Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
File: YuJWVsULslT1gHfRuWbkdLFjR68.mft (raw, json)
Hash identifier: jW5pC4v6AFKSnJ/dCc8kCB/TtEI4k6Vhk+flpfYvFnY=
Subject key identifier: 80:00:36:3D:83:A7:3C:1E:4E:E7:D5:D0:F5:3B:4A:C2:DF:38:E4:7E
Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
Certificate issuer: /CN=62e25656c50bb254f58077d1b966e474b16347af
Certificate serial: 01A1781615E0F3F76022ACBD9103A9E7F8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
Manifest number: 1AC2
Signing time: Mon 26 Oct 2026 12:01:15 +0000
Manifest this update: Mon 26 Oct 2026 12:01:15 +0000
Manifest next update: Tue 27 Oct 2026 12:01:15 +0000
Files and hashes: 1: WDz5bqq9s7Sot6DZTyns7ujP_G0.roa (hash: jp6a/AgGzZ0JdGjudIFSMOs/t8/efE23HGLQbGbVGxE=)
2: YuJWVsULslT1gHfRuWbkdLFjR68.crl (hash: FaCqw32D1lWM8qPRlmRre1F3uaoD72VlBcoK+dP0cIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:16:15:e0:f3:f7:60:22:ac:bd:91:03:a9:e7:f8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af
Validity
Not Before: Oct 26 12:01:15 2026 GMT
Not After : Oct 27 12:01:15 2026 GMT
Subject: CN=8000363d83a73c1e4ee7d5d0f53b4ac2df38e47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:86:b2:ff:b4:7d:32:9c:41:bb:8d:96:98:
1f:fc:59:59:c7:8f:ce:27:e3:da:ab:72:b7:da:e4:
ea:60:bb:6f:39:fe:6c:c3:46:f8:70:69:a3:62:29:
b6:c4:7f:3e:4e:51:19:12:40:c0:2c:32:d6:b4:af:
9f:b5:8e:42:cf:26:71:7e:7e:67:dd:65:ea:bd:78:
ce:19:9f:d9:d0:b8:21:83:05:9e:40:e9:1b:79:6e:
61:57:b7:0b:06:e0:c0:6f:0a:05:c4:f1:6d:10:ef:
ce:0f:4f:08:de:39:04:e6:16:54:e9:23:a1:af:23:
c6:eb:b3:f2:ac:30:74:7a:c4:44:71:b1:8c:27:ca:
1a:51:1b:0b:17:f1:6e:e5:d2:f6:2d:f1:04:9a:b5:
70:c4:6a:34:3c:37:bd:f5:08:82:ab:50:ae:e7:1c:
27:d4:18:ac:32:72:bf:f9:f4:f4:ad:16:20:ff:cc:
27:41:81:ad:74:29:b3:84:c2:25:d8:a0:7c:25:51:
c7:7c:17:e5:73:31:7b:01:d7:97:a5:aa:81:d8:2b:
ce:b8:c3:2c:b5:1f:ce:9c:e8:88:49:ba:1b:92:88:
fa:39:52:7a:02:da:a0:4f:63:9e:15:ec:3e:5a:91:
b5:f3:2d:13:03:79:de:c6:c3:25:95:a9:f2:76:c6:
c4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:00:36:3D:83:A7:3C:1E:4E:E7:D5:D0:F5:3B:4A:C2:DF:38:E4:7E
X509v3 Authority Key Identifier:
keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:05:0f:2b:c1:65:c9:01:29:63:82:43:d5:46:81:6a:24:d4:
b3:de:75:f9:f5:ca:3e:ee:57:08:25:e0:2b:6b:57:60:fa:53:
f4:32:95:cf:ae:a8:2b:99:01:fa:e7:cc:28:b6:58:4c:80:31:
3e:1a:ed:44:bb:6c:08:eb:3a:c0:24:06:af:9b:f3:a4:6c:23:
f6:33:7a:f4:fe:dd:de:22:de:10:da:13:c6:f9:71:c4:80:b6:
f5:ff:27:92:b0:fe:19:7b:06:3e:ec:d5:3f:26:79:6d:1a:6a:
9f:78:88:ec:c5:14:70:e1:84:57:82:ec:8a:88:8e:5f:d7:0e:
3e:5b:d5:56:88:c4:fb:bf:4d:72:97:0e:ea:b3:14:c6:c9:2c:
d2:33:ca:a4:e2:c2:30:31:3d:d9:65:3c:1f:74:a2:4a:55:3e:
20:bd:de:d3:bd:22:52:ea:06:3f:5d:cd:c0:18:fa:6f:8f:ac:
25:a1:42:6e:e5:81:cb:df:17:28:4a:27:92:fa:b2:c6:82:95:
e8:29:48:ab:7e:df:c8:d6:b5:05:f3:03:39:fd:14:73:ba:e3:
08:78:d8:84:95:c1:a3:b6:bc:c0:08:a6:e5:87:c8:d3:f7:6e:
ab:9b:79:97:d5:90:df:15:db:72:fd:c2:fa:92:00:dc:b9:39:
59:a3:11:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:04:10 2026 by rpki-client