Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json)
Hash identifier: pOv5saaJvaeAY/88BB4AFD1d83YON2Z4i0BUovskeVI=
Subject key identifier: 50:9A:FB:73:C0:5A:B9:E3:7A:34:46:A7:90:2D:02:1F:E0:25:BF:FF
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 01A0C5C50EF96F94EF652A4DB325B1C1852F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
Manifest number: 11E9
Signing time: Mon 21 Sep 2026 21:00:20 +0000
Manifest this update: Mon 21 Sep 2026 21:00:20 +0000
Manifest next update: Tue 22 Sep 2026 21:00:20 +0000
Files and hashes: 1: 0sTykt04zhafsgKWmG0fpAc6Xi4.roa (hash: s3D/zF9I60gRgjWMCWnW5l2vwcfUO0zatEx48bleBv8=)
2: 13bSAbvbvGDWUO5yvtSsKXnlK94.roa (hash: DXldFZAd6AGXUWvxh5LvcSzCrQoe+CYXwhAGhk24KDA=)
3: De_n5gWs77mFUbESDcEhMP4Zgu4.roa (hash: 6EezXySVgGXz55sVzTpFqjj+QzByDEb/wr63m1U01ek=)
4: T5zUGgRal9JKPPCQ5ILhLwlQlHM.roa (hash: YHDYE65RL2KgOZOOjjz6vjoQjHzxsBWW9qIdkVOIzBk=)
5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: I2Wrt0sjqDPBKGQLtP1b/sr4GbUNc3CmbPqpXCWEoDI=)
6: Z943jXHlAqEjC8HhkAmn0vuwcbY.roa (hash: zwEb4pXvmmR3brxpaMTgJgnaLu7vluGbc09IMA9MXt4=)
7: aZEJdlE8rryKdFsxcXIyoyt-SOg.roa (hash: BG6zGbPXxvvnXkdjQ9fWCyghzw5YTxYUyEjcqpnK0GU=)
8: d9cqCh7w_HREeS5tpm1EQv7bdkc.roa (hash: DnP+rNEbo3897fPDs3e26jS0WYx/AYH67Gkmxad3fpM=)
9: tL-DJ8EbDPZqo5Hcwxd2ywWIDr0.roa (hash: 7ypgmIY8clfcgfXd8ScXxIyNvL0UG8VUmIwT7yY7+ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:0e:f9:6f:94:ef:65:2a:4d:b3:25:b1:c1:85:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Sep 21 21:00:20 2026 GMT
Not After : Sep 22 21:00:20 2026 GMT
Subject: CN=509afb73c05ab9e37a3446a7902d021fe025bfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:23:bd:d5:29:e8:95:ec:a1:cb:5c:bb:eb:06:
a6:91:88:d3:5b:ae:25:a8:72:d3:15:07:60:54:63:
73:f9:29:93:77:0c:70:53:9c:87:2d:8e:62:eb:43:
d4:bc:d7:b6:56:12:11:1c:fb:62:45:ee:02:34:a8:
55:f8:9c:a2:6e:01:a1:3e:f1:39:7a:ec:8d:24:85:
ef:90:24:d0:66:70:ad:e1:a5:43:bb:7b:d4:80:35:
34:6b:dc:f4:1f:08:14:fd:10:ea:be:99:2d:09:a6:
08:fa:8d:10:5d:71:01:50:9a:87:92:78:b2:15:75:
9e:ca:4a:3e:83:41:9d:df:04:06:2a:4b:02:7c:39:
08:87:1f:36:e0:bc:51:30:39:40:6d:cd:43:d4:5f:
5d:39:06:39:12:3e:ec:d7:8a:3a:38:a4:bb:43:21:
ba:9c:fa:2a:6a:1d:8e:72:7a:f7:7e:12:da:ca:cd:
71:dd:e8:dd:dc:13:4c:03:27:00:60:43:4f:ef:af:
1e:65:bc:18:24:29:95:f1:e5:82:5e:b0:d4:53:9f:
c5:a3:bb:3b:76:1e:de:ff:86:d1:b6:9e:2b:74:0c:
ae:e2:78:9c:4b:12:15:ed:77:4d:38:20:00:c3:f0:
47:f8:a9:b6:a6:a5:7e:76:c3:fc:d5:4e:28:62:f0:
54:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9A:FB:73:C0:5A:B9:E3:7A:34:46:A7:90:2D:02:1F:E0:25:BF:FF
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:01:da:3c:0a:ef:3f:1d:49:4b:1a:a8:72:b2:99:2f:02:7a:
68:1a:36:7c:b5:dd:1a:87:8a:e7:0a:88:f4:22:98:da:9f:80:
00:00:d2:b4:cb:a8:b3:94:c9:f6:bb:44:15:e6:67:35:fe:a9:
2e:81:0c:96:aa:a9:6d:eb:b5:d8:02:8c:6a:e8:e7:ef:37:e7:
9e:22:c0:74:f9:8f:00:16:53:e5:fa:92:d0:55:c1:39:64:e4:
bb:7d:c8:a3:19:1b:78:a2:77:43:98:9b:e2:9f:85:b9:c1:47:
95:9a:e4:62:5f:89:66:12:2b:26:ad:7b:63:78:ac:cc:e2:21:
ed:13:1e:b9:59:e4:11:54:9d:45:b6:16:ea:14:2e:ab:26:97:
84:24:25:09:81:83:4f:c3:31:9c:5e:1f:52:2a:f4:39:b3:17:
c9:5d:5e:2a:a5:8d:ee:45:8e:88:24:b3:01:99:1a:7e:ab:72:
42:99:65:06:0e:0d:b2:21:a0:23:91:95:8b:37:45:7b:db:25:
6e:3a:a4:fd:cf:0e:18:cc:a4:77:f0:8a:4c:a7:41:08:61:72:
ec:14:db:1f:71:1d:4b:be:78:a8:21:1d:56:57:ef:9b:ee:38:
10:d6:60:3f:3a:50:eb:71:46:1f:02:07:c8:a2:aa:0d:f4:eb:
f0:56:77:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:17:49 2026 by rpki-client