Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.mft
File: YxFTku9nj6VQgFY4E_pbH4c58cY.mft (raw, json)
Hash identifier: te1R5cmzh4YlJeGSx8gd6K/nVwBpbsUoi9vP4NLMOPk=
Subject key identifier: 2A:51:A5:80:EC:2E:EB:44:AD:C9:1A:64:1D:DF:FA:AF:D4:30:57:5E
Authority key identifier: 63:11:53:92:EF:67:8F:A5:50:80:56:38:13:FA:5B:1F:87:39:F1:C6
Certificate issuer: /CN=63115392ef678fa55080563813fa5b1f8739f1c6
Certificate serial: 01A0C66A5DF26A0BCF17385EDF712E9DE86C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxFTku9nj6VQgFY4E_pbH4c58cY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:00:54 +0000
Manifest this update: Tue 22 Sep 2026 00:00:54 +0000
Manifest next update: Wed 23 Sep 2026 00:00:54 +0000
Files and hashes: 1: 6as5WEbBHVftxoYno52EYXpZJiI.roa (hash: v8PZ1y8/898BpzA4Z9n4//Ktbh68yLyotavSi4xBa6U=)
2: YxFTku9nj6VQgFY4E_pbH4c58cY.crl (hash: 0ei9V7pcv4VO4hX0yPngYL8FVZhoOGPNx9Aqy7Zqne4=)
3: ar0Ts0ryzvDGOQY7d4ho9EY6si0.roa (hash: gqTbGzgaeb4B0LTSvn8godbTwE4G30IwqmkEqQ/zzHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxFTku9nj6VQgFY4E_pbH4c58cY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:5d:f2:6a:0b:cf:17:38:5e:df:71:2e:9d:e8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63115392ef678fa55080563813fa5b1f8739f1c6
Validity
Not Before: Sep 22 00:00:54 2026 GMT
Not After : Sep 23 00:00:54 2026 GMT
Subject: CN=2a51a580ec2eeb44adc91a641ddffaafd430575e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:5a:ec:d8:f4:9b:ce:7e:87:e8:b4:dd:a0:
e9:e8:4f:23:83:a8:a8:e9:e8:54:df:08:69:e9:72:
22:21:d8:98:31:23:1e:9e:77:fe:c3:c1:90:e0:c3:
e2:99:54:3b:25:42:d0:f8:c3:1d:bf:71:9f:b8:d4:
66:63:7f:6d:35:96:b6:2e:a9:98:64:ad:9b:b5:6d:
5f:9d:6b:76:b7:07:0a:81:39:76:08:f0:fc:80:ba:
bb:8d:b8:55:bb:19:c8:81:f6:44:de:b2:f6:97:f1:
20:a3:97:e7:f0:22:34:e0:50:80:b8:54:fc:c6:a0:
6f:5c:83:8c:ac:0c:95:3e:1c:f1:ca:1f:8f:68:8f:
62:32:97:c8:64:f5:9e:17:62:1a:68:f8:ba:51:de:
5d:78:03:e6:13:94:7d:22:84:5b:94:00:fd:e5:09:
f7:bd:86:56:0d:12:6f:94:b2:29:09:fa:51:a4:9e:
f7:13:9e:73:64:a4:7e:fb:a6:48:00:15:69:c9:a5:
80:4f:7a:dc:35:dc:23:bc:bb:2d:d5:d8:64:29:03:
99:7e:96:e0:3e:58:6b:93:c4:d5:8a:f0:32:0f:af:
c5:ca:f9:00:8c:e7:f8:4d:e7:8c:df:77:08:d4:71:
16:4f:20:95:e0:da:5a:c8:da:f5:ec:63:a6:50:4a:
7d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:51:A5:80:EC:2E:EB:44:AD:C9:1A:64:1D:DF:FA:AF:D4:30:57:5E
X509v3 Authority Key Identifier:
keyid:63:11:53:92:EF:67:8F:A5:50:80:56:38:13:FA:5B:1F:87:39:F1:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxFTku9nj6VQgFY4E_pbH4c58cY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a0:57:6f:1a:95:f9:4e:45:cb:e4:d3:91:89:ff:b9:e5:28:
69:31:0d:1f:33:5e:f6:9c:cb:ba:e6:00:5d:08:dc:04:86:58:
43:27:8a:82:58:21:d9:18:50:e0:aa:a5:16:f1:db:33:33:02:
32:a5:20:b2:da:a9:a0:00:73:a9:92:89:a9:e8:eb:8a:0c:d4:
68:5b:d7:aa:03:af:f2:67:ce:18:47:e1:7d:e1:5a:7f:8b:14:
d1:44:3e:60:0c:24:87:9d:10:77:7a:05:8f:c7:4e:9a:4d:09:
3e:eb:4a:d4:a7:35:b9:11:79:64:e3:c2:dc:ac:e0:81:a8:d4:
00:f4:5c:45:91:c6:13:73:94:73:cd:cc:a9:41:a5:ec:52:37:
66:47:f1:99:c3:fa:5d:63:b5:09:91:51:8a:22:92:be:33:c8:
e7:96:52:d3:0d:55:ca:4a:3c:bb:98:b0:69:26:28:1b:4d:18:
04:2a:de:18:d3:aa:d4:e4:1a:a0:1a:68:64:0a:ce:8e:6b:87:
50:6a:28:82:b3:6f:18:88:01:6c:71:c2:51:3a:bf:6a:c1:05:
ad:ee:7d:dd:0f:ea:af:a1:ec:2d:20:67:31:85:6a:46:79:2a:
68:31:a5:2b:cc:69:c3:07:0a:8e:53:13:66:1f:94:d7:0f:b7:
9a:dd:ea:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:55:30 2026 by rpki-client