Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier: gDuQgRiwfXAqGI0VWVX1NjTba9g1s85fLeG6gjliwBI=
Subject key identifier: C6:49:FC:C2:BC:51:A6:D6:A6:25:A5:73:FC:B3:B5:9C:BE:3D:07:32
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 01A0CF3603AC9E08492BC0D95E5FF7CE8AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number: 0F53
Signing time: Wed 23 Sep 2026 17:00:18 +0000
Manifest this update: Wed 23 Sep 2026 17:00:18 +0000
Manifest next update: Thu 24 Sep 2026 17:00:18 +0000
Files and hashes: 1: 1lPDb-Qc7dgd58_k0ugXvgO36w8.roa (hash: up0wKM+by5cZA7R34zmGPf+ho8Ei16Ys0MiWkd/R1jk=)
2: NbUyaKZBv1RnKePQIxmyxsT9zGw.roa (hash: YfuIIb8IL5a5Ql6qciTZgKEuG43i9WjmWByHoP25V3M=)
3: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: /x6Lpvt9PbY/jmJSbkoEerJ8PJ207PN1rR6ydAXUjkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:03:ac:9e:08:49:2b:c0:d9:5e:5f:f7:ce:8a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: Sep 23 17:00:18 2026 GMT
Not After : Sep 24 17:00:18 2026 GMT
Subject: CN=c649fcc2bc51a6d6a625a573fcb3b59cbe3d0732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:6d:3b:f4:e0:ed:e0:da:e8:bb:b0:32:38:
a1:d7:0a:0d:2f:5a:63:06:18:4f:97:2d:f1:5a:1f:
d2:2b:be:10:9b:2a:2d:79:45:2e:8e:ef:97:a3:3d:
62:bc:24:a4:5a:17:3b:e8:1b:85:fe:97:d5:c8:44:
3d:92:e5:09:da:c9:e4:f6:cf:f4:87:bc:68:34:49:
71:81:1e:b1:88:af:e3:5b:4a:1c:07:fc:1f:5d:90:
91:d4:b0:4a:37:4d:a4:dc:6f:f7:15:14:c4:9f:98:
c6:91:a6:72:11:a1:be:8f:c9:03:e9:2f:1b:6a:d8:
72:1c:8d:65:64:29:23:81:cc:5d:4b:cd:3a:57:f5:
a6:33:06:82:2b:19:a8:fc:32:52:c6:bb:96:ee:61:
47:6d:4c:60:97:c3:cd:88:39:48:d6:0e:65:41:c2:
ef:11:e1:0e:e1:46:16:f3:c7:07:2e:8f:d0:a4:d8:
03:7a:f3:59:3c:25:29:3a:fb:40:9d:d2:da:08:12:
c6:9d:0b:5b:64:c8:51:09:b4:63:51:63:c1:0e:91:
56:30:10:69:c5:d2:d6:bd:21:51:d1:d1:c5:be:16:
49:4d:7f:9e:1b:9e:c0:f3:13:d2:4e:e3:8b:a8:e4:
85:44:98:e5:e9:09:17:a7:89:10:bb:68:ab:42:3a:
e1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:49:FC:C2:BC:51:A6:D6:A6:25:A5:73:FC:B3:B5:9C:BE:3D:07:32
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8e:8e:7c:1d:9e:c5:1c:0e:45:2b:00:67:79:2b:1b:58:cb:
12:80:8f:f3:bc:33:11:c1:bf:12:d5:5a:36:5e:cd:25:29:81:
1f:41:15:f9:cb:b8:f7:d3:60:b4:60:01:a6:12:53:78:ac:0c:
e8:5f:45:6e:4d:c8:80:0d:07:60:56:ae:b9:02:b2:e3:6a:cc:
ee:91:5a:54:fd:4b:ac:7a:36:1a:43:be:51:b8:dc:e6:6b:cc:
c2:d5:ef:98:b8:e4:25:c6:16:07:0e:51:86:cf:b0:40:92:23:
f1:48:68:45:f6:a7:52:b9:f9:d5:0e:d1:d9:f4:ab:b5:67:ff:
d2:09:33:8c:e6:e8:6e:96:bf:9b:bd:5c:ad:aa:1b:73:b5:b7:
df:35:e2:cb:48:31:66:da:a3:d1:80:bc:5b:fe:82:8c:58:20:
e9:e9:7a:8e:e7:8a:6f:6b:f5:d0:90:81:18:14:6d:64:cd:bd:
79:8c:98:13:fd:da:8a:65:9e:cc:b1:2c:b5:6f:98:41:94:5c:
e5:17:38:4a:9d:30:54:68:77:2d:b7:1c:4a:77:69:ca:b0:26:
53:49:98:bd:0e:e6:64:2b:5c:50:b0:7f:fc:b4:40:c7:e3:bc:
8c:a3:ca:64:6a:6d:e7:57:bd:ce:45:95:81:26:26:0c:79:a0:
ba:b9:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:41:40 2026 by rpki-client