Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File: YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier: vaF87mynEBcU57zlYkVmPuIfI3k++isBUjhPiWU+5qc=
Subject key identifier: E5:37:31:3A:8A:57:94:C9:1C:57:17:18:55:EB:89:94:51:BA:B6:05
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer: /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial: 01A0CB90A82DD457AC8E84C82BDF65862BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 00:00:50 +0000
Manifest this update: Wed 23 Sep 2026 00:00:50 +0000
Manifest next update: Thu 24 Sep 2026 00:00:50 +0000
Files and hashes: 1: D8kmbrxGH990IEjHOfCChDR_0RI.roa (hash: av49JGDKCD6wMkJgxe4+rUguaf8/22rVV0DlSQeu/3g=)
2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: 253TkiN1ueXyYwTC595ytRNiVRHnkQKlfe2jY6DCL/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:a8:2d:d4:57:ac:8e:84:c8:2b:df:65:86:2b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
Validity
Not Before: Sep 23 00:00:50 2026 GMT
Not After : Sep 24 00:00:50 2026 GMT
Subject: CN=e537313a8a5794c91c57171855eb899451bab605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f3:16:e8:09:6d:4f:85:8f:7b:ef:6e:32:8a:
2b:35:1e:08:fe:4d:30:a7:7f:5d:56:4c:24:4a:14:
09:36:02:d9:12:f1:ad:90:c2:18:41:fd:5a:a5:51:
c9:75:77:ad:a1:02:58:08:3c:79:69:bf:57:20:a9:
ba:c1:d7:2a:32:ac:1a:4f:a2:99:7f:c8:87:f8:f6:
69:af:30:31:b2:fa:18:37:58:73:90:e6:aa:68:34:
37:4b:dc:e7:95:8a:97:ef:fb:a5:8a:9d:11:e4:0c:
85:b2:b1:4b:ee:88:16:9d:37:0e:5e:ab:b1:01:95:
f4:7d:29:36:97:ff:5a:e5:68:30:02:b7:ca:f3:71:
65:28:40:fb:f6:08:d4:f6:e4:53:e3:60:f7:fa:ea:
b4:23:2d:59:27:91:eb:f5:81:f5:75:fe:24:8f:cc:
e2:08:9f:97:90:aa:e6:31:f8:64:23:ba:fe:2b:e8:
52:8a:24:c8:52:d3:d0:f0:4e:24:f2:11:26:ed:65:
48:07:0f:95:1e:fb:75:e8:15:be:6d:92:1b:22:13:
24:ed:cd:ab:ca:e9:11:0f:63:77:bb:4d:90:34:0d:
fd:f3:3c:63:7a:0b:1d:e8:05:eb:46:b2:5d:67:bf:
8c:50:94:97:6e:aa:fc:d9:23:61:6a:bc:e2:07:02:
49:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:37:31:3A:8A:57:94:C9:1C:57:17:18:55:EB:89:94:51:BA:B6:05
X509v3 Authority Key Identifier:
keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6b:26:ce:85:62:05:aa:53:33:e0:97:66:f3:67:bc:c8:7a:
99:26:e6:31:e3:8e:29:02:d9:82:bb:31:70:05:f3:b1:08:79:
f1:9e:06:3d:97:73:01:0d:a6:8d:37:d9:99:ba:46:3c:97:f2:
63:cd:0f:9a:3c:f2:f9:9a:58:dd:46:15:dc:df:05:81:9d:b5:
eb:d2:7d:24:57:23:9a:ad:52:8d:f4:3d:0c:ef:bf:16:f7:98:
87:20:f9:b7:7f:05:b1:ee:ff:94:7a:8f:7a:1a:5a:fb:94:f9:
cd:62:3a:43:32:00:77:a2:6e:de:9a:8d:4a:bf:a1:75:46:b2:
1b:56:82:38:dc:39:39:f1:fa:91:20:4c:52:22:7f:77:2b:81:
45:46:9b:c0:7c:4b:cb:65:45:0e:1c:e9:12:9c:a1:e4:88:12:
30:c5:92:54:1a:be:a4:76:f1:91:e8:bc:ed:b6:da:61:6c:31:
4c:31:18:8e:fa:ae:a9:87:68:94:5f:ea:4c:a0:4e:6b:6d:98:
d4:8b:c4:66:60:cd:bf:1a:e0:d1:02:dc:bf:bf:a6:88:29:fb:
19:2a:24:86:54:0f:79:b0:65:ad:51:86:e0:7a:7f:80:ec:57:
29:93:fa:f5:36:be:6e:45:32:f2:11:02:5b:5a:7d:4d:b5:fb:
82:c9:f4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:58:35 2026 by rpki-client