
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/yYPuPVHGojyZCacJi4Z41cjf7O0.mft
File: yYPuPVHGojyZCacJi4Z41cjf7O0.mft (raw, json)
Hash identifier: XRwDKLjzFf2KHgoxzvn5vcyFQjAZsoI+gLLvrqC0OoY=
Subject key identifier: B3:3C:60:A3:02:89:C6:59:DA:01:C8:96:94:48:01:A3:B7:E3:5D:EE
Authority key identifier: C9:83:EE:3D:51:C6:A2:3C:99:09:A7:09:8B:86:78:D5:C8:DF:EC:ED
Certificate issuer: /CN=c983ee3d51c6a23c9909a7098b8678d5c8dfeced
Certificate serial: 01A0C70EDA9C475AD7F39C1A2ADCBE601D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYPuPVHGojyZCacJi4Z41cjf7O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/yYPuPVHGojyZCacJi4Z41cjf7O0.mft
Manifest number: 61
Signing time: Tue 22 Sep 2026 03:00:34 +0000
Manifest this update: Tue 22 Sep 2026 03:00:34 +0000
Manifest next update: Wed 23 Sep 2026 03:00:34 +0000
Files and hashes: 1: eDcSlxP7XiXaAiDLRSTct9MD2zg.roa (hash: QmP1HE0WxKhN31L+VXAQfz3t8ci7ROFl6oUrHnBNHmY=)
2: yYPuPVHGojyZCacJi4Z41cjf7O0.crl (hash: DoT6qRIc/Lj2SJiXnmObZo4B+JQLRhB8tMcPkJuBnv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/yYPuPVHGojyZCacJi4Z41cjf7O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/yYPuPVHGojyZCacJi4Z41cjf7O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYPuPVHGojyZCacJi4Z41cjf7O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:da:9c:47:5a:d7:f3:9c:1a:2a:dc:be:60:1d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c983ee3d51c6a23c9909a7098b8678d5c8dfeced
Validity
Not Before: Sep 22 03:00:34 2026 GMT
Not After : Sep 23 03:00:34 2026 GMT
Subject: CN=b33c60a30289c659da01c896944801a3b7e35dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:dc:b3:f4:f8:ec:67:90:cf:d3:03:9d:0f:
c2:00:d1:22:6b:cd:5e:3c:32:ac:5b:78:01:a0:ea:
bf:38:c0:2a:4c:7d:30:ed:78:11:e6:51:d1:3d:20:
51:cb:dd:17:54:69:d9:a2:2e:d6:63:40:cc:13:4b:
74:e5:08:44:38:57:24:26:1b:cc:f5:58:2d:b6:54:
4a:b0:49:5e:c6:c4:6c:42:3b:3c:c9:69:8d:07:43:
8a:6c:15:54:6a:72:78:a8:33:b8:4f:b0:71:9e:6d:
9c:4b:af:ba:5b:8b:13:e4:ff:ef:b1:c0:ee:65:0b:
3a:3e:1c:43:69:52:a5:b2:a3:78:04:ce:61:64:26:
66:74:24:73:b8:b9:f6:81:dc:36:53:ff:d2:58:58:
c3:e2:1f:68:95:e6:67:23:89:13:ed:ce:9a:d3:66:
f4:6c:7d:e4:7d:ae:fb:a8:54:c1:0a:96:0d:62:b9:
58:a5:cd:d4:b3:3d:db:92:93:34:44:b8:a5:f9:78:
be:96:77:1f:1a:9e:36:e5:9e:05:fe:03:fc:27:d3:
ae:d2:3c:09:80:24:ba:8a:45:31:19:53:71:73:9b:
35:31:38:a7:4a:df:5d:f9:eb:d5:97:9d:3d:f4:79:
17:be:bd:24:16:be:58:62:50:9a:b1:05:d2:65:e0:
ac:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3C:60:A3:02:89:C6:59:DA:01:C8:96:94:48:01:A3:B7:E3:5D:EE
X509v3 Authority Key Identifier:
keyid:C9:83:EE:3D:51:C6:A2:3C:99:09:A7:09:8B:86:78:D5:C8:DF:EC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYPuPVHGojyZCacJi4Z41cjf7O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/yYPuPVHGojyZCacJi4Z41cjf7O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/yYPuPVHGojyZCacJi4Z41cjf7O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7b:84:fc:8b:66:b6:49:1a:93:d6:83:bb:6f:8b:2c:61:59:
a7:c9:c3:2f:12:67:34:ef:bf:c7:71:76:43:15:fe:36:e5:bd:
84:13:f8:01:a8:3d:99:49:bb:af:f4:83:3d:87:af:6b:79:c6:
8d:d2:28:b1:44:d9:f6:23:b7:88:41:4b:e6:fa:d4:62:f0:31:
4b:7d:72:57:05:0a:ba:da:f1:2f:07:50:09:e1:64:76:3d:b2:
49:9a:d1:8f:f6:33:ad:f4:fd:cc:0a:a2:09:41:30:30:d0:32:
54:bd:33:ca:6d:28:96:21:0a:ef:30:82:a4:01:66:dd:3b:0d:
fe:34:24:b1:cc:5e:57:1a:c7:e1:aa:3d:03:3b:ff:2d:90:d8:
25:bf:50:64:2f:f6:9c:6a:04:81:7f:39:a1:2a:59:a2:e6:2d:
4e:ea:19:47:30:74:37:b1:ea:10:62:b6:41:57:a6:0c:b7:56:
bc:8a:12:a8:57:91:ed:5c:97:16:9a:94:39:a6:3b:69:b3:c7:
9f:93:8f:2e:96:1e:4b:da:da:cc:7e:2d:cc:16:73:b1:ea:8d:
a1:61:2d:94:37:07:76:a0:2c:1d:db:b5:e5:ae:f3:54:d3:fa:
9a:51:26:a9:0c:c2:e1:bd:cd:8b:4f:8a:dc:aa:ab:4c:39:fa:
0b:7e:f7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:47:05 2026 by rpki-client