Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: HvI8ByvAevl6sqPanviCdDaL/fDBzw2tZt79hXTnPCM=
Subject key identifier: E0:F9:B2:6E:CA:58:02:B6:14:7A:06:E1:74:49:F4:36:94:F3:C5:1A
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 01A185D171B96BC114E1FA6BBB0AD23E947B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 12C5
Signing time: Thu 29 Oct 2026 04:00:58 +0000
Manifest this update: Thu 29 Oct 2026 04:00:58 +0000
Manifest next update: Fri 30 Oct 2026 04:00:58 +0000
Files and hashes: 1: 3ExD7nKcCYNGR68ATw2vAixFfPw.roa (hash: PRfZSceh3jh1FTBUXpKPdAPCRhio/qZFjdbYjEajKSY=)
2: EyM4wivbpkVOKedhB97D1lcXuLE.roa (hash: ztSlxeB82WQ5Ip3+c+gguWX+u1grG8UgGeYQslXQHlM=)
3: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: 5gc1BEX0VOkRnaeXmoFbCe8R3ZtcMj/t/MXV2J3ag5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:d1:71:b9:6b:c1:14:e1:fa:6b:bb:0a:d2:3e:94:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Oct 29 04:00:58 2026 GMT
Not After : Oct 30 04:00:58 2026 GMT
Subject: CN=e0f9b26eca5802b6147a06e17449f43694f3c51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d8:91:b4:3a:b5:df:84:2f:de:2a:32:f3:ca:
c4:a3:06:50:d2:6a:4d:6d:56:a8:93:50:c6:7d:c8:
2b:ab:bd:3b:53:31:b6:87:5a:e3:3e:b9:26:6d:f6:
a7:99:6f:ae:69:83:93:3d:a8:28:c9:45:a7:2c:b1:
d2:7b:35:3d:eb:70:1d:a6:6a:8a:90:c1:2c:b8:22:
74:23:3b:ee:e4:48:a1:ff:ed:20:22:d3:a5:4b:57:
53:2f:ee:c2:f9:a5:75:0b:81:f3:a4:5f:25:4c:c9:
7a:bd:b5:85:22:11:8b:1e:93:21:40:55:e3:b7:52:
bb:4d:91:e0:19:75:06:a3:1b:65:2a:29:10:13:36:
05:a7:0f:a4:fc:04:7c:ab:e1:49:5a:6b:39:55:e1:
0b:92:e6:b2:54:e9:ee:7b:1e:21:7f:96:f8:46:3b:
5f:9b:f8:f3:65:e1:75:37:95:f3:48:7f:df:6f:bb:
53:25:6c:ec:86:b2:71:f4:8b:75:66:1a:c7:ed:7f:
2b:e9:0e:26:ab:52:fa:e9:f1:57:01:df:eb:1a:f8:
b6:4e:7e:18:6c:da:68:53:9c:22:53:e3:c1:73:a3:
c6:27:05:96:d0:2a:f0:4c:91:f3:e3:be:0f:71:12:
82:47:09:fa:29:f3:3f:52:71:44:8e:5e:3c:02:2c:
19:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F9:B2:6E:CA:58:02:B6:14:7A:06:E1:74:49:F4:36:94:F3:C5:1A
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2a:48:4a:ef:61:8d:6f:b3:28:eb:15:d1:e0:5f:9f:fa:7b:
02:4e:0a:8e:2d:aa:fc:47:a4:53:ce:96:f3:6e:a5:04:27:97:
9b:57:ea:2a:3b:5f:00:17:e0:cf:1f:e4:a7:28:0f:8f:54:42:
72:56:04:89:d1:44:49:dd:0c:17:f5:f4:31:09:99:1f:df:2a:
9d:6b:2d:7e:f0:8c:12:2d:cd:b6:25:b6:68:74:2e:f2:d9:a3:
63:9b:b8:62:26:ad:fc:15:00:30:20:6d:85:31:a8:c2:b2:30:
fa:08:9b:2a:36:22:fd:a7:42:54:08:59:7a:a9:6e:14:4b:66:
f5:38:43:51:9d:84:e1:ba:7a:1a:c3:8e:b0:a8:42:8e:06:d1:
fa:f5:68:2b:df:34:44:da:f2:3b:d4:7a:a6:59:64:1c:c7:7f:
68:25:7b:80:1e:f7:59:47:ee:75:58:f9:f3:e8:09:85:a5:8e:
75:95:49:c3:b2:60:c5:b0:62:14:c9:f5:40:02:fb:b8:86:66:
ab:bb:b5:cd:bb:2c:94:c8:7b:47:7d:01:d5:e1:cf:6e:dc:0d:
23:f7:7d:e3:80:f6:44:0a:55:58:4a:d2:e4:be:2b:97:62:a3:
f4:ef:9c:51:1d:ed:b0:2a:5a:9f:68:45:ea:9b:f1:d8:63:0b:
6a:63:51:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:41:42 2026 by rpki-client