Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
File: YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft (raw, json)
Hash identifier: Rnn5ytbbbmveCiTVmG8jhB5MHrL2CEaoYYdIQtB1NK8=
Subject key identifier: 69:48:92:76:47:8C:1E:D5:8F:7B:2B:C5:F3:3C:68:97:5B:21:9A:9F
Authority key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
Certificate issuer: /CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Certificate serial: 01A0E0985FBFD9873AF1CAE956DF24C675C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
Manifest number: 1A74
Signing time: Sun 27 Sep 2026 02:01:17 +0000
Manifest this update: Sun 27 Sep 2026 02:01:17 +0000
Manifest next update: Mon 28 Sep 2026 02:01:17 +0000
Files and hashes: 1: X_VAzsonJf2-Y0J7PUgtiVvr18s.roa (hash: omFujTcefEd3WWyYkvlLAE/INtwxFEvZh0pqgOeoURc=)
2: YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl (hash: gO3axkXZxyjpiynnnMbcH0Rbm7ElrgNCefBRsUgjNSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:5f:bf:d9:87:3a:f1:ca:e9:56:df:24:c6:75:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Validity
Not Before: Sep 27 02:01:17 2026 GMT
Not After : Sep 28 02:01:17 2026 GMT
Subject: CN=69489276478c1ed58f7b2bc5f33c68975b219a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:97:d8:99:58:e3:aa:8a:b4:b7:1d:ec:07:5f:
1e:72:37:36:98:a9:97:e2:c2:2c:f8:c6:87:a1:e6:
f4:bf:67:4d:1f:7e:94:86:0f:30:cb:43:b3:e3:99:
e1:06:c1:86:43:96:81:e4:d9:94:f5:c3:3d:7f:2b:
e8:b2:4d:67:6c:19:5a:61:45:7d:7c:67:25:48:d9:
73:99:24:b1:1a:67:5f:3e:26:80:ee:f8:ab:cd:df:
bd:23:d7:41:8e:6d:5d:a6:66:49:4c:e2:3f:63:7a:
a8:e2:bc:88:58:54:57:f0:ad:89:56:45:7b:51:84:
a8:83:56:2b:5d:b9:55:ed:85:07:83:b3:58:4d:e0:
c7:7a:b6:ec:00:12:1f:74:3a:21:91:cb:80:4f:d0:
ff:1e:04:58:41:00:09:92:05:1c:37:e4:ba:37:81:
a9:2b:2d:52:33:88:b6:88:7b:cd:24:76:5e:67:10:
86:3e:d0:47:99:b6:9f:2d:c1:9d:59:55:e8:f3:b6:
3c:14:83:d4:39:b1:82:33:cb:64:f6:d8:02:2e:17:
28:d0:6f:25:cd:92:c2:49:c8:d0:bb:3a:a0:ce:48:
e5:2e:e1:19:c7:ff:87:b9:65:c8:42:6e:30:86:14:
d9:82:17:83:67:03:a8:d5:a0:8f:e5:07:a0:61:cf:
e5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:48:92:76:47:8C:1E:D5:8F:7B:2B:C5:F3:3C:68:97:5B:21:9A:9F
X509v3 Authority Key Identifier:
keyid:61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:06:aa:d7:75:6f:02:ec:87:87:09:1f:ef:af:5b:4b:f5:00:
7f:db:08:65:7e:c6:26:6f:08:ea:c0:3d:7c:8f:b2:ee:3e:da:
17:9f:f0:11:f4:75:4e:b1:3a:c7:22:2f:0d:db:30:23:7f:b0:
9e:43:7d:47:9e:72:1f:b6:03:7d:ea:3c:d2:d0:7b:1a:9e:51:
ec:6e:5b:9b:62:9f:f3:3f:59:bc:aa:70:9a:f4:7f:16:7e:29:
03:fa:e0:40:48:bc:91:ba:de:6b:69:7e:8c:e4:7d:f0:df:f2:
6d:a8:7f:1b:21:26:cd:1e:c5:46:ea:3d:9b:89:b5:c6:25:79:
e5:cc:b2:9d:33:22:6e:24:ff:0e:a6:1d:3b:db:3b:1e:44:97:
bf:be:10:22:a3:8d:4f:d5:4a:8e:25:bb:83:8d:12:c0:e6:6f:
05:71:ad:f1:f3:b6:4c:49:2a:f4:fd:cf:0c:e6:22:ec:3c:36:
14:45:98:70:45:95:ff:02:71:8d:01:81:7e:ea:0a:14:bf:71:
cd:1f:01:77:09:5a:27:ac:52:9e:6e:9e:bb:9a:4d:b0:2d:68:
2b:d9:42:57:90:e6:7b:92:0b:c0:fc:1e:23:c0:ba:f0:f3:ba:
e1:2e:37:4b:e4:d8:b4:1f:4b:eb:e9:58:c6:fd:f6:b5:46:3a:
c8:33:0a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:13:51 2026 by rpki-client