Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/Y_nSPXQ3XBOOpWPkzJfwlAbteQY.mft
File: Y_nSPXQ3XBOOpWPkzJfwlAbteQY.mft (raw, json)
Hash identifier: qw4x3EdkV4ovUyN3gnNJtSbojkyxHFkFWZNN/qadztU=
Subject key identifier: 16:C2:3B:62:C6:18:E3:FE:9C:CF:31:1E:12:56:7E:B3:84:D1:EC:14
Authority key identifier: 63:F9:D2:3D:74:37:5C:13:8E:A5:63:E4:CC:97:F0:94:06:ED:79:06
Certificate issuer: /CN=63f9d23d74375c138ea563e4cc97f09406ed7906
Certificate serial: 01A0CE23B2F369FF0B649052D3F9162121C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_nSPXQ3XBOOpWPkzJfwlAbteQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/Y_nSPXQ3XBOOpWPkzJfwlAbteQY.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:00:41 +0000
Manifest this update: Wed 23 Sep 2026 12:00:41 +0000
Manifest next update: Thu 24 Sep 2026 12:00:41 +0000
Files and hashes: 1: 0zWDtCfFaeiJ1qnneXnuyttQ0-Y.roa (hash: 3QXgk5xHB1rL/T5/pVl2+O3XjcWmul7E59jELRq2aRE=)
2: Y_nSPXQ3XBOOpWPkzJfwlAbteQY.crl (hash: 6IQLQN4B49c5tZt8ff/L6CdVkLjibddg4wRLHYExAIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/Y_nSPXQ3XBOOpWPkzJfwlAbteQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/Y_nSPXQ3XBOOpWPkzJfwlAbteQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_nSPXQ3XBOOpWPkzJfwlAbteQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:b2:f3:69:ff:0b:64:90:52:d3:f9:16:21:21:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f9d23d74375c138ea563e4cc97f09406ed7906
Validity
Not Before: Sep 23 12:00:41 2026 GMT
Not After : Sep 24 12:00:41 2026 GMT
Subject: CN=16c23b62c618e3fe9ccf311e12567eb384d1ec14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:2a:1d:3a:bf:42:d8:ff:62:74:4b:c1:f2:
4b:1c:92:d0:5b:71:84:69:4b:bc:c2:f2:08:da:6b:
34:79:e1:85:c9:7d:82:38:6b:ea:72:5e:86:96:fe:
3f:b9:6b:e6:2b:f8:ec:30:41:c9:78:1e:47:2e:04:
8c:b7:ef:ca:08:98:ac:8f:f3:b3:d5:c5:d8:16:87:
3c:02:6f:ce:88:9e:84:2d:3d:e1:27:8d:32:6b:b4:
fd:ca:94:95:4d:d3:d3:c4:1d:58:77:6c:f1:10:ec:
19:cb:06:6e:76:14:93:66:73:07:9f:e1:99:d0:08:
1d:52:c3:0c:aa:60:a8:31:55:5e:81:fc:d1:da:c6:
36:8c:9d:82:ad:67:3d:ba:03:f3:c4:1e:97:d4:09:
1b:a4:93:78:c1:4d:c4:a3:18:ea:04:d9:1a:a6:28:
9a:6c:5f:03:29:83:56:b5:b9:7c:b9:93:1f:1b:ee:
7a:19:88:1d:50:e8:73:d2:94:97:a7:91:17:10:c1:
9a:e7:63:7c:58:bd:83:f8:94:ff:6f:b7:3f:94:f0:
64:d7:d0:16:2c:93:b0:d1:2d:c4:aa:01:0f:1b:5a:
de:6f:17:e8:c4:22:e9:8f:c4:96:e9:af:f4:1d:28:
6f:36:04:1a:03:44:cd:78:7d:ff:4a:d8:4a:34:a1:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C2:3B:62:C6:18:E3:FE:9C:CF:31:1E:12:56:7E:B3:84:D1:EC:14
X509v3 Authority Key Identifier:
keyid:63:F9:D2:3D:74:37:5C:13:8E:A5:63:E4:CC:97:F0:94:06:ED:79:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_nSPXQ3XBOOpWPkzJfwlAbteQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/Y_nSPXQ3XBOOpWPkzJfwlAbteQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/Y_nSPXQ3XBOOpWPkzJfwlAbteQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:72:08:01:e2:e4:c5:75:9c:23:4d:07:86:82:b5:16:a5:ea:
cf:c6:37:20:67:57:6a:54:aa:9f:4d:a0:7e:1b:fa:23:39:9d:
e3:d7:da:9d:d8:5a:c4:65:a4:03:66:d1:a9:93:d1:9e:b1:80:
e3:ef:1e:31:08:69:cf:39:b6:26:54:6b:24:59:15:5e:2b:b5:
3c:a7:5c:e2:f0:f0:9e:51:bb:94:1e:ee:df:3a:d7:a8:d7:4a:
76:34:0e:a0:6d:1c:6b:b7:34:84:ed:35:22:6b:24:fd:b4:ea:
8b:08:5d:60:4e:78:f2:8f:cf:12:6f:c7:57:72:ef:b0:8f:d6:
20:c5:dd:4f:1a:9f:a6:89:13:a8:e3:37:2c:b4:2f:a6:8c:5b:
ac:5b:05:f5:81:a0:0e:4e:5c:bb:cf:31:7f:94:f9:c3:8a:89:
4e:53:4f:61:e3:f1:b8:a3:a1:63:f3:bb:6d:dc:ad:82:ef:a6:
af:f9:86:ca:b0:8b:95:fc:1a:58:4d:6d:fd:c3:cb:09:6f:26:
58:75:d8:97:b5:cb:88:23:8b:87:8b:70:e0:0b:eb:f5:60:9b:
19:31:ef:a8:90:a4:02:dd:94:a8:50:a3:8a:98:a1:06:8e:ce:
23:86:a4:e5:e8:d7:b0:62:05:b0:5d:7c:6e:a2:67:00:53:5a:
ea:7f:fd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:51:58 2026 by rpki-client