Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
File: Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft (raw, json)
Hash identifier: GkQ3ErbKk26riONtTXXH6hxyHqx7juQ/mu90zOpRy7M=
Subject key identifier: 75:71:9E:19:E1:95:61:A4:6D:80:5F:24:AE:67:2E:20:C7:DE:8B:D9
Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
Certificate issuer: /CN=6353829c061a8af26de946fc9e81885c74c174c7
Certificate serial: 01A0C9D98EB243204B77728854E8127D5F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
Manifest number: 0C6B
Signing time: Tue 22 Sep 2026 16:01:13 +0000
Manifest this update: Tue 22 Sep 2026 16:01:13 +0000
Manifest next update: Wed 23 Sep 2026 16:01:13 +0000
Files and hashes: 1: Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl (hash: FJYa9GINmm3uv0TKm/x31y9WkdhvFj2vrdc5VHYy7CQ=)
2: oVwFkvdTGoRcoIaCVoJWao9067c.roa (hash: mNDuB88yYB2a1hk5GC2+5PKmqMUPggl9sv+jUF9m7GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:8e:b2:43:20:4b:77:72:88:54:e8:12:7d:5f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7
Validity
Not Before: Sep 22 16:01:13 2026 GMT
Not After : Sep 23 16:01:13 2026 GMT
Subject: CN=75719e19e19561a46d805f24ae672e20c7de8bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:e7:1f:b7:07:89:40:06:04:56:8e:b5:4a:
8a:81:32:3b:32:6e:0d:e0:7e:3c:03:7c:2f:ae:71:
e3:01:b4:43:f6:f6:9a:b4:61:e3:2d:37:e0:c6:7c:
e6:5e:69:a2:a0:16:56:60:52:5d:1d:9e:62:85:c3:
cb:55:38:f0:65:58:3b:c1:d8:89:9b:61:4f:14:5b:
2e:00:d5:6e:aa:03:61:c5:9b:39:75:fd:7d:1b:22:
44:16:ed:eb:ca:d0:3c:06:64:73:83:a0:00:70:06:
b7:08:d0:d5:e0:bf:bf:9e:ad:5c:cc:62:fd:8f:cb:
a8:28:cb:cc:b7:a8:3d:b0:8a:2d:7e:44:16:76:a8:
9a:2a:0a:53:ed:8f:e2:a5:19:5a:0d:ce:90:af:37:
a3:15:21:96:c8:db:32:dd:51:8d:7f:61:99:77:a4:
f9:4d:3c:e0:e9:9e:ec:61:6a:94:af:40:50:8b:6c:
f4:65:85:f4:67:05:f3:21:51:c1:02:a5:03:f8:33:
2e:41:14:85:4f:65:7c:83:c2:35:1c:00:92:a9:eb:
8a:aa:f8:71:a3:80:21:ff:ad:39:24:20:da:b5:14:
5a:e6:62:93:69:54:31:1f:2c:28:bb:33:13:bb:b3:
62:54:22:99:ec:5f:6a:ca:f0:d9:ae:cb:06:94:53:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:71:9E:19:E1:95:61:A4:6D:80:5F:24:AE:67:2E:20:C7:DE:8B:D9
X509v3 Authority Key Identifier:
keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:67:f1:b4:74:4c:6d:14:a9:c9:78:38:8a:26:70:2d:73:d6:
97:db:83:a1:d5:d3:35:46:5a:a1:82:89:28:42:1a:0b:10:4d:
bc:e1:7a:eb:c4:d1:99:d6:bc:ca:b5:ae:4c:10:df:0a:67:5d:
a1:b7:bf:63:21:09:cc:2b:f4:75:4d:11:82:2b:c1:5d:7a:fb:
64:37:63:c6:05:88:d1:b1:67:b6:2e:fc:d4:67:6a:ed:0d:4e:
4e:da:ac:c1:e1:d8:6e:49:c8:9f:be:58:b3:78:9e:40:43:8b:
74:86:f9:83:77:30:2b:2c:fd:6b:43:96:05:e9:6f:2d:59:a9:
3b:77:77:05:af:fa:4c:ae:ba:4f:19:b3:97:05:81:df:d2:f0:
a3:4a:5c:a0:ed:ba:56:3a:2e:00:97:cf:85:f3:7b:dd:a3:7f:
2c:08:99:f7:b4:46:e7:3e:44:37:13:ac:cd:c6:26:59:67:34:
d1:4d:c7:99:6e:72:0d:91:52:56:84:e2:84:7c:4f:8a:d9:78:
41:4c:c9:84:7e:fc:d1:b0:85:cf:ad:a0:e3:d1:f6:4a:45:2e:
5c:8b:2d:cb:a6:8b:7b:c7:aa:d2:a3:e0:f5:93:e6:b0:19:80:
99:ad:d4:14:fc:88:9d:88:38:dc:05:69:66:c4:05:eb:12:22:
a1:1f:06:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:16:50 2026 by rpki-client