Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
File: YTdPxOqwDUHB7uR_37ABB4x0-oU.mft (raw, json)
Hash identifier: kVT1Fape1Jd2fnt971JFkP/k1c5xtuQd8Kix0AlkdNk=
Subject key identifier: CC:BA:F6:44:2C:6E:D1:00:C3:9D:F8:B5:41:1E:1A:4C:DC:1B:06:7B
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Certificate issuer: /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial: 01A0D0125B32FB208E82695A6A3B5CD6C5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
Manifest number: 09BB
Signing time: Wed 23 Sep 2026 21:00:58 +0000
Manifest this update: Wed 23 Sep 2026 21:00:58 +0000
Manifest next update: Thu 24 Sep 2026 21:00:58 +0000
Files and hashes: 1: HT5OhOqJdYdBbXBwQ3VQ1GpVIFs.roa (hash: u6C6SIGOiLQCTdX2uMjNGg6NhfkwgvQOTMzRPzekqCs=)
2: YTdPxOqwDUHB7uR_37ABB4x0-oU.crl (hash: /CNoqsi5/SlSPvSuwmvzkGi5CYoeWPBjCA0+Yu5fh8w=)
3: fdeG7TbijoItYpXy1D7uc-AVK8Y.roa (hash: nS+LEhm0a6oObGQ8VDam0gU4Ac1dG0xV5Lvd6Flgfv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:5b:32:fb:20:8e:82:69:5a:6a:3b:5c:d6:c5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Validity
Not Before: Sep 23 21:00:58 2026 GMT
Not After : Sep 24 21:00:58 2026 GMT
Subject: CN=ccbaf6442c6ed100c39df8b5411e1a4cdc1b067b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f2:5e:01:db:90:a1:fd:e3:df:b8:eb:b0:55:
d2:0f:8e:12:db:d3:dc:e5:21:94:30:83:8e:db:39:
74:96:09:91:21:36:6f:96:5f:6e:eb:a0:11:57:cc:
e8:a2:6d:e4:21:6a:77:c1:45:f2:59:d6:59:f8:b2:
33:30:47:0f:14:9a:90:13:cd:87:70:68:30:85:d1:
30:75:89:99:5b:25:02:31:5a:c1:45:45:4f:0c:d4:
1b:5f:8e:1d:1d:5a:fd:a8:d0:47:d1:f3:37:0f:90:
5d:f0:3b:1f:2d:76:4c:96:20:db:23:1c:9b:d6:19:
28:1b:a8:e3:03:f5:a4:ab:a5:84:3d:cd:ff:06:1a:
3f:0d:ed:81:56:db:b2:65:e8:bc:cf:2f:bd:81:21:
8b:06:ec:b5:da:98:31:0f:7c:de:5c:91:2c:4d:d0:
2e:67:4d:88:63:a1:ef:d3:ea:7b:5a:f9:89:74:75:
e9:6f:0b:c9:d2:d9:73:5d:d0:d3:80:18:b0:53:0d:
55:d4:53:85:8e:cf:45:a7:b4:7f:26:7a:93:a1:86:
a2:9b:9e:62:d2:63:a1:4c:bc:5e:d5:41:77:9e:2c:
7f:17:19:a4:77:42:fa:d0:79:a3:a0:63:2a:3b:10:
19:5d:a7:3e:e7:33:77:97:87:eb:de:a2:1b:94:c1:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BA:F6:44:2C:6E:D1:00:C3:9D:F8:B5:41:1E:1A:4C:DC:1B:06:7B
X509v3 Authority Key Identifier:
keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f9:df:ce:4f:72:49:ea:a1:ba:b7:41:8b:25:d0:9d:d9:c1:
cc:d3:71:1a:8a:c0:57:ee:2b:3e:c6:81:3d:06:32:bd:42:f3:
90:aa:da:ca:2f:7b:1c:2f:7b:e3:b1:2a:cb:ca:3b:37:98:f3:
5d:85:e7:21:1e:bc:51:df:29:c2:f5:1f:80:75:f6:24:d8:63:
2b:b1:42:f9:33:81:07:8b:06:91:05:8b:2e:88:1d:91:80:f8:
b5:cc:95:f4:ca:cf:1f:49:24:64:16:9e:da:e4:5d:33:fe:74:
46:8f:02:34:8c:93:c5:72:a7:a0:b3:b2:ac:88:60:8b:b6:2b:
5d:81:63:5a:8c:85:fb:b7:a8:33:ae:f3:b2:89:06:b7:a1:14:
e6:74:a5:ad:e8:0e:91:76:61:a6:32:24:d7:42:96:a6:6d:97:
13:f1:72:4e:34:7c:06:f9:18:fc:24:33:48:e8:1d:aa:6f:e8:
ef:44:1b:41:c4:bf:56:59:17:79:40:54:01:41:e3:a2:bd:96:
6d:d5:8a:7b:59:78:9e:78:93:9a:b8:59:bc:72:d3:48:b7:07:
6d:c3:4f:7d:ce:a6:df:63:31:b7:7f:d4:fe:57:dc:ec:2f:60:
e3:fa:04:44:66:4c:3b:4b:0f:01:ae:61:e8:47:2e:a8:c8:78:
94:eb:85:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:07:58 2026 by rpki-client