Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
File: YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft (raw, json)
Hash identifier: LLrqNNBzVyMEnFBDIIL4DHesr1U1U1yMEO9nz3rHnrI=
Subject key identifier: 4E:BF:2E:13:0B:A0:32:2B:98:06:A4:DD:20:13:C9:FA:D2:D1:82:0F
Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
Certificate issuer: /CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Certificate serial: 01A119E2235D9CA9B7E7B3BA2B9A12B7661E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
Manifest number: 1A96
Signing time: Thu 08 Oct 2026 05:00:12 +0000
Manifest this update: Thu 08 Oct 2026 05:00:12 +0000
Manifest next update: Fri 09 Oct 2026 05:00:12 +0000
Files and hashes: 1: DrwW4sKSqTZEXvxPzEr4f3uBsog.roa (hash: GYviIhAWt+rJxTgokFxh6w4GldBuIX4UFW6S+3JXsHk=)
2: P98wNmnJTHdJLeeJu4aYozQSfd0.roa (hash: KbHvAeiSMHCPMC0OSmiZKSqrSyacLzZFYJdIlBywl7g=)
3: YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl (hash: 0j2dXfo4F/zHxKI8aAlkK171CzqR+VZvWe1LXehJcAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:23:5d:9c:a9:b7:e7:b3:ba:2b:9a:12:b7:66:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Validity
Not Before: Oct 8 05:00:12 2026 GMT
Not After : Oct 9 05:00:12 2026 GMT
Subject: CN=4ebf2e130ba0322b9806a4dd2013c9fad2d1820f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:be:62:e5:bc:56:9e:73:a8:60:d8:9c:f5:2e:
ee:70:7f:98:5d:fa:f8:e5:96:92:10:ed:80:2b:15:
1b:96:53:db:44:0f:8b:77:1d:46:16:25:3c:f9:00:
9d:06:30:a2:3f:2c:57:a9:f6:90:de:30:ba:43:f6:
86:cc:9b:da:0e:0f:5b:01:c2:cd:db:8d:d0:70:57:
a8:d0:eb:5b:7a:c9:ae:06:e8:4c:c4:d8:a0:d3:51:
96:2c:5b:e3:4d:61:2a:af:44:96:64:25:cc:0d:b0:
96:00:64:bf:77:8a:9f:fa:d6:6c:8a:3f:d7:a8:80:
3f:e3:55:96:16:27:09:ff:4f:c5:ea:e4:80:d7:53:
f6:2e:5f:00:9e:c4:ec:4f:25:25:60:43:84:ea:31:
d5:1d:33:79:52:1e:db:81:8b:7e:62:21:1a:2d:6b:
5a:3e:9e:96:bb:a3:22:84:8d:d8:d9:db:f2:05:65:
72:93:ac:92:f8:6b:56:7b:ee:c8:11:d3:74:c9:2e:
a1:39:8c:03:33:33:8d:e2:6f:63:1b:d4:f9:25:7a:
6e:64:2d:c8:02:e9:ce:af:f9:ad:4b:f4:df:6b:ca:
49:ca:89:11:6c:5a:28:e4:f6:ea:b7:16:e9:92:cd:
65:45:f2:cf:c1:6a:fd:99:15:ca:70:b1:33:78:5a:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BF:2E:13:0B:A0:32:2B:98:06:A4:DD:20:13:C9:FA:D2:D1:82:0F
X509v3 Authority Key Identifier:
keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c4:f1:df:0f:a8:df:0b:b4:27:a2:6a:cf:4a:f2:42:59:10:
3d:f9:75:de:25:73:5c:0d:e9:81:89:d9:d2:93:bd:62:0b:8d:
e5:2f:fc:19:60:ed:47:fd:fc:d7:93:48:a8:a0:8b:9b:d7:17:
16:e4:b1:db:da:a2:5b:70:d5:bc:ac:75:ac:1e:9a:ed:78:2f:
e0:df:c6:cf:2e:08:c8:d2:66:c7:68:4d:83:9f:0b:52:6a:fe:
47:85:72:a8:24:98:86:14:4e:e2:72:60:bf:ca:ed:b1:45:94:
da:79:22:af:94:8a:bd:e2:22:bb:da:75:33:69:d3:8d:ec:bf:
e4:b9:16:d5:6b:df:34:18:86:c2:d1:c5:55:91:87:2d:0a:6d:
fc:df:bc:17:47:58:11:ee:d8:1b:b6:50:4c:a6:df:02:70:5c:
f3:86:29:30:db:27:8a:dd:a5:dc:bb:46:f7:6e:51:e6:8d:57:
f2:06:a2:0c:f8:f4:5f:0b:66:51:c8:d5:d8:8f:ef:a3:4c:ad:
21:9d:25:7c:a8:b6:33:bd:3a:51:b8:06:d9:cd:47:b8:25:6c:
b3:fc:63:1d:9c:ef:68:bf:82:f9:ce:42:3b:e9:02:38:8e:5e:
17:94:54:78:d5:41:32:50:16:d2:a1:b8:85:60:51:04:df:d2:
d7:1e:5f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:58:23 2026 by rpki-client