Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
File: YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json)
Hash identifier: 8mrKrgT1S6YhopYHfcS5ewXZlR1Mg3otMjCTFjhfK9M=
Subject key identifier: 16:0B:9C:89:B8:55:64:6F:1A:8D:15:5A:37:32:4A:67:92:FA:23:00
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 01A0C031B864E162A53E945A700709E689C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
Manifest number: 14CA
Signing time: Sun 20 Sep 2026 19:01:18 +0000
Manifest this update: Sun 20 Sep 2026 19:01:18 +0000
Manifest next update: Mon 21 Sep 2026 19:01:18 +0000
Files and hashes: 1: OmKYv-eBNTYluusfNr4dZe7zC_c.roa (hash: w1Hd7iJpZYHQEo80iQwx2qNAI2ou5wncgHu/GLia0Tg=)
2: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: 4kAoWy3GPZvMoDU6lNTof+D6YfoP0gATknMDcIQfiME=)
3: l-QyBKePUGvgwvLYQ39xVIrG-Xc.roa (hash: BEyQW94VrHgV1DUmSXCji9F0XD6RgtTzxouMSqJBF3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:31:b8:64:e1:62:a5:3e:94:5a:70:07:09:e6:89:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Sep 20 19:01:18 2026 GMT
Not After : Sep 21 19:01:18 2026 GMT
Subject: CN=160b9c89b855646f1a8d155a37324a6792fa2300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8c:e5:9d:58:76:40:71:26:07:f1:54:96:76:
71:b7:b2:4b:32:84:65:1a:cf:c7:71:aa:23:70:29:
80:a7:bb:bc:41:aa:d8:55:15:0c:95:bc:6d:03:c8:
5a:50:94:5f:3d:8e:54:b2:67:ca:f4:b6:af:e8:29:
12:c8:3f:3a:5c:4e:dc:1f:fd:2e:74:39:9c:dd:06:
6b:a3:30:51:62:c4:05:80:ac:21:83:05:94:b4:ba:
53:2e:2f:80:a2:4e:a8:b3:17:40:1f:0d:e6:86:7c:
63:3e:f2:54:53:ea:86:23:3e:d0:31:11:59:bb:e7:
24:f6:b0:c9:9c:ab:9c:2b:f3:90:e5:47:ab:2c:01:
35:5d:01:ab:55:bf:76:3c:95:a8:ee:25:92:7c:4e:
3b:bd:05:e7:49:40:55:5a:53:7c:75:81:50:f5:ea:
35:0e:86:90:72:a7:7c:a4:f6:3f:88:86:2a:02:8b:
6c:ae:a6:9e:82:d7:b9:0d:8a:5f:06:8a:45:2c:69:
c8:b1:80:a8:c0:2f:60:cb:f0:04:b4:e4:23:6b:cd:
84:78:24:91:d2:2c:9c:99:77:71:e5:cc:05:03:27:
45:0a:8e:28:52:28:92:cd:51:5a:a4:fb:d6:fd:69:
f9:20:c8:d9:b3:8f:75:1b:d2:44:68:bf:44:50:1d:
78:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0B:9C:89:B8:55:64:6F:1A:8D:15:5A:37:32:4A:67:92:FA:23:00
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:17:49:d8:b5:f3:9b:70:72:7a:dd:48:14:ab:df:cf:a1:fc:
89:2b:c2:64:d5:54:29:ea:d3:db:a5:34:fe:4d:58:58:70:ee:
00:62:1f:40:5e:c8:91:f2:d7:70:41:8e:de:d1:7e:13:19:69:
fc:d5:45:78:ea:ca:ff:74:73:eb:c8:e3:1d:14:1d:dc:72:55:
eb:b4:c6:73:ab:f7:66:d0:2b:80:17:69:30:f3:86:7b:4d:d7:
a2:8c:5d:40:04:22:7c:ce:6a:c8:bb:e3:08:30:67:b6:fa:d4:
a3:22:7f:7d:6d:16:5f:0a:d9:8b:11:f8:d8:32:29:f3:f9:83:
5d:f7:b9:dc:07:a8:93:ab:08:13:81:0e:a2:eb:06:fa:c6:9a:
06:72:50:07:79:fc:45:a5:15:ea:8e:bd:1d:de:34:ce:9c:ee:
65:ff:32:7d:d3:af:20:66:73:5c:b4:fc:86:e1:6e:cc:c0:6c:
cf:46:da:7a:eb:ea:0d:bc:45:58:1a:fa:c2:dc:9c:cc:d1:a9:
e9:0e:18:f8:69:77:96:b2:c2:8c:62:c2:6d:19:39:fc:dc:1b:
0e:ae:08:6b:6e:9b:70:32:d9:ee:ed:67:0a:15:61:2f:8e:12:
f6:ea:2f:b3:ad:a6:fe:a1:0d:ed:a7:b3:fb:46:4a:99:1c:a6:
6f:c0:27:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:17:43 2026 by rpki-client