Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: PWGEM6EGtlSCbHdCiUfV4vht6f0L8YZybITIImZ9S/E=
Subject key identifier: 85:E8:37:04:D8:09:B4:D2:3A:E9:0D:34:F2:F0:38:E1:FA:D2:51:01
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 01A1762843939110D89379E9E368EA35F5BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 1287
Signing time: Mon 26 Oct 2026 03:01:52 +0000
Manifest this update: Mon 26 Oct 2026 03:01:52 +0000
Manifest next update: Tue 27 Oct 2026 03:01:52 +0000
Files and hashes: 1: txC54j_S7HZrQJFinO7KZYt-RYQ.roa (hash: Brb/AGg54bXB31WxKutqNfmuYrMVTPjvpdr/gdDFZQ0=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: Nc3/ZO2LKeS9Mxqc5T69unrucNwPu8KdEaFHLmvUU1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:28:43:93:91:10:d8:93:79:e9:e3:68:ea:35:f5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Oct 26 03:01:52 2026 GMT
Not After : Oct 27 03:01:52 2026 GMT
Subject: CN=85e83704d809b4d23ae90d34f2f038e1fad25101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:91:45:6d:32:c2:fb:67:58:66:89:f3:8c:
64:ef:22:6e:0a:d1:3e:26:fa:0b:fe:de:ed:ac:bc:
ec:da:56:e0:4e:c7:1b:b9:ec:75:7c:aa:1f:ee:12:
35:bd:cb:7b:1d:88:ba:12:e0:63:f7:18:b9:f6:6f:
67:58:e1:78:74:25:a2:a6:72:b4:c4:b1:bd:d5:68:
6e:09:8c:ca:e5:d5:a6:68:ab:ce:95:f9:b5:8b:a1:
8e:2d:52:d8:34:d6:60:cc:be:b6:ab:ec:7a:cf:5b:
0d:73:c4:4c:97:bd:b5:ef:80:b6:08:fb:ca:6b:7b:
9b:ce:b4:c2:71:43:03:15:64:5a:80:f1:9e:9d:ea:
79:bb:44:41:6b:21:ea:2b:c0:ab:d5:74:c4:50:b4:
38:cf:1f:2b:ae:45:32:a1:1d:2c:50:54:53:14:d1:
90:57:60:4a:60:ea:70:ab:9d:05:f0:b2:40:18:66:
60:8d:db:27:80:1e:ee:75:b9:9b:1e:8f:cc:8a:e1:
59:d2:22:ec:4e:84:5a:ec:ee:26:b8:b5:b9:10:f0:
84:d7:e8:7b:61:91:65:81:d3:4d:ce:20:35:69:eb:
c2:10:93:7a:c3:31:dd:aa:fa:94:7c:5f:7d:fb:44:
2f:5d:2f:d1:bd:3a:5d:95:9c:a6:17:74:6c:c3:03:
7e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E8:37:04:D8:09:B4:D2:3A:E9:0D:34:F2:F0:38:E1:FA:D2:51:01
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:41:d3:65:f3:88:e6:28:2d:32:15:4e:0d:d7:0b:8d:96:c4:
82:39:c8:54:f0:c8:c1:ac:99:6f:1e:31:f9:e7:70:75:29:53:
97:c2:19:4a:ee:26:d7:32:9a:f6:7d:19:d2:e0:05:75:ba:72:
cf:ec:9f:da:b3:6c:8b:5e:2c:f3:78:08:14:79:d4:c7:1e:7e:
8f:aa:8c:14:23:a7:eb:27:ec:84:fc:0b:ff:89:11:38:3e:cf:
d7:5a:69:59:4a:7d:77:df:0a:c1:45:c1:0b:68:d7:ef:f2:72:
1c:ef:d4:10:9b:ad:52:25:11:46:86:16:ce:b5:00:c1:74:07:
d5:58:48:cc:a8:ec:1f:db:10:20:f8:58:49:33:e8:90:fc:a9:
58:ef:b0:11:f8:21:ff:ed:a2:96:aa:aa:dc:8a:1c:9f:33:48:
17:93:ee:da:04:2e:76:20:90:38:32:fa:c1:15:d5:65:17:04:
8e:64:07:cc:b9:76:fd:a4:f8:67:e7:ca:b4:b0:2b:84:1d:1f:
d9:4c:ea:22:3c:6b:3d:48:d9:49:46:b8:5d:b8:88:64:41:5b:
04:9b:23:65:81:01:6e:31:77:54:1c:99:8b:34:8c:ce:b2:ff:
cc:8f:8f:8f:3d:76:bd:38:b5:bf:80:a3:64:43:fc:65:7d:c3:
84:24:95:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:41:32 2026 by rpki-client