Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: X/12HPtyAo0F03CY7p+vXeNwx+WW5bEXbs4l0/BcKTo=
Subject key identifier: EE:9E:F9:DD:7A:63:AA:44:75:4C:28:AC:45:DF:F5:56:D2:45:DC:57
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 01A0C9D8AC1DEA6DA38016EC63C8CA99B1EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 16:00:15 +0000
Manifest this update: Tue 22 Sep 2026 16:00:15 +0000
Manifest next update: Wed 23 Sep 2026 16:00:15 +0000
Files and hashes: 1: 6C5H6weklOvyIUmH6upyoLS9Fjk.roa (hash: 4tDaLUdULnIJjiPlfBjB5U5pwdeJP/TF6DH4C/OJMZ4=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: jQ0RkSpoQk3jk/BASVOIqmteXusd8EESnwq5g1f49NA=)
3: uTaIFz1uKDcuAGI72zb9cgQJSDU.roa (hash: /chT2KHjwm4Z4cMac2BTFt3alYJEDlnfPwAVuuzxgMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:ac:1d:ea:6d:a3:80:16:ec:63:c8:ca:99:b1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Sep 22 16:00:15 2026 GMT
Not After : Sep 23 16:00:15 2026 GMT
Subject: CN=ee9ef9dd7a63aa44754c28ac45dff556d245dc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e2:8a:51:7e:e0:45:4d:e0:fe:9a:79:16:e8:
69:71:e5:ca:26:37:48:bd:97:1d:ab:8a:9d:aa:32:
a6:e6:46:ac:af:43:11:1d:45:07:17:3c:b0:11:a1:
b4:7b:2e:06:fc:b2:db:73:ca:2f:a4:ca:5c:21:7b:
6c:82:25:6f:08:2e:5d:33:99:9b:81:38:f8:b5:06:
bc:15:1e:94:05:6d:5c:f8:de:cf:98:e4:58:3e:58:
75:60:98:32:a1:1e:16:db:ec:af:49:e2:58:b8:3c:
6c:78:06:c0:a3:b1:d2:e3:f8:57:1a:a0:1d:3f:db:
4d:ab:6a:18:1c:a6:66:fe:f8:96:c4:f6:27:57:79:
7a:ba:be:e0:c2:1f:46:1c:a6:b8:aa:c1:e3:19:65:
92:a5:01:c4:b7:35:a0:7d:51:1a:e5:90:15:4d:90:
2d:67:bb:9c:11:3b:f1:18:13:64:32:d7:34:ac:0f:
2d:08:27:bc:40:14:47:6a:5f:20:0d:f6:e0:b0:22:
08:2a:4c:9f:7a:b7:e9:25:75:b3:04:0d:c3:9b:2f:
6c:db:d4:0f:1e:3a:61:ef:bc:a8:8c:13:2b:b1:9e:
fd:aa:bf:ad:ba:d7:1d:ba:8b:30:a5:79:41:1e:00:
94:32:c9:69:69:13:0b:e8:68:d5:24:43:18:91:ea:
ca:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9E:F9:DD:7A:63:AA:44:75:4C:28:AC:45:DF:F5:56:D2:45:DC:57
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:90:7e:0b:4f:da:6f:12:cf:e3:0c:f3:d3:ef:f3:33:a5:ab:
40:b8:cc:3a:03:4b:ba:e9:4b:8a:cb:69:95:6a:1e:f0:53:01:
8a:3c:6f:55:0a:ec:5b:b9:dc:90:33:d9:3d:84:44:78:e9:0a:
a3:36:56:1a:39:d7:c5:00:30:fa:e9:fb:c1:5a:ef:38:af:50:
a8:a7:ca:a5:dd:8a:d9:f8:f9:e6:3c:b9:33:f8:65:fe:35:3b:
6e:40:17:b5:72:d2:73:9d:3a:f7:9a:19:cb:36:3b:33:30:13:
0f:47:fc:46:9c:47:2a:ed:8a:c6:ac:d4:1a:4b:f3:86:26:bc:
02:0e:d0:dd:db:b6:b3:cf:78:0e:99:63:be:79:8e:d3:ea:f2:
cd:b3:e8:86:c1:1e:c1:ca:37:c4:8b:f2:65:26:2d:0f:4f:c9:
c8:27:b2:8b:ab:06:d1:68:e3:57:22:4f:22:96:b9:27:86:fa:
5a:6e:98:5a:6e:9f:13:fa:c9:71:dc:45:94:11:cb:5e:8d:b9:
57:5c:69:b4:7f:b8:9c:9f:6c:20:a2:28:b9:a1:5e:82:cb:e5:
ad:af:6f:6b:dd:21:81:86:c6:87:1f:ef:2c:b9:97:63:2a:54:
33:5e:69:9c:77:e6:fa:8f:f9:dc:8c:5c:f7:ae:a7:bd:df:47:
80:ff:11:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:09:10 2026 by rpki-client