Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
File: YET26nnk4qPgKos47QzTpAWROKw.mft (raw, json)
Hash identifier: x8CSC/iDIRrpDYEHtoefwN0o0wVEhhmiEJROSzCX3YI=
Subject key identifier: E1:CD:1F:34:92:00:19:D6:C8:60:0A:F6:2B:FD:B5:07:0C:9E:4D:2A
Authority key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
Certificate issuer: /CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Certificate serial: 01A0D983CE3B57C0208B3F7B7F43FBD07FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 17:01:28 +0000
Manifest this update: Fri 25 Sep 2026 17:01:28 +0000
Manifest next update: Sat 26 Sep 2026 17:01:28 +0000
Files and hashes: 1: IPSLN6U-mPgMx0jYi_ORZZDwgdQ.roa (hash: 9nBExfSnL3g+4CNDTe8481JrkpEVyvy2139EXebjOIs=)
2: YET26nnk4qPgKos47QzTpAWROKw.crl (hash: 4PwJv3MCJEYPMOOTPAp4UpUU6Vu4KOvzey2EcRR+fk8=)
3: vNHV1DYtOsfUinz5gwCFoBzKiIg.roa (hash: OIxUV31cdJf2l/w+qSDbXSkKEcQlTRfi/zGOENFvc+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:ce:3b:57:c0:20:8b:3f:7b:7f:43:fb:d0:7f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Validity
Not Before: Sep 25 17:01:28 2026 GMT
Not After : Sep 26 17:01:28 2026 GMT
Subject: CN=e1cd1f34920019d6c8600af62bfdb5070c9e4d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:81:63:ef:65:7a:51:89:66:75:b0:1d:77:
31:1f:01:6c:5c:3f:32:1c:96:97:39:27:62:05:c8:
30:cf:32:74:0f:2a:05:bc:09:d1:09:dd:c9:9c:b7:
8f:b7:b6:60:f5:37:78:10:89:a8:4f:76:2a:7e:0e:
e9:09:d4:15:d7:97:a8:e7:5e:d4:15:a1:4e:64:40:
d8:a7:ab:1a:66:a2:b7:4f:7c:65:39:99:ae:4b:51:
ad:d0:06:a8:14:0f:bf:55:c0:b3:cb:f4:49:6f:19:
07:30:93:54:ce:4a:a8:c0:38:36:d5:f4:f2:0e:cf:
c9:ab:ff:62:8d:ba:f4:f2:f8:43:ad:b7:20:69:ef:
35:0c:21:23:0b:48:dc:cc:97:1c:b5:d9:ae:0f:60:
7b:c5:63:5c:87:7e:7e:a1:06:84:52:ca:59:3e:99:
71:ac:c6:2d:e5:69:69:40:f3:98:81:c6:61:13:3f:
cd:3f:b5:47:f3:1a:49:ec:0a:ba:05:6b:8a:63:ca:
05:4b:14:03:e1:0e:ca:4a:c8:d1:e0:c5:75:06:23:
56:d9:83:2d:6f:b3:06:03:6a:98:aa:f4:6d:1b:f2:
07:b9:9a:d4:16:53:7d:38:08:9b:69:07:ba:85:11:
18:9d:51:f7:1b:38:69:0a:62:b0:a1:e9:5f:ef:0b:
b2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CD:1F:34:92:00:19:D6:C8:60:0A:F6:2B:FD:B5:07:0C:9E:4D:2A
X509v3 Authority Key Identifier:
keyid:60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:07:81:d4:8e:6c:36:35:06:6d:72:77:5a:47:18:d2:cd:57:
8c:f2:bf:34:11:3d:4c:c8:be:52:d6:2f:6e:7e:7c:4a:98:f4:
2b:57:ed:2d:c5:36:50:db:be:c9:1f:be:2e:34:1f:f3:12:62:
53:ae:d1:f1:fa:44:19:d3:05:19:c9:01:aa:13:35:10:80:4d:
f4:68:1b:19:05:f7:d6:4a:8c:a6:ab:33:4a:9d:a7:9d:8b:75:
cb:89:79:42:63:6d:b7:83:51:7c:b7:63:9b:1b:52:dc:02:c7:
71:20:d1:c7:8b:8a:ba:04:9d:55:25:96:11:97:b5:ac:9a:58:
2c:21:cc:1d:df:a0:7b:04:2c:52:f6:13:11:c3:ec:51:19:93:
3e:8f:ec:ac:21:a3:82:8a:50:42:07:8b:3f:a2:7e:b3:89:b6:
42:bd:32:4d:24:07:cd:b9:31:0a:77:db:ed:82:d2:09:ad:0a:
8d:cf:81:40:98:7a:05:37:c3:c8:ba:25:c6:ae:69:cd:af:a5:
5a:31:ba:d2:96:6b:81:9b:a5:ba:a9:dd:e9:67:d8:e8:d9:c8:
2e:70:61:fe:de:50:b1:81:04:ee:20:af:00:ec:36:00:c0:58:
8b:23:30:d4:d5:1c:fb:e6:94:c4:3d:a0:b2:25:c6:b8:59:4a:
40:4d:66:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:34:20 2026 by rpki-client