Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File: yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier: x/yz3FOFiczhYAHEZCyiqqI2zHwkKx4jJ3peO+9XiTY=
Subject key identifier: 62:0E:82:F9:18:32:63:12:70:B4:D4:03:5E:C1:83:DC:2C:C1:D1:DE
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer: /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial: 01A159302D583C439C479920A72C6A1F575D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number: 0625
Signing time: Tue 20 Oct 2026 12:01:31 +0000
Manifest this update: Tue 20 Oct 2026 12:01:31 +0000
Manifest next update: Wed 21 Oct 2026 12:01:31 +0000
Files and hashes: 1: TTJb2RAURlKPWvYkNwaWkyT09qY.roa (hash: lOE8Ruv9RewYP7cpvq3aqRSVFYYOIUiYC9/cShdcpDM=)
2: Y6tlWJsn2-eO2pGWaQiPAUkPW7g.roa (hash: uARQVpL4FEL+I59HsU9UtUVf5F4ZPPjEs1mpi4DNxXs=)
3: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: 7giPSHpg/cOLIpPsgMOP7hlCtI1DHMkD90GWsCY4Xn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:30:2d:58:3c:43:9c:47:99:20:a7:2c:6a:1f:57:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Validity
Not Before: Oct 20 12:01:31 2026 GMT
Not After : Oct 21 12:01:31 2026 GMT
Subject: CN=620e82f91832631270b4d4035ec183dc2cc1d1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:b5:77:87:64:49:0e:4e:05:7b:e2:ed:2c:
39:40:a2:54:ee:81:a9:4d:07:50:19:c9:14:44:53:
1b:be:d2:2b:46:c5:83:c5:c4:84:da:0c:4c:10:38:
92:b9:51:1d:0c:d0:84:56:d0:ff:9b:1b:77:c6:4a:
e2:f9:9c:f1:34:ae:28:5d:00:d1:0c:c0:56:ac:51:
6a:dc:be:de:9d:12:01:70:aa:2b:2c:30:ec:88:ac:
dc:12:97:f1:f0:a9:cc:7d:e8:39:f9:74:e1:d5:c3:
93:31:f6:c2:9c:c9:a1:51:fc:aa:c9:0c:ed:2b:85:
b7:1e:8f:c9:d6:a8:80:e5:23:d2:45:7b:18:65:37:
a3:c9:77:ac:b3:e5:1c:eb:98:41:03:d9:21:4e:de:
2a:0d:a2:71:0e:49:e8:63:e9:2f:ea:57:9e:f5:18:
96:53:d2:97:71:9e:9c:36:95:9c:d9:f8:28:5d:41:
3b:17:36:50:7a:2b:8d:fd:df:f2:a8:19:31:0b:71:
e3:1a:63:cb:6c:0a:c6:53:44:5f:5d:e0:88:a3:56:
9d:b5:59:8c:93:a5:37:9a:b1:99:77:ef:19:af:c6:
0a:80:d1:4c:53:c6:ab:fc:a7:1d:35:15:13:27:05:
27:31:bf:21:fd:75:39:74:75:dc:28:7c:1c:db:16:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0E:82:F9:18:32:63:12:70:B4:D4:03:5E:C1:83:DC:2C:C1:D1:DE
X509v3 Authority Key Identifier:
keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:3e:b9:19:9f:be:fd:36:7c:85:6f:c3:9b:48:42:21:b3:78:
5e:84:dc:8b:f1:10:d1:84:7e:22:6c:a2:a2:f3:ad:93:27:56:
b4:38:31:00:a1:c8:fe:cc:4f:40:5e:2a:ad:f9:9d:ae:bf:f1:
a3:b6:ed:ca:0d:a8:f8:94:99:eb:3e:31:2c:f9:03:c7:91:ae:
a8:15:da:db:14:00:e7:87:0f:b7:58:b6:5f:0f:93:58:fe:77:
32:5d:c0:9f:8a:e2:f7:e3:40:27:b8:08:a4:1f:13:58:a3:ec:
a8:42:cf:3b:34:4b:8b:ed:7b:11:6f:c4:e4:ab:c0:82:33:fc:
b1:57:07:e7:1f:c3:06:5b:6d:a5:cd:bd:92:89:3c:be:e0:c6:
6d:e8:10:45:1f:3b:e9:00:8b:2f:ab:47:a2:74:dc:38:93:f0:
6e:a0:b3:d0:85:10:36:9f:03:90:d3:a9:b1:c4:b0:65:55:36:
c3:3b:cd:86:91:f2:b0:27:e4:55:97:01:a5:04:ee:a5:1c:78:
61:fc:86:50:9c:71:2d:65:5c:24:2a:09:9f:e1:44:37:af:61:
ba:95:ec:e0:49:99:b1:4f:da:7d:26:bb:11:29:7d:ad:8c:5c:
fd:58:da:6e:30:f4:f6:7d:60:49:48:fe:81:a1:06:cc:5d:21:
02:06:9b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:45:52 2026 by rpki-client