Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json)
Hash identifier: ifUpuHawwbAPFVgOXwm6yjV4FZ3yJZ7VJaiuR4IGLQo=
Subject key identifier: 40:5A:88:CF:16:26:54:F3:6A:2E:4E:9D:DA:9A:21:EF:01:9D:70:9A
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 01A0D048DAB2A48030B7A30D178CB0C2585B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
Manifest number: 09BF
Signing time: Wed 23 Sep 2026 22:00:30 +0000
Manifest this update: Wed 23 Sep 2026 22:00:30 +0000
Manifest next update: Thu 24 Sep 2026 22:00:30 +0000
Files and hashes: 1: Ewfu9z930MhyPX8313muaLXe2oM.roa (hash: xaNiT68XuLXKua+vW1yOiyZ2EeD/WOwvk5iab3yyEqE=)
2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: KMJwP1L6C4cxTOwU8ZxhD3junC/04n2SkovlVTJ5YaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:da:b2:a4:80:30:b7:a3:0d:17:8c:b0:c2:58:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Sep 23 22:00:30 2026 GMT
Not After : Sep 24 22:00:30 2026 GMT
Subject: CN=405a88cf162654f36a2e4e9dda9a21ef019d709a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:d7:a5:83:0d:fc:23:4f:88:d5:e3:02:d3:
d3:cf:6a:91:8d:56:70:6d:14:fd:46:12:b7:f6:82:
90:ed:da:cb:bb:b0:e4:9c:1e:3b:2a:94:5f:81:9f:
e1:7c:0b:fc:28:29:84:a3:43:33:9a:e9:1c:74:06:
3a:54:08:f7:bb:77:4c:fc:5d:f4:d5:49:83:88:d1:
d9:44:ec:3c:19:a6:a8:86:3c:ce:dc:3a:74:68:ad:
8c:66:95:16:6c:31:46:49:48:82:73:30:ec:19:6d:
5a:9f:94:4f:13:63:d9:e7:3f:97:0e:93:5b:0f:d0:
b0:e0:d7:6e:e5:99:53:63:b2:f5:b3:f0:4f:fd:2d:
eb:fa:36:71:67:08:5c:c6:c9:8d:1b:95:ff:17:8a:
fe:d0:3c:c2:3b:2e:d0:b3:b2:ba:1e:f5:89:1f:f9:
1e:52:e1:d8:19:bd:3a:7c:02:a4:8f:36:ad:91:d4:
ea:b3:ef:ee:a2:dd:02:bf:3e:e7:c6:e0:c6:a0:21:
7e:a5:be:fe:8f:fe:33:b8:dd:d7:27:2b:9d:b9:72:
ce:30:a7:98:ad:e7:60:c2:ea:21:d2:32:3b:ed:3e:
a5:0d:2a:b2:c2:bc:05:ca:9d:02:35:8a:e8:d7:36:
b4:40:38:f4:b9:80:8c:eb:97:db:07:29:3a:7e:d7:
37:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5A:88:CF:16:26:54:F3:6A:2E:4E:9D:DA:9A:21:EF:01:9D:70:9A
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:cc:87:01:af:8c:59:b2:92:65:6e:e6:40:db:42:7d:12:31:
53:5e:7c:09:e1:fb:68:10:79:5d:0f:0f:18:71:20:e5:95:8f:
be:5c:37:af:03:9e:8f:85:a9:12:ff:d3:01:35:2a:84:ca:a7:
19:bb:1f:65:9b:e0:4a:2c:5b:99:2f:2d:e4:0b:21:de:4b:d0:
79:38:23:fe:2e:fc:77:dd:6b:9f:c6:ac:78:68:67:02:c1:e0:
50:af:51:b5:18:c5:1d:98:47:1f:89:2e:81:63:18:a6:54:0a:
9a:05:ef:ea:5b:28:6f:ac:ab:a9:e6:07:4b:64:07:19:8f:16:
86:42:41:58:f8:da:0d:d1:72:75:a0:fd:11:f0:a3:6e:8c:cf:
41:d7:df:dd:e2:0b:59:94:c1:52:62:40:51:66:2c:34:91:8c:
12:7a:5f:14:45:c5:30:21:9b:f1:79:b6:b3:63:dc:f5:57:85:
c7:23:92:cd:fa:bb:f8:ac:8c:78:6b:4d:61:27:a5:9c:bc:77:
70:61:00:df:a9:64:92:31:e1:b0:3d:61:99:20:da:42:33:0e:
56:55:a1:38:70:cc:ca:b5:fc:96:1b:87:e2:c5:9c:c8:e5:79:
9a:d6:d4:33:4c:7f:e5:72:b7:83:a0:e7:5e:25:77:55:a3:33:
d3:68:a7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:45:10 2026 by rpki-client