Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
File: YJ6nq6_FLH_6IKemquSuLSYlIHY.mft (raw, json)
Hash identifier: G7Yxndza697XmfxY/9BHt80mrj/pxdbw+KuAS0ORRQI=
Subject key identifier: CA:D9:95:68:B7:67:BC:2E:04:AE:4F:5D:A0:3C:AD:16:36:F6:C6:32
Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
Certificate issuer: /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Certificate serial: 01A0CC34ED9AE5DA9123F78AD3116B0095A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
Manifest number: 04D8
Signing time: Wed 23 Sep 2026 03:00:15 +0000
Manifest this update: Wed 23 Sep 2026 03:00:15 +0000
Manifest next update: Thu 24 Sep 2026 03:00:15 +0000
Files and hashes: 1: IPEVX9NburliCOkL_8My8KZEvxc.roa (hash: vKtzd4qXyz9EWKAKarv5HXYhJ7hA2jvu9rmJAemDTXw=)
2: YJ6nq6_FLH_6IKemquSuLSYlIHY.crl (hash: 5W2PldcjgZfoO4GXXWJVJKDlo5x7yom25WvjCESawAw=)
3: g3UM-mxo9surPyGX-ua-Jw8Hwy0.roa (hash: rLTMTj/qJ9X8Z52HM7aUZCnlG5iT1wzURKa+BIyHlNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:34:ed:9a:e5:da:91:23:f7:8a:d3:11:6b:00:95:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Validity
Not Before: Sep 23 03:00:15 2026 GMT
Not After : Sep 24 03:00:15 2026 GMT
Subject: CN=cad99568b767bc2e04ae4f5da03cad1636f6c632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:4c:76:2c:3e:a6:17:34:c1:ba:41:ef:86:
51:cb:4f:e1:b6:61:3a:76:68:7a:94:f1:27:7b:96:
11:97:53:7d:fe:fb:9e:a5:76:04:cb:ca:7c:6b:69:
d8:d4:26:5a:4f:df:d0:e7:86:a4:35:98:32:e0:5d:
94:ab:85:0d:89:c6:70:1a:74:c4:f9:c7:b1:de:48:
02:ec:5d:1a:a5:3e:85:84:55:e5:e6:fc:1b:fb:19:
f2:1c:d6:a7:1e:c0:96:52:b3:9a:be:12:96:27:51:
d6:de:43:ee:81:22:3e:be:93:16:81:ad:66:6c:58:
e6:23:bf:3f:fa:17:a5:be:d6:70:02:2e:c4:82:84:
da:d7:5d:a4:8f:75:c7:da:de:0f:d4:00:00:97:ee:
a9:ca:45:0a:66:8b:1f:e2:45:51:e1:3b:39:87:a5:
e1:44:06:1b:5a:9e:8e:b6:17:73:87:ee:7c:6e:0f:
9c:1e:c9:07:81:96:85:24:35:f0:f5:d2:eb:a2:ee:
84:5b:bb:98:1a:ff:eb:de:a8:62:cb:c4:f0:91:67:
95:fe:ef:4e:b7:04:a8:9f:f5:1c:57:74:e8:6f:9c:
da:7e:a1:25:69:76:8b:bf:cf:fe:27:e4:2e:f1:ad:
7f:95:86:06:63:1b:0e:7b:ac:9f:9e:2b:73:24:c8:
8a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D9:95:68:B7:67:BC:2E:04:AE:4F:5D:A0:3C:AD:16:36:F6:C6:32
X509v3 Authority Key Identifier:
keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f0:09:8d:a9:79:3a:8d:da:c8:a4:86:ef:3b:3e:d2:42:6e:
e1:d1:d8:ed:29:3b:00:e4:03:0a:93:8c:14:21:4a:89:8e:d6:
51:a1:34:bc:84:93:92:80:e7:dd:a0:fb:c6:83:bf:d9:94:26:
d7:5f:6b:0d:78:65:4d:2a:8f:ff:7c:45:13:fa:7b:82:4b:58:
de:5f:40:f6:76:3f:5d:a5:bb:84:11:bf:8f:04:e2:38:a0:bd:
44:76:a7:08:65:c4:05:a2:4d:a1:44:f7:22:e8:ab:ea:6d:02:
d5:9f:18:97:8c:5d:11:2e:6e:ec:e0:26:54:26:bb:fe:74:79:
47:8e:c5:f5:8e:09:9e:cc:63:e2:74:52:e9:ee:ba:c8:c7:d1:
96:d6:c7:97:23:8b:ff:ad:ce:2e:fa:2a:51:20:2e:60:38:7c:
a2:ca:d8:b3:ae:22:02:52:54:33:9a:d8:a0:48:94:11:a5:98:
1d:63:06:2d:e6:df:89:ac:d6:21:f3:db:9e:60:bc:2e:52:ae:
53:c7:55:5b:60:fe:13:40:bb:4b:3a:33:24:90:20:7c:ae:57:
d9:df:b5:47:86:a4:f7:29:3c:e8:9e:a6:59:22:a6:5b:2a:f8:
41:7d:61:2f:b4:38:fe:c7:02:f4:dc:df:61:58:e6:b8:62:01:
e8:39:69:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:57:48 2026 by rpki-client