Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
File: YxGmnIFyBEhUkx8QClm9CJy4iBo.mft (raw, json)
Hash identifier: 8K+ctg70tdN0EFxKGy08Lm2rVP3ntLjTHTOOap45AD4=
Subject key identifier: D9:9D:DE:82:FF:F2:C7:49:17:88:5E:4C:DA:2A:BE:ED:1C:C2:44:09
Authority key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
Certificate issuer: /CN=6311a69c8172044854931f100a59bd089cb8881a
Certificate serial: 01A0C5FCAE171F4036498D41C27496BFEC9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 22:01:06 +0000
Manifest this update: Mon 21 Sep 2026 22:01:06 +0000
Manifest next update: Tue 22 Sep 2026 22:01:06 +0000
Files and hashes: 1: NITgwZ0BoycrXSGPU8iX7ZnWyHc.roa (hash: 5tWOFXf/UnsBI5wfRpAA1+yDyuJUDNX32cEt3vj5vdk=)
2: YxGmnIFyBEhUkx8QClm9CJy4iBo.crl (hash: jhOY6ADcmpXSHSSraJJ6Xj/98Rpc8O4InY9izayjciw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:ae:17:1f:40:36:49:8d:41:c2:74:96:bf:ec:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a69c8172044854931f100a59bd089cb8881a
Validity
Not Before: Sep 21 22:01:06 2026 GMT
Not After : Sep 22 22:01:06 2026 GMT
Subject: CN=d99dde82fff2c74917885e4cda2abeed1cc24409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:29:bc:35:7a:fb:4b:ab:c8:39:a3:91:0e:
47:58:c4:ee:15:e4:62:44:f5:05:32:66:50:2a:53:
8b:98:c3:28:7a:13:fb:c6:25:8e:5b:c4:56:22:0a:
12:00:ed:f4:32:05:57:84:1d:a4:e7:fa:81:69:1f:
45:16:02:14:0e:dc:85:a7:83:d9:4b:e1:d0:29:b9:
d9:bc:0d:56:9c:19:d6:46:bc:5b:7c:ab:07:8e:47:
c0:cd:3f:c5:86:f3:08:97:4c:b9:a2:1b:dd:f6:3c:
6b:97:29:e8:b3:e4:b6:e5:77:52:07:39:9e:86:5a:
ff:aa:dd:50:11:18:d4:35:5e:11:98:16:d6:73:04:
6e:a4:3c:a3:56:78:2d:21:a6:f3:73:65:92:40:75:
d7:7a:a7:d3:35:ad:11:37:eb:58:49:10:25:7d:e4:
28:3b:2b:cb:7d:2a:4d:46:40:18:94:06:4a:a0:1f:
a9:0f:33:f1:ea:f7:80:30:9b:51:21:0e:28:06:25:
e0:d0:97:b7:98:d1:69:75:76:97:ee:64:34:76:e9:
72:bf:48:55:de:96:88:c5:e9:0c:fb:a8:08:a6:20:
3a:be:09:63:ee:54:b7:bd:65:11:6f:92:2e:f5:97:
a3:05:0f:b7:ae:c2:f5:93:00:45:22:d2:90:31:e5:
86:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9D:DE:82:FF:F2:C7:49:17:88:5E:4C:DA:2A:BE:ED:1C:C2:44:09
X509v3 Authority Key Identifier:
keyid:63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e5:8a:70:a0:cc:3e:27:e0:40:3e:d2:7d:56:3c:42:b6:a9:
3d:3c:1f:de:bc:29:68:61:7d:13:a9:f2:96:8f:d2:75:96:e0:
76:13:33:10:4b:48:33:87:6a:98:b8:ac:63:47:b2:b1:7a:a1:
73:ba:c4:c4:df:a3:2a:01:5e:a8:8f:25:e8:b8:4c:e6:34:bb:
e9:05:ee:27:98:61:f2:a8:f5:a9:1b:64:c9:ef:d2:ba:09:88:
32:a9:84:22:1c:83:85:f0:ee:8e:e8:02:92:af:68:34:9c:24:
b7:cc:5e:77:59:fd:2d:f0:cd:d5:4b:8f:00:fa:76:9d:04:97:
66:d3:b6:da:bc:5a:8f:83:d8:e9:61:ae:dd:0f:ea:c9:00:39:
51:8e:7d:98:41:ed:9e:00:ee:cc:0b:b8:fc:bb:7f:d5:a0:a7:
81:6e:2e:f7:01:bb:88:22:da:2d:e8:fb:0b:2f:5a:a9:68:7d:
f7:f1:46:0c:14:35:23:47:42:05:61:8c:6e:31:18:8c:06:e3:
a0:4a:4b:de:72:0d:d9:65:b9:0d:e5:39:8f:5e:c3:36:47:ee:
3e:00:da:04:9c:da:52:26:fe:72:91:20:42:ba:59:b3:95:ac:
d7:3d:bd:d5:89:29:2c:3f:23:31:d7:d6:bf:a6:a9:f5:96:77:
51:ca:39:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:09:22 2026 by rpki-client