Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: IMKSfJ0kicP9c4nK8T5EBymaby2+okU8ioab2eKMdZg=
Subject key identifier: AC:2D:11:04:81:DC:0D:0F:4B:F7:8C:08:09:F3:6B:8C:08:56:C5:9A
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 01A17694F24BFB58A46E46C2D89EF87E3C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 1AC5
Signing time: Mon 26 Oct 2026 05:00:35 +0000
Manifest this update: Mon 26 Oct 2026 05:00:35 +0000
Manifest next update: Tue 27 Oct 2026 05:00:35 +0000
Files and hashes: 1: 0EGKe0995adtGodwLQUy75fQoGY.roa (hash: jtkoh3ZOntntizZK4rrSnBbPnG8009BC0Rd+xgp9OMI=)
2: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: VknOQ26KTrq8VXvEk5D8z9Of27n303+xCDDrz1nFkNk=)
3: aEsbh_haMhsqIB5wCxd9t5IabFM.roa (hash: Ne5BDRQ7SBRIMJmF2NPdjnl9j7TlWo9N5JJSWBtw7bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:94:f2:4b:fb:58:a4:6e:46:c2:d8:9e:f8:7e:3c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Oct 26 05:00:35 2026 GMT
Not After : Oct 27 05:00:35 2026 GMT
Subject: CN=ac2d110481dc0d0f4bf78c0809f36b8c0856c59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:1f:4a:60:be:ed:2e:51:f5:08:90:e6:fa:
3b:95:94:0d:70:49:d7:c7:dc:8f:b6:ed:04:9c:b9:
76:bc:fa:5d:0e:2d:77:a4:9d:b4:9d:c0:47:05:93:
22:24:d4:a3:0a:a0:7b:b7:06:c3:f0:13:83:8d:ba:
62:86:98:7c:df:4f:70:dc:0f:5b:1e:ad:9e:33:68:
a9:b3:21:4d:f8:54:f3:92:4b:29:e7:54:35:cd:db:
93:3e:6a:d3:4f:32:be:08:ed:37:16:ba:fc:92:e9:
0c:5e:f5:dc:ed:da:26:36:58:28:17:d5:13:6b:d6:
86:a9:7a:16:51:b3:91:4a:62:46:e3:5b:24:53:f9:
2d:5e:68:3e:65:27:81:0d:ca:90:ab:f1:9a:50:5f:
11:12:86:1a:e9:a8:83:1b:ac:b3:ec:bf:e9:a3:18:
d0:38:61:27:1e:67:74:20:71:f8:09:8a:77:34:78:
c6:7c:8e:46:50:43:ee:6b:f8:ea:b1:c0:c8:85:ef:
f6:4b:98:b7:7d:c8:47:5c:db:eb:8c:0f:d7:3c:33:
f9:d8:ec:eb:27:b0:a4:79:88:0c:31:3d:94:dc:92:
2a:8b:b1:5d:d4:37:7b:25:dc:2c:98:52:9d:08:3b:
f5:b4:7c:a8:8e:7c:e5:d9:37:72:f2:82:62:bf:f4:
45:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2D:11:04:81:DC:0D:0F:4B:F7:8C:08:09:F3:6B:8C:08:56:C5:9A
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3a:32:1d:c9:73:08:79:c7:73:6f:bb:76:78:59:4d:fe:ee:
f0:77:5e:e9:12:6e:38:3d:d2:10:4a:9c:c6:27:eb:67:8c:34:
6a:7d:7b:5a:cd:a9:ea:06:2c:42:3c:3b:83:1b:96:81:c8:79:
97:12:b4:ab:13:56:a2:5e:20:2b:2b:b8:40:af:ab:95:88:d4:
fb:3b:dc:4f:7c:4b:df:e3:c9:66:21:7e:c6:86:3e:91:ba:60:
45:e5:68:42:08:46:21:81:0d:a5:c2:74:79:11:a7:d8:03:ea:
cd:59:2c:83:35:6d:f2:26:61:bd:f9:2b:49:2a:8d:45:fc:a7:
b6:3a:8c:ae:9e:73:1a:f6:76:ba:26:22:51:dd:e2:f5:fe:a2:
d1:a9:2f:fa:8d:21:e3:5a:ec:f9:ca:a7:b0:0e:e8:6f:44:23:
57:c2:99:e8:1c:30:d3:63:c0:43:a3:46:98:3d:1a:04:83:63:
91:29:5d:e4:b7:40:fc:61:74:44:92:42:39:fc:21:5d:ed:a2:
9f:64:ac:1b:82:74:36:24:78:30:b9:bf:6b:2e:57:4c:23:24:
e9:c7:28:71:6a:68:31:30:08:0d:09:66:8a:f8:0b:d9:28:84:
48:34:fd:c1:da:0e:22:09:f3:62:e6:e6:86:18:3c:6a:95:6a:
d1:f4:1a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:22:32 2026 by rpki-client