Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
File: YQfi4ugXHTGdobxks2w8mF5kbCo.mft (raw, json)
Hash identifier: hCAqLsxUud0Os+K4uFfYWWeo+VOq7A6Ecn9v4uJTvyI=
Subject key identifier: E7:9E:85:03:A1:7D:C7:AF:21:0D:7B:5A:34:1B:37:20:2E:E7:A2:39
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial: 01A18C0AD4D0ED5B3D19CAA223D52F3849D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
Manifest number: 1AD9
Signing time: Fri 30 Oct 2026 09:01:22 +0000
Manifest this update: Fri 30 Oct 2026 09:01:22 +0000
Manifest next update: Sat 31 Oct 2026 09:01:22 +0000
Files and hashes: 1: 1-nkqwt04sUMDC9uRx_t8c380GeY.roa (hash: h9/W+wiBRXLJF6MSGvt9b5FtX9V4UYzPeLihbacnCqo=)
2: LDCQKxYu17PBfjGz3HsKJehPutU.roa (hash: NekO5uIiTvcwPvB0U7eorZFJgQSTt1Z9cGsuN/y6Zwk=)
3: YQfi4ugXHTGdobxks2w8mF5kbCo.crl (hash: gQkMM0mbAkiGjMdZHFULwNhNxOAZKYJna3dUyLKvmQ8=)
4: zeXlkkdIl09Dvjdm4ssi_tIY1Bg.roa (hash: hWf1h7aupZ9EKGB6E2iziSGfeT6RpNoa9INKOxiybSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:0a:d4:d0:ed:5b:3d:19:ca:a2:23:d5:2f:38:49:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Validity
Not Before: Oct 30 09:01:22 2026 GMT
Not After : Oct 31 09:01:22 2026 GMT
Subject: CN=e79e8503a17dc7af210d7b5a341b37202ee7a239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:81:c7:68:db:ad:d1:f5:19:2b:b8:69:0a:33:
a9:16:f1:7b:18:0e:0f:b5:05:e6:f5:da:76:01:b9:
db:77:38:c7:b2:75:3d:68:19:50:9e:22:b5:86:ec:
8e:dc:21:18:22:14:55:85:fd:61:f0:84:12:7c:9a:
0f:5c:9e:7c:10:1f:eb:57:e4:84:d4:cf:d4:24:bd:
f1:a3:21:8f:8f:76:bd:19:a0:8d:5e:8f:a7:3b:33:
a8:ae:ff:35:df:9d:2b:2c:83:37:52:2d:5c:4c:09:
25:54:1b:0a:43:15:87:72:91:3d:f6:85:b9:8c:dd:
06:64:ab:19:87:f9:f1:da:82:38:af:53:25:91:2a:
cf:68:97:3c:7d:64:9b:5f:77:31:b2:96:b1:c0:91:
01:fd:2a:dc:86:eb:6f:39:f9:07:c2:e3:3e:f0:78:
0c:a3:53:90:ed:69:77:5c:94:67:1d:2b:62:cb:87:
ad:70:1d:ac:b2:e2:28:78:d3:7c:2e:31:45:0e:46:
76:41:87:b8:a6:9b:a7:8f:42:ca:28:73:8c:a0:e5:
98:f6:da:e0:c6:bc:ca:f3:bf:16:4c:bc:c9:68:80:
b8:6c:7b:b6:30:ab:b4:cd:d5:87:b6:e9:d2:12:9e:
f2:18:1b:8f:57:61:ed:3c:6e:3d:ab:8f:fe:c2:f6:
ce:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9E:85:03:A1:7D:C7:AF:21:0D:7B:5A:34:1B:37:20:2E:E7:A2:39
X509v3 Authority Key Identifier:
keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d3:52:a9:fb:2c:ef:a9:f5:e6:21:79:22:9c:be:09:37:d7:
8b:9c:01:31:24:ef:26:a5:f7:73:4c:d3:8b:97:6d:5b:c9:c7:
bb:f9:9c:8b:4c:b4:4c:0e:7f:f6:41:81:65:44:e8:3c:4a:47:
25:7f:23:1b:4a:51:2f:5d:57:f7:62:a3:59:b4:d7:4d:82:a5:
34:39:4e:d9:b8:c5:ad:94:10:0c:ea:79:91:76:95:a1:b7:37:
1f:19:e6:4c:c1:e8:4f:34:df:04:f8:a5:4b:19:85:ab:5c:49:
27:5b:f0:a5:97:11:12:e8:65:ed:ed:0c:e2:36:bf:d3:67:1e:
e4:84:32:bc:20:87:6e:c1:6f:ee:2c:7d:a6:52:64:7f:62:1a:
32:4c:bb:23:8b:3c:bb:19:83:07:b3:1d:c7:45:a5:aa:e3:45:
a0:02:4b:a9:cd:ad:08:1c:c3:08:89:fc:1a:0c:1e:8c:d5:5f:
d3:c7:a5:4d:db:c6:f6:a2:57:a0:fc:73:4c:c2:d8:0c:7b:25:
c6:df:90:4b:e3:c1:2b:a4:62:42:74:a4:0f:cf:c4:ae:56:48:
aa:b8:4b:31:31:bf:54:33:43:74:58:a0:71:98:e5:68:de:73:
96:a8:dd:c1:55:8f:fe:70:f7:8d:05:32:6e:ea:97:cb:2c:86:
7e:a0:f1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 12:47:49 2026 by rpki-client