Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
File: YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft (raw, json)
Hash identifier: 0Xm+LooA36u0qsO1hpg+ZnRsfYT5zeea296qp3rlK8Y=
Subject key identifier: 31:C7:10:F7:60:A8:18:78:A3:9A:94:DA:49:00:91:75:85:F7:6F:69
Authority key identifier: 61:F5:FB:83:DA:45:58:46:EA:64:1A:A7:21:11:C5:FC:2C:7C:46:83
Certificate issuer: /CN=61f5fb83da455846ea641aa72111c5fc2c7c4683
Certificate serial: 01A0D0B732FD4ED77961D29C70934F91E0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
Manifest number: 0130
Signing time: Thu 24 Sep 2026 00:01:01 +0000
Manifest this update: Thu 24 Sep 2026 00:01:01 +0000
Manifest next update: Fri 25 Sep 2026 00:01:01 +0000
Files and hashes: 1: YfX7g9pFWEbqZBqnIRHF_Cx8RoM.crl (hash: Lb0c1Wh04sN2xK3UgEUVxVJcWsnmu2K30pIMXXna2FY=)
2: r4vw3CV_1lGW-7JvXgWzIRjbm3U.roa (hash: 0TvJ5qpmjC4SexSyQHzjCW5fHWTpVt06kKMKKnnsoV0=)
3: w-zL9cm1eAuLHEkbGACu_Uty4Ws.roa (hash: 4C8sJjkhX9FkHPcP/da4C31h5T/IA24CkXSEegBHM68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b7:32:fd:4e:d7:79:61:d2:9c:70:93:4f:91:e0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f5fb83da455846ea641aa72111c5fc2c7c4683
Validity
Not Before: Sep 24 00:01:01 2026 GMT
Not After : Sep 25 00:01:01 2026 GMT
Subject: CN=31c710f760a81878a39a94da4900917585f76f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f9:08:cf:30:3f:bc:b5:e1:ba:48:a7:d7:ad:
c2:d9:fe:fc:b6:e1:f9:a9:b8:a6:7e:1f:74:a9:67:
f3:59:09:6d:2b:e5:c2:b9:39:74:a7:de:a7:3a:50:
de:1d:fb:ac:b6:1d:06:6e:14:fa:77:35:1b:3e:a9:
5b:80:c9:2c:fe:46:34:e5:69:aa:8b:3b:38:eb:aa:
24:b3:d9:e2:3c:80:a9:18:65:84:99:a3:ff:13:1d:
77:fe:42:f5:17:69:2a:bb:11:fc:25:c3:92:6e:04:
71:fc:93:3c:e3:02:b4:90:03:ec:5a:1e:d6:58:07:
c9:4d:f6:71:b3:ea:d2:ba:28:77:25:b4:40:9e:4b:
33:d9:05:09:1e:4f:85:61:76:55:47:a3:43:69:f0:
6f:53:8f:ec:df:07:b1:ed:8b:78:4e:e3:53:ec:73:
ac:b7:0a:bc:af:fe:bf:79:5f:bf:03:67:ce:50:b8:
23:44:51:5f:e1:8e:6e:e6:59:84:f6:8f:d2:b8:da:
e8:6c:c8:b7:26:e8:48:61:8a:05:61:ee:e7:96:9f:
1e:0d:71:84:e0:59:33:50:26:be:77:1a:73:76:1a:
df:1b:66:3d:7c:35:cd:e4:4b:b6:6c:37:b3:83:2f:
92:ba:79:e0:0f:79:aa:d2:92:90:79:30:24:15:5f:
a5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C7:10:F7:60:A8:18:78:A3:9A:94:DA:49:00:91:75:85:F7:6F:69
X509v3 Authority Key Identifier:
keyid:61:F5:FB:83:DA:45:58:46:EA:64:1A:A7:21:11:C5:FC:2C:7C:46:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1f:ea:5b:3b:97:ee:72:38:74:74:9d:d2:b5:78:56:58:33:
1d:85:49:9d:aa:19:b4:6e:f7:3c:f9:d5:99:4a:2a:a6:78:6c:
5b:2d:79:d6:7c:6c:4f:e7:b9:dc:18:e1:3e:a0:bd:f6:2e:23:
1d:0e:bd:db:62:fb:1b:09:df:fd:16:79:93:98:1d:13:d8:c3:
0e:ca:0c:67:a5:aa:f6:b5:57:f6:e3:1d:d3:85:c3:73:22:30:
cc:45:a5:e1:e6:fb:1c:05:5e:83:69:e1:a8:f0:14:21:fb:3c:
48:15:92:6e:d0:d8:e3:13:d7:c2:c1:a7:f1:03:6b:82:03:1f:
7c:fc:37:57:5d:3a:c7:0f:d3:66:47:51:cc:f1:0f:3d:ca:f1:
3a:2d:7d:0f:28:87:21:b7:a6:78:e0:5d:a4:96:d4:e2:19:f6:
b6:45:d5:b4:95:52:f6:84:3f:03:f1:02:55:2d:3b:2e:4e:40:
d9:83:9b:e5:16:09:2a:d8:d5:ab:fe:81:dc:d4:eb:10:d1:ba:
a7:fe:25:cc:a0:01:db:67:94:aa:e8:59:ea:e1:52:99:49:d4:
8f:81:8a:56:20:25:99:28:95:61:9f:89:6d:fc:10:55:c1:a4:
83:4e:4b:88:6b:2a:14:ff:cb:bc:b2:a8:8a:55:b1:d2:e0:01:
ea:e8:b7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:52:13 2026 by rpki-client