Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: rKqPH1819FihxeuXYhqcYJnrfnooz1bIJxNkJgQCbQU=
Subject key identifier: DF:BE:3E:50:90:85:46:8B:F4:77:0E:43:16:6B:99:37:70:FA:42:86
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 01A0C6D8843E9D79A265AC8D3D41BCDE12B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 02:01:13 +0000
Manifest this update: Tue 22 Sep 2026 02:01:13 +0000
Manifest next update: Wed 23 Sep 2026 02:01:13 +0000
Files and hashes: 1: Nh5n5OS_FgNSU_CRCZBVspz1rhI.roa (hash: IWrNPYpBRnCN3KoAH2/hYR5dMaCc3BE8UMq5q83cyhw=)
2: wG3GrFqVGUvTRTbPHblNlTz8CLk.roa (hash: LemTu9TRxZtqMeqZqR+9skKyltQynjo4K29j1dzL0vI=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: My/uQ1Kry0U5Cui/88Yo5k12VbuILLJb0wl2w/YAfnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:84:3e:9d:79:a2:65:ac:8d:3d:41:bc:de:12:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Sep 22 02:01:13 2026 GMT
Not After : Sep 23 02:01:13 2026 GMT
Subject: CN=dfbe3e509085468bf4770e43166b993770fa4286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c7:99:cc:ee:01:82:88:8e:16:f3:b7:c7:2c:
ab:f0:41:23:a8:e2:cb:9d:40:47:b5:b0:7a:f0:18:
b8:e8:41:df:41:21:ab:1e:02:e4:04:49:67:18:e4:
1d:b3:e2:7b:15:e2:94:db:16:76:af:d8:ad:4a:72:
ed:7d:62:65:bc:a8:0d:7b:e2:0c:9f:0f:d9:82:b2:
6e:34:8a:90:f0:d6:ff:f4:8a:f1:71:0a:03:5e:a7:
25:70:7e:f7:3d:42:ea:e0:82:cb:93:c0:95:8d:9c:
04:02:d2:15:da:03:4a:2b:06:d2:bf:4a:a6:a8:b2:
f2:9e:06:b5:1e:f3:62:68:4d:8e:1b:5d:f1:fd:e5:
d5:b0:ff:d5:57:ab:71:e0:94:92:59:74:30:68:5f:
6e:b7:00:c8:73:79:f6:a7:53:a7:78:2a:51:21:8e:
14:37:97:3a:e3:c6:89:89:bd:c0:fe:0d:ea:7a:ee:
f4:27:fb:36:2c:57:64:61:93:18:8d:79:16:15:92:
97:4f:b9:25:dd:6e:2f:41:b7:79:9c:cc:37:9f:ae:
d2:54:8d:50:da:c5:98:9b:c7:6b:e6:41:22:97:53:
f8:a9:a9:b9:b5:37:1a:eb:2c:3f:48:0e:40:c8:f9:
52:6b:dc:6b:a5:f5:d4:72:79:c7:55:61:c7:f4:0c:
90:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BE:3E:50:90:85:46:8B:F4:77:0E:43:16:6B:99:37:70:FA:42:86
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:af:25:f1:2f:d6:67:25:fb:da:fd:60:df:70:30:8f:83:ff:
1c:09:44:51:ae:fc:a2:8d:c1:06:66:8e:2b:54:65:49:9a:5c:
ad:69:9a:92:b4:d5:8f:55:88:9c:73:85:fb:b5:23:b6:2d:f6:
d7:3d:79:17:cb:f8:3a:b4:74:50:09:d7:e4:4b:6f:08:78:4e:
1b:01:d3:3f:e7:f4:a6:23:38:78:3a:de:a1:02:ce:ef:c0:44:
3b:6c:4e:c9:d5:4b:ac:bc:a7:75:a0:dc:fa:fb:e4:2e:02:3a:
ed:24:02:28:17:04:47:fd:4c:ee:82:bd:54:f5:d1:fa:51:56:
ce:ec:ec:06:22:3c:bd:24:66:58:c8:89:cd:bd:cc:3c:ad:20:
18:c1:08:cf:d6:68:91:71:5c:9b:f8:2e:bc:3a:44:24:9a:6d:
81:66:7a:06:7e:88:94:f4:6c:b0:47:21:99:a3:77:de:a1:fa:
fb:28:5f:59:a6:a2:13:86:24:39:26:e5:c1:e5:d4:ab:1f:f6:
83:b2:e3:b9:df:3b:c5:4c:ce:f4:ac:07:45:bb:3d:0a:07:06:
f3:cd:2d:35:66:e8:ca:0d:cd:d1:75:9d:ec:2b:2f:50:0d:5a:
74:40:40:a4:ea:cc:c3:3c:a4:2b:f1:66:49:3b:be:93:96:db:
11:1c:8f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:57:22 2026 by rpki-client