Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
File: ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json)
Hash identifier: BKs1K7cgrqHXvXlceFt7v3NyLEPNCkkcT2MapKqztX8=
Subject key identifier: EC:5E:FD:96:EF:22:90:3D:54:25:39:B6:69:D7:B4:2B:EE:91:D2:BD
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 01A192E894214C8529094065C32A4A6EA2CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
Manifest number: 1AD1
Signing time: Sat 31 Oct 2026 17:01:17 +0000
Manifest this update: Sat 31 Oct 2026 17:01:17 +0000
Manifest next update: Sun 01 Nov 2026 17:01:17 +0000
Files and hashes: 1: 8qyFq0Jw2vV5jElWSS9BdEiMHZI.roa (hash: v/1+49rt+1xmD87nJbTdyd9Pwk6XUeag3Zc7Vhx+XuE=)
2: MeXVUI3aWp7Z2DI7WMU0Gm4njP0.roa (hash: iGfrPBKEnMJclVSd9fkKLOCf5/zL3mFetrJ7LUyMUv0=)
3: _PWI4Pg_xtU3q9ndOYXBdr6ITtg.roa (hash: UoG6A/7sJnnLJpmYHSSquZFUnlzXcAk+Jue/1QWwS4U=)
4: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: 8Z/bLxgWyfz1S5dPebGpaNuuYJB/fRSraNtuVljI/k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:e8:94:21:4c:85:29:09:40:65:c3:2a:4a:6e:a2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: Oct 31 17:01:17 2026 GMT
Not After : Nov 1 17:01:17 2026 GMT
Subject: CN=ec5efd96ef22903d542539b669d7b42bee91d2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:16:8c:ec:59:91:c7:db:70:bb:ae:c8:8f:
bd:b2:59:d5:43:9e:a7:dd:a4:92:ae:e7:bd:d2:74:
c5:21:cc:79:67:06:e1:70:2f:50:f2:8e:c6:31:b0:
95:22:9a:22:8f:23:da:71:bc:9b:4e:24:10:16:d0:
0c:ee:fb:32:db:08:cc:fc:42:2a:db:11:25:93:89:
55:2f:6e:7e:4f:11:ae:6e:0b:09:29:07:8a:4c:8b:
fd:7a:92:9e:82:0f:4d:7b:cc:93:11:17:81:85:57:
ad:f0:42:64:73:6a:c0:cb:20:d2:e9:15:5f:21:83:
71:fc:93:28:c1:f5:e7:8e:2e:65:a4:0a:83:70:ef:
91:0d:2c:fb:9d:51:5c:e6:ef:03:0f:eb:1f:03:c7:
a4:c6:40:c9:28:e8:83:d9:13:b7:75:9d:e0:e5:6d:
bb:b3:c2:79:c1:23:2b:f8:72:e7:19:66:13:ec:07:
5f:f6:b1:97:d9:72:81:7e:3c:d8:82:9a:ae:b7:4f:
26:a2:bc:4c:da:0b:4c:fb:11:ae:5e:03:a0:33:3f:
93:f2:e6:0a:7b:ca:f5:c8:1b:c9:45:89:86:6e:c5:
1d:56:9b:cd:8f:cc:35:af:e2:90:84:04:00:e8:9a:
50:75:8d:73:b4:44:9c:61:ce:43:1b:ad:0a:dd:54:
30:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5E:FD:96:EF:22:90:3D:54:25:39:B6:69:D7:B4:2B:EE:91:D2:BD
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:55:78:3f:f0:3b:41:e7:66:d0:34:d7:58:26:1f:68:ce:39:
e2:9b:d7:24:07:eb:d1:75:9a:23:37:7c:b9:36:ff:a2:56:62:
da:e0:53:78:d1:91:41:cf:58:8b:22:26:e1:4e:17:e2:62:b0:
65:9b:25:c9:db:cb:19:5c:d1:3a:d2:3d:6f:c8:3c:3c:5d:11:
6c:4a:83:99:cc:88:9f:d1:e3:03:9e:09:18:82:d7:a6:bc:07:
25:d5:49:4f:1a:3e:42:d2:59:63:62:d0:32:fb:43:05:dd:1c:
2b:2d:85:43:24:8e:7a:b4:c5:e4:51:9c:6d:0e:e6:ae:ec:cc:
2c:70:2c:aa:29:1b:93:63:10:d1:73:fa:b0:ae:ea:b8:68:7c:
f0:2a:bd:cd:5f:7b:93:ee:8d:31:e0:19:23:da:c6:34:33:8f:
a0:e8:b8:1e:ce:a0:b4:45:c1:aa:a6:92:f8:a9:7b:ef:5a:62:
bc:20:4f:61:c8:9d:e7:19:1e:08:1d:e5:9e:4a:4e:57:47:d9:
4d:77:59:f1:0c:4d:f3:e5:b6:87:7d:de:0e:8b:2b:09:1b:38:
ce:cf:70:a1:65:43:75:1b:6d:7f:cd:18:f3:26:a4:66:0f:8e:
f7:a3:7f:e2:28:72:77:e3:85:ac:7e:4c:ec:18:1e:d0:2b:70:
b3:35:cd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:54:38 2026 by rpki-client