Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
File: yalITKcIq3cesduQuvyKEUwsPXk.mft (raw, json)
Hash identifier: 6G0xCmcJMCQSkhjBiSVrf1DRVkXoT6ZXT4wh869cjWw=
Subject key identifier: AD:B5:4A:11:B3:70:8A:D9:49:C7:82:5E:61:F0:E5:AD:2C:AF:78:06
Authority key identifier: C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
Certificate issuer: /CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Certificate serial: 01A0CEFF952C2F21B2AB099BF8F169D25E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 16:00:51 +0000
Manifest this update: Wed 23 Sep 2026 16:00:51 +0000
Manifest next update: Thu 24 Sep 2026 16:00:51 +0000
Files and hashes: 1: 3eahbNs7sLSlMwMQAPIK4WlF5S0.roa (hash: iShcDJZ7gmNtw4FSGePEabrCqu38c4kHe0CrQJ2Q7ow=)
2: MuKPEjpSeKLvjqZfVopVa-G44-Y.roa (hash: gXY94gXYWU1Pqibv85vvI+18JY770F42380MRYt28Gc=)
3: yalITKcIq3cesduQuvyKEUwsPXk.crl (hash: m2p6m0t1EykVxq3CiyJiHnDT4/OLr+NHn/ZG7dB3Ogg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:95:2c:2f:21:b2:ab:09:9b:f8:f1:69:d2:5e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Validity
Not Before: Sep 23 16:00:51 2026 GMT
Not After : Sep 24 16:00:51 2026 GMT
Subject: CN=adb54a11b3708ad949c7825e61f0e5ad2caf7806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:c0:bb:42:d9:21:d0:83:b8:c1:ff:84:00:
4f:3d:d0:85:04:3d:b7:10:0b:c9:53:f7:10:b3:35:
0d:0c:2b:3b:7f:4e:63:e4:e5:d8:d5:dd:43:55:99:
7c:0f:ca:15:f9:0a:b2:a7:52:5d:1f:86:ff:c8:43:
eb:de:48:17:ab:27:31:c2:35:33:7e:52:4b:f2:17:
81:66:06:bb:0d:61:e8:b6:c6:75:0b:aa:32:77:25:
4f:74:6b:01:5c:32:4f:1b:39:5f:08:00:35:9f:76:
62:1e:73:e2:d5:39:26:80:19:54:62:8f:a2:56:61:
78:0c:10:78:91:d6:50:4d:6d:b9:05:fc:9d:db:bb:
58:a5:af:25:42:d0:53:f6:a9:97:97:51:83:75:36:
19:ec:7d:da:c2:49:8d:76:ed:87:6c:ce:31:c4:ca:
09:bf:f1:84:b2:fb:88:0b:74:fa:4a:6e:ab:8f:bd:
41:ce:2d:d5:32:85:76:e1:4f:94:d6:ef:fb:fb:95:
e5:e4:40:96:2e:93:81:2b:27:74:1a:68:ec:c5:36:
79:ec:7b:44:02:e4:e3:f0:bc:e8:08:c8:ca:8c:8e:
d7:83:2b:c3:e4:91:05:1e:0f:40:31:e6:4a:1c:df:
29:cb:df:2d:9f:2b:9c:c5:b8:e3:20:a7:ee:77:0a:
08:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B5:4A:11:B3:70:8A:D9:49:C7:82:5E:61:F0:E5:AD:2C:AF:78:06
X509v3 Authority Key Identifier:
keyid:C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:72:53:48:7b:5d:b1:94:5a:59:ae:50:ad:45:33:9c:d0:63:
bd:af:d4:d2:4a:bb:04:28:f5:b9:86:93:9e:86:0e:2f:9b:08:
a7:1f:8b:5d:12:da:15:e9:31:88:25:94:5b:b8:70:4d:50:db:
dd:2a:b0:3e:90:e3:c5:7a:7f:a8:99:dc:d6:c1:08:85:44:ee:
b1:7f:8a:c5:93:08:87:a6:db:68:7d:66:8b:f1:42:c6:94:63:
8f:96:1a:4c:6a:66:42:63:08:9f:ef:ca:3c:80:25:0e:6b:b8:
ce:aa:be:5b:f0:7d:3d:3f:be:88:f8:f6:c9:54:db:db:df:ae:
9d:7a:48:64:16:7c:84:3a:a3:2b:2c:66:66:83:37:f8:33:0f:
a6:1e:51:de:b6:d7:01:f0:96:e9:15:67:3c:b1:3c:f9:15:b5:
a0:01:8f:fa:1c:7b:0d:18:fb:77:fe:13:d9:4b:7b:e5:ce:34:
d9:9b:39:21:ba:4f:19:fa:3f:a6:85:28:be:ed:70:0a:46:9b:
68:f1:7a:9b:b1:2e:0a:f8:b9:06:ee:b8:9f:8f:de:fe:25:2a:
e2:ae:5a:32:97:9c:5e:35:a5:c0:21:ac:59:82:d3:0f:96:1f:
01:03:82:a8:10:c8:2c:57:14:f7:00:e4:af:db:fe:af:b3:57:
e3:2a:09:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:42:18 2026 by rpki-client