Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
File: YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json)
Hash identifier: Wm5crWAWuAc5ztbKOt+2g4m7CnwT+8ypAuPqZQQIGAs=
Subject key identifier: D2:EE:2F:6D:B4:6D:D5:02:55:B8:3B:DC:72:05:76:01:E5:D6:2C:E8
Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
Certificate issuer: /CN=61106d2dff7116f35ab7fa10275a45e383bce523
Certificate serial: 01A186E35AC72E6F7DEA4BA9D85F8CA24AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
Manifest number: 199F
Signing time: Thu 29 Oct 2026 09:00:09 +0000
Manifest this update: Thu 29 Oct 2026 09:00:09 +0000
Manifest next update: Fri 30 Oct 2026 09:00:09 +0000
Files and hashes: 1: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: eHSdCboESAzC7Fuh7B8xv2wDABq2CW5fXcJJSjim4mU=)
2: ds0HwgnE1wK4tusqij2iDAo4C4w.roa (hash: AV7GAfjJkTxxVqb/RhgxTIb2SMDdBmXXWKpB5XXq9g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 09:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:e3:5a:c7:2e:6f:7d:ea:4b:a9:d8:5f:8c:a2:4a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523
Validity
Not Before: Oct 29 09:00:09 2026 GMT
Not After : Oct 30 09:00:09 2026 GMT
Subject: CN=d2ee2f6db46dd50255b83bdc72057601e5d62ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d4:a0:83:16:6c:3b:61:2c:a1:d0:e8:bd:48:
8d:37:7e:21:62:b3:9e:a1:89:f1:1a:24:a7:03:51:
18:5d:d0:f7:68:80:98:84:b4:d9:b5:c2:34:d2:78:
29:de:b0:67:2f:e2:72:8e:e0:ef:9e:36:af:5e:23:
4c:ed:76:9d:c3:d0:01:59:15:be:0f:a4:50:b6:66:
ab:d4:20:14:87:c4:6a:ec:3a:88:b8:38:26:0c:1e:
62:c5:82:6b:df:24:07:3e:7e:78:6d:89:5f:e0:94:
fd:54:d4:e0:ad:97:3f:0b:93:11:af:50:54:b5:f9:
00:b6:71:09:f5:27:37:37:6d:e4:71:17:42:1b:c0:
e4:6e:36:af:b5:5f:85:a6:67:c8:7e:78:57:14:54:
38:c1:5b:46:ad:86:5f:b0:fe:7f:e3:9d:fb:c5:85:
79:fb:07:f4:d7:88:e3:a7:ac:2d:5a:89:e2:c5:2f:
51:5c:a6:12:31:62:f2:06:7e:08:b1:f5:7f:c8:e3:
8f:cf:d4:bd:dc:f8:0d:0a:49:04:c6:f3:b7:b8:49:
eb:7e:ea:73:36:7d:ae:22:8b:cf:1c:6b:67:52:9d:
09:f7:76:0b:af:4c:e0:03:71:c9:fc:58:f1:91:25:
54:b0:a3:ec:61:6f:c4:01:a2:eb:e5:3a:e7:94:e0:
67:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EE:2F:6D:B4:6D:D5:02:55:B8:3B:DC:72:05:76:01:E5:D6:2C:E8
X509v3 Authority Key Identifier:
keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:49:3e:80:90:37:01:d2:8f:01:0f:9f:65:69:9b:0a:1e:48:
cb:3b:f8:38:53:a6:9f:c6:78:e2:06:54:62:82:42:70:73:c1:
6d:86:15:ac:0e:e9:a4:58:45:af:02:51:4c:68:44:6a:ce:b1:
da:33:5a:d8:ef:9d:a5:ce:17:5f:ac:22:4f:b9:b3:fc:f6:d5:
99:0e:9e:16:24:8c:19:d0:99:4f:73:26:14:1d:6e:f0:15:75:
8e:60:76:3d:46:19:ba:35:bc:69:38:9e:da:e5:f6:94:96:97:
a3:00:a1:30:3d:ed:04:cd:17:2b:2b:6e:4b:c2:8c:bc:04:52:
cf:2c:17:66:cb:4d:63:3c:dc:1c:3e:59:ec:2d:d8:91:f0:b7:
27:6f:61:4d:c4:f7:0c:7a:09:96:7f:06:3d:ef:2e:3f:d7:a4:
2a:65:54:7f:48:d3:b9:07:32:9f:bf:f7:95:41:30:24:3b:62:
bb:7a:4f:7b:eb:3d:07:94:1c:d8:00:4e:c3:29:85:66:a8:64:
dd:05:90:a8:2b:cf:c0:f3:29:3d:7e:77:70:ae:44:15:68:21:
1e:0e:0e:b1:14:6e:6a:c0:53:b0:be:0e:d8:92:f9:a9:9b:51:
78:6b:63:6e:de:9b:2c:59:14:7a:b0:86:65:fe:f6:ab:d8:9e:
eb:64:44:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:05:13 2026 by rpki-client