Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File: YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier: SPKJiLqXBh5mhkuoSzka53/1koDL27iefj/gt1DzyB0=
Subject key identifier: EC:90:97:2F:4C:29:2E:69:F3:08:6D:0F:4A:BC:55:C1:98:75:69:C9
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial: 01A0C66A044B0BB03F986315CBA13EAB5A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 00:00:31 +0000
Manifest this update: Tue 22 Sep 2026 00:00:31 +0000
Manifest next update: Wed 23 Sep 2026 00:00:31 +0000
Files and hashes: 1: EGcAzbKTUnqrJBWDw9Zl1NjvipA.roa (hash: WN1W+AcOMLOyw+Z7FxISMQd+TynXYraLEQDBrawgt44=)
2: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: vH/qcxLroKouZ0tkULHi/X5mIAf1Sq07gBpHVQpR7ag=)
3: _tJiHAhGvLVPtYOMlLKCBsGuaeI.roa (hash: 0t/lW4HNsvLF4G+Bu7vWjQlegvcFtdB8mR4eqRFVFzU=)
4: d-N2YiUYpoOLPomAp2JVyicVc40.roa (hash: zETEJQC7tB8lRhNeIGpvA+FfF5ncGBNLatmPmvMsTNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:04:4b:0b:b0:3f:98:63:15:cb:a1:3e:ab:5a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Validity
Not Before: Sep 22 00:00:31 2026 GMT
Not After : Sep 23 00:00:31 2026 GMT
Subject: CN=ec90972f4c292e69f3086d0f4abc55c1987569c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a1:59:9c:f6:71:1b:27:80:97:b8:23:94:1a:
68:26:a6:6a:d4:78:9d:45:7a:e8:c8:ef:a8:d1:67:
54:a5:a4:50:ea:d3:df:9e:61:c0:4c:a9:ff:49:e7:
9e:18:3d:66:67:16:f7:6b:a2:e5:9e:f9:a0:57:ca:
f8:1a:73:48:e2:e6:a3:61:71:b7:2f:11:80:e5:39:
c2:4f:fe:f6:28:c1:a9:ad:a6:d9:b8:dd:e7:68:1f:
b8:68:d4:a3:b4:0e:35:c4:be:2f:46:e5:f7:03:fc:
d5:28:00:18:8a:40:9b:12:c5:c1:b3:bf:0f:eb:ff:
9b:1a:89:1c:c0:70:e5:65:b7:e4:45:f0:4f:a5:6c:
a3:5c:81:e4:9c:a9:7c:a1:6e:a5:9a:d9:6d:af:a9:
e9:1c:8e:1f:9c:cf:3d:b7:ab:05:1c:85:02:32:8a:
f4:3b:23:c2:af:69:3b:4b:06:5a:c2:40:77:2b:27:
f4:66:23:18:3d:c9:b1:ee:80:66:5f:f8:91:d5:11:
08:6e:9a:b7:82:2c:24:4c:74:14:4e:09:24:90:ce:
4c:2d:61:dd:de:62:71:ee:f0:47:7d:d2:5e:57:82:
ee:69:e3:60:49:6c:32:6d:36:bb:d5:84:44:15:0b:
89:95:39:92:de:25:50:7c:e2:b8:a9:d3:52:4a:d3:
44:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:90:97:2F:4C:29:2E:69:F3:08:6D:0F:4A:BC:55:C1:98:75:69:C9
X509v3 Authority Key Identifier:
keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:57:74:3d:1e:8b:e4:79:fb:9b:20:32:d3:7a:e0:ff:0a:76:
fc:c6:82:cb:4c:be:12:87:2e:a8:53:6a:ea:b0:66:82:9f:e2:
51:1f:eb:35:07:dd:36:e3:02:74:89:5b:57:bf:15:8c:df:39:
da:e1:f3:41:62:4d:f0:26:eb:73:5f:93:c6:b2:4e:94:82:ff:
fb:2b:dc:bc:7e:b8:05:b9:72:29:32:2d:9b:e3:62:69:27:98:
bf:24:11:50:bd:07:26:89:b0:25:30:46:e9:a5:54:7f:bf:0e:
a9:1b:cb:9f:1d:3e:56:dc:55:be:79:59:df:6e:8d:d0:22:3e:
8c:40:22:24:6c:0c:82:dd:41:2c:8e:5c:42:5c:40:75:bc:87:
eb:fd:fd:ab:e9:96:d5:a9:36:2e:58:fb:88:d9:3e:70:62:4b:
49:83:72:d9:a7:27:58:53:f5:e4:7b:f4:3d:6e:42:a5:37:94:
00:ae:29:c6:35:cf:56:4e:bd:f4:c5:20:2b:cf:4f:fd:a7:38:
e2:3f:e4:61:10:34:65:06:6a:e1:7c:b0:94:d6:8b:28:e9:65:
0f:66:f9:b8:28:f7:0a:2c:33:d7:fd:d1:d0:a0:dc:ee:92:06:
54:11:8c:5c:ee:06:d4:43:f7:cf:cc:ab:5e:8d:0b:32:76:38:
7d:15:93:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:38:01 2026 by rpki-client