Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/1326da-0994-4eaa-83c9-05a01582b9ca/1/1YMmDGbhIphKfAy7RDwS0iv2_pU.mft
File: 1YMmDGbhIphKfAy7RDwS0iv2_pU.mft (raw, json)
Hash identifier: NlXJV8nzx+c4mXuTMMv+xRDrTA94Jhn2hlCN2a+4oN8=
Subject key identifier: 6B:22:3F:F1:80:E5:84:0F:DD:FB:A7:5E:BF:CC:41:4C:72:D8:DF:E4
Authority key identifier: D5:83:26:0C:66:E1:22:98:4A:7C:0C:BB:44:3C:12:D2:2B:F6:FE:95
Certificate issuer: /CN=d583260c66e122984a7c0cbb443c12d22bf6fe95
Certificate serial: 01A0C8215AC30A4C0672D1F4F4359F181DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YMmDGbhIphKfAy7RDwS0iv2_pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1326da-0994-4eaa-83c9-05a01582b9ca/1/1YMmDGbhIphKfAy7RDwS0iv2_pU.mft
Manifest number: 0C
Signing time: Tue 22 Sep 2026 08:00:24 +0000
Manifest this update: Tue 22 Sep 2026 08:00:24 +0000
Manifest next update: Wed 23 Sep 2026 08:00:24 +0000
Files and hashes: 1: 1YMmDGbhIphKfAy7RDwS0iv2_pU.crl (hash: pcCWjwgGyIhZbFzmgu+gP5sOqaobu35/KzYIFtenCYI=)
2: wtv5JlsouerZ9mKF0DSWEKwQb2A.asa (hash: G3PiXJBr8Bpr8DEk3v6Lnn84qnwslGloPpsFmCCklQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1326da-0994-4eaa-83c9-05a01582b9ca/1/1YMmDGbhIphKfAy7RDwS0iv2_pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1326da-0994-4eaa-83c9-05a01582b9ca/1/1YMmDGbhIphKfAy7RDwS0iv2_pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YMmDGbhIphKfAy7RDwS0iv2_pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:5a:c3:0a:4c:06:72:d1:f4:f4:35:9f:18:1d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d583260c66e122984a7c0cbb443c12d22bf6fe95
Validity
Not Before: Sep 22 08:00:24 2026 GMT
Not After : Sep 23 08:00:24 2026 GMT
Subject: CN=6b223ff180e5840fddfba75ebfcc414c72d8dfe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a1:9c:c5:5d:c0:2b:da:32:d0:ae:90:f4:f2:
ef:a6:27:fe:02:c2:c4:d2:8b:e5:9d:78:9f:98:71:
20:f1:bc:31:97:dc:22:07:9f:90:48:27:83:95:5e:
66:de:12:b1:70:5e:89:f7:9d:bc:af:e2:f1:ae:dc:
3d:62:98:f1:8d:8b:ac:12:43:80:57:84:56:d4:e2:
7f:9b:34:be:71:cd:c0:66:06:3c:de:25:93:7c:81:
a9:87:2e:91:8c:de:d5:2c:52:34:65:dc:78:70:72:
ef:92:9e:09:a7:8f:15:33:d2:79:fa:f2:66:51:94:
97:2d:79:d2:79:2b:d5:1b:41:f2:11:7a:5f:56:ea:
a9:42:fc:d0:94:ee:cb:a0:e9:4e:a0:5a:de:76:92:
6b:7a:84:b5:38:7d:d8:25:ae:ac:8f:64:a6:b3:9a:
ba:4b:e8:05:3a:71:ee:ed:c1:39:55:cc:12:2d:fa:
39:4c:be:ed:eb:f7:20:1e:e1:4b:54:11:1e:19:82:
e2:ec:cc:5d:4d:98:07:e4:2d:d7:36:ac:e6:47:c4:
de:51:9d:f3:c3:6b:55:48:65:c6:9e:a3:71:55:1e:
0c:92:49:e8:be:c3:43:26:61:28:24:14:19:57:94:
e8:58:a9:97:34:59:aa:35:51:f5:e3:62:70:5c:3f:
b2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:22:3F:F1:80:E5:84:0F:DD:FB:A7:5E:BF:CC:41:4C:72:D8:DF:E4
X509v3 Authority Key Identifier:
keyid:D5:83:26:0C:66:E1:22:98:4A:7C:0C:BB:44:3C:12:D2:2B:F6:FE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YMmDGbhIphKfAy7RDwS0iv2_pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1326da-0994-4eaa-83c9-05a01582b9ca/1/1YMmDGbhIphKfAy7RDwS0iv2_pU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1326da-0994-4eaa-83c9-05a01582b9ca/1/1YMmDGbhIphKfAy7RDwS0iv2_pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:2e:ab:b1:80:c4:87:e7:4b:24:c4:29:18:ac:a9:e9:e6:94:
43:e8:e0:cc:17:40:f8:be:91:8c:ba:52:46:66:98:d5:73:13:
cc:df:9e:6d:40:46:6a:db:00:60:db:a5:47:fc:4a:17:16:da:
20:ad:ae:c0:3e:68:80:04:b3:a1:a3:dd:af:d8:82:45:af:f8:
a7:a5:54:57:3a:71:f2:5f:9e:80:e5:e1:b2:be:99:69:5f:ac:
fc:83:66:e6:59:d7:ec:62:6a:e5:c4:8a:a1:f8:8f:49:4e:b5:
89:fc:36:75:47:1b:00:c1:10:67:ca:bc:9d:7e:2c:37:96:f5:
ae:8c:ce:89:76:38:43:a6:9d:2d:1b:17:7b:6f:0f:e2:b3:7d:
33:5d:af:64:15:25:e1:6f:c6:28:4d:15:b2:98:67:c1:9c:5d:
d3:1a:f9:5d:fb:1e:17:90:2f:34:2e:37:0f:4b:42:95:2e:f4:
3b:a1:2f:2e:67:26:16:f2:a0:b2:50:d3:2e:a9:62:fb:f5:5d:
49:75:2c:03:c2:0b:f6:9d:9e:29:85:8a:7d:b8:b7:60:a9:76:
14:fa:16:3e:a2:00:70:b9:d7:14:66:1a:3e:d4:3d:80:85:83:
f8:a8:e3:6a:d9:a5:b8:68:04:e7:c6:7a:7c:98:17:70:bc:f5:
de:e7:b1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:53:16 2026 by rpki-client