2y+Z5Tn3NqCmubFslS3hJm+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:d1:3c:a5:aa:5d:01:aa:df:b8:7d:f9:e0:a3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Sep 25 01:01:23 2026 GMT
Not After : Sep 26 01:01:23 2026 GMT
Subject: CN=d9aff06dd49e7e8f7d024f9bb53745a8213eaa95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8f:5f:b6:36:e3:ab:ff:b5:7a:b8:20:8a:f4:
25:29:54:51:af:8c:8a:50:b5:38:ce:64:f1:ef:97:
b7:79:49:7c:71:b5:9f:c9:26:9c:6f:0d:b5:30:28:
42:a3:84:6c:52:e8:61:f2:92:ba:5a:5e:4f:ca:23:
b6:a4:5f:96:47:ea:bd:03:97:30:f6:d9:e4:2c:01:
56:69:9b:38:69:18:7b:9c:9a:96:70:e5:d5:a0:7d:
53:1d:b0:80:c9:25:7e:16:72:47:4a:d2:2d:e2:8a:
09:d3:0f:59:51:c2:48:00:f2:23:54:56:87:25:9e:
9a:a1:7e:7a:bb:47:14:6a:26:15:ea:1f:65:1c:ba:
2f:43:2e:af:39:fd:0f:66:19:35:8e:c1:8d:10:c0:
5a:2b:f9:2a:2c:53:44:41:8b:82:1c:19:2f:74:08:
a6:cc:16:16:ad:4d:91:a3:9b:a7:43:88:6c:59:18:
93:68:3b:df:09:e5:36:49:e2:cf:45:9a:ea:6f:67:
e1:ed:cd:bd:9c:d7:a2:db:64:e3:92:db:0c:f0:1c:
a2:a0:5a:f2:80:17:fa:23:8b:9f:06:8b:ba:f8:ad:
a3:a8:b2:01:15:4e:bd:ba:65:85:f8:84:51:00:03:
4f:85:4e:8e:ca:1c:4a:89:b4:24:b6:13:34:4b:b4:
c2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AF:F0:6D:D4:9E:7E:8F:7D:02:4F:9B:B5:37:45:A8:21:3E:AA:95
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c1:ee:3a:82:f3:11:6d:e8:be:b0:16:ff:48:b5:54:c2:19:
34:9f:13:72:cb:a1:86:2c:b0:5c:64:8a:db:71:b3:32:e9:3e:
4e:0a:2c:a2:dc:c7:52:39:6e:d9:d3:ea:1d:5d:10:5f:6d:df:
51:2f:ea:44:c6:13:bc:23:fb:5b:31:b5:bd:7e:4b:af:dd:76:
e7:f7:82:c4:f6:8f:8d:a5:6e:ed:e4:dd:6a:71:5c:f3:db:19:
80:79:a1:ad:e0:8c:73:2a:18:14:24:14:b6:94:a4:3f:55:09:
e8:b2:54:ff:63:f0:10:22:5a:bb:f0:e1:65:bb:bd:ec:5c:dc:
e1:93:6b:63:6a:e0:32:f5:3a:8f:93:8e:1e:33:b0:f9:03:75:
11:8a:b3:d3:ed:3e:1c:09:c3:a5:ec:92:89:f3:ba:ad:0f:c8:
f5:4e:86:20:bf:ce:c7:6b:ca:8a:4f:01:49:88:ba:c1:e0:71:
81:1d:5e:64:f9:c2:de:31:81:6a:82:ea:cf:ab:02:d5:c3:89:
52:0c:80:20:e1:e2:32:bc:28:25:19:b5:68:bb:1d:e7:ca:d5:
c3:be:af:8d:e5:bf:86:ec:b3:10:7a:e6:97:82:5c:f1:0f:0e:
1c:1b:fe:74:37:af:62:23:c2:cf:76:57:00:7e:3e:fd:5a:2b:
eb:2c:68:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:42:45 2026 by rpki-client