Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
File: YJ6nq6_FLH_6IKemquSuLSYlIHY.mft (raw, json)
Hash identifier: 5QRQKEASkeiu0qjt2Q20vSWSUfbcuDBIV0IM5zpEfmE=
Subject key identifier: 0F:F5:64:9D:7E:EB:36:A4:3D:0B:AD:3F:38:18:FC:98:C4:FE:28:5E
Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
Certificate issuer: /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Certificate serial: 01A0C47C6598422B9F2B1142557A3B1A71B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
Manifest number: 04D4
Signing time: Mon 21 Sep 2026 15:01:21 +0000
Manifest this update: Mon 21 Sep 2026 15:01:21 +0000
Manifest next update: Tue 22 Sep 2026 15:01:21 +0000
Files and hashes: 1: IPEVX9NburliCOkL_8My8KZEvxc.roa (hash: vKtzd4qXyz9EWKAKarv5HXYhJ7hA2jvu9rmJAemDTXw=)
2: YJ6nq6_FLH_6IKemquSuLSYlIHY.crl (hash: BQ3nHVpzUQsZMczX3Y3407V0cL4yC3VqVzw5uYLsr/Y=)
3: g3UM-mxo9surPyGX-ua-Jw8Hwy0.roa (hash: rLTMTj/qJ9X8Z52HM7aUZCnlG5iT1wzURKa+BIyHlNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:65:98:42:2b:9f:2b:11:42:55:7a:3b:1a:71:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Validity
Not Before: Sep 21 15:01:21 2026 GMT
Not After : Sep 22 15:01:21 2026 GMT
Subject: CN=0ff5649d7eeb36a43d0bad3f3818fc98c4fe285e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:6f:b3:e9:2c:88:2a:7f:14:4b:82:18:d4:
79:d7:9b:e3:7f:a6:df:cf:d2:a5:f2:27:ff:1b:c9:
f0:f0:62:9a:2a:d0:4e:f6:38:24:3e:65:5a:6f:bd:
d5:35:ef:b2:03:27:2e:f0:64:76:42:12:b9:b2:98:
47:37:15:7c:40:a9:ff:4f:6a:14:bb:14:9f:b9:fa:
90:a9:f6:fc:a5:49:7e:11:5f:e6:dd:86:cf:31:10:
69:ea:3c:e5:d5:ea:6f:d9:6c:36:8f:96:86:0a:95:
4c:de:79:73:03:d0:55:8d:f5:2a:76:17:65:fe:81:
61:e9:c1:5a:47:59:df:d9:5f:5a:a0:91:0b:02:63:
e1:9a:3e:ed:c7:dd:dd:7f:ed:40:88:be:38:97:d3:
48:f0:01:02:21:05:41:7a:8f:ec:47:ac:9a:71:d9:
c1:69:70:88:f5:cf:a7:36:99:31:f6:8f:a1:e1:ce:
60:10:fa:5b:0f:56:fa:95:55:a1:40:89:42:0c:22:
2f:82:55:5e:c3:35:75:13:02:bd:79:e8:3a:1e:90:
02:a8:1d:6b:cc:4a:09:53:26:42:22:97:bd:e4:f7:
77:8c:60:57:4c:39:b4:32:92:f4:19:ae:55:d1:b5:
55:ba:55:63:78:4f:70:58:61:4e:34:97:23:9b:a8:
55:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F5:64:9D:7E:EB:36:A4:3D:0B:AD:3F:38:18:FC:98:C4:FE:28:5E
X509v3 Authority Key Identifier:
keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:53:67:8d:51:71:db:6b:83:da:d5:00:45:1a:27:45:79:10:
1e:75:5f:b7:ba:5e:4a:73:f6:56:f5:ac:dd:c5:60:70:38:c2:
26:1a:3a:bc:a7:23:78:69:b2:f1:7e:2f:2e:5b:29:42:66:86:
b7:09:fb:65:08:cf:9e:f2:b7:71:fe:86:e4:8f:11:5a:98:d8:
70:dc:4a:6c:25:6d:5e:02:5e:9d:24:18:a5:62:5b:df:2e:7f:
b6:97:1b:27:3d:05:5b:3f:7e:30:f5:31:fa:4a:f9:e0:81:61:
f5:17:24:b7:45:a6:81:6a:39:7a:ed:b8:d5:73:38:3e:50:5c:
1f:e8:2f:78:5f:66:64:be:98:b1:c2:34:e4:e3:11:f2:53:e8:
3a:26:f5:15:3f:71:56:b0:53:d2:3d:13:ec:9f:83:66:08:1f:
b9:31:4e:05:82:76:1a:44:a0:6d:48:55:90:b4:f5:4a:aa:24:
97:62:d9:54:79:57:6b:bf:ca:4d:0c:df:a8:c5:ed:63:e0:2e:
40:d5:a5:a0:2a:6c:2a:15:89:70:19:c1:78:13:83:7b:f9:1c:
56:d2:7c:d9:b9:80:a0:fa:21:7b:fd:a0:50:99:2f:68:79:a3:
88:c4:b2:36:32:a2:bd:dd:6d:9c:04:09:89:91:16:02:a2:1d:
cb:16:45:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:06:11 2026 by rpki-client