Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: BzGW6mVvMpO1TAA37Po3xi+J9lWotO8C5uzpJsdOZJA=
Subject key identifier: B4:D7:06:5D:3A:0C:45:42:92:6A:0D:DC:F1:03:A8:D6:C3:7F:3F:CB
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 01A17695548A0B6D1B35A8C76A3CD8D81368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 15A2
Signing time: Mon 26 Oct 2026 05:01:00 +0000
Manifest this update: Mon 26 Oct 2026 05:01:00 +0000
Manifest next update: Tue 27 Oct 2026 05:01:00 +0000
Files and hashes: 1: 1k7VTB7SeldaLWRNqkcJf8z7HHw.roa (hash: 3oiTUkjmYdO5UbIwN8Ds5tNRJC/IkTwk80H4gmRZk9M=)
2: RrLny5U_ijBVCGnLCvuUJJ18m5s.roa (hash: bpv8Zff7lwgvln+/BYJURzEncDhJwqT1vkhDlSV1O1g=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: tIAkh00ZL3jzSVpVO8lFcCdEKYhWLjJjjw4RiICSxUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:95:54:8a:0b:6d:1b:35:a8:c7:6a:3c:d8:d8:13:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Oct 26 05:01:00 2026 GMT
Not After : Oct 27 05:01:00 2026 GMT
Subject: CN=b4d7065d3a0c4542926a0ddcf103a8d6c37f3fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:2a:65:9f:98:62:57:04:50:ea:3b:75:75:4a:
e2:7e:9f:bf:68:e2:3d:9b:45:2c:dd:aa:da:c1:0a:
ba:f9:a3:cc:3a:94:b1:ad:d4:17:c7:6c:aa:1d:19:
8a:cc:2c:88:23:9e:03:80:ce:10:dd:82:00:66:a0:
57:1b:6a:c5:d0:ba:63:68:d3:de:75:9a:4e:09:2f:
0b:a1:cd:5d:48:64:b4:e8:88:8a:37:bd:cd:f2:5c:
50:cf:86:55:d5:94:bf:25:a2:f1:9b:35:42:20:90:
0b:7d:98:40:df:e6:8e:3e:8b:32:bd:43:42:67:03:
7c:c1:72:a3:be:11:63:60:03:c1:cc:fb:f1:be:6e:
02:0d:7e:0a:58:b3:b8:ce:f7:c5:c1:1d:4b:63:49:
c2:d1:4b:f7:3d:4c:f8:27:5b:e4:a9:13:88:6a:ed:
38:8b:b8:5b:47:ea:9e:f7:6f:43:e9:a3:62:39:92:
d1:73:f0:e9:bd:a9:1a:f5:6d:ca:ea:a8:59:b9:de:
33:b5:f9:50:49:8b:ad:bf:58:17:93:91:e1:14:6b:
fa:7e:45:56:42:80:2a:11:2e:25:b8:0e:dd:e0:fd:
1a:58:d8:1e:eb:f6:10:0a:af:ee:8b:aa:b8:99:2c:
16:15:86:9a:69:d0:d5:d0:d5:47:01:7d:f3:d5:32:
36:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D7:06:5D:3A:0C:45:42:92:6A:0D:DC:F1:03:A8:D6:C3:7F:3F:CB
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c4:8b:14:35:a5:96:16:56:5e:fc:56:08:70:22:a5:9e:a4:
b1:ba:77:76:a5:79:e8:2d:7a:b8:1a:d7:ff:f1:4e:b9:df:6b:
20:32:19:2d:52:70:08:17:48:5d:75:af:6d:f2:46:b4:9e:54:
62:6a:a6:4f:15:9e:5a:b1:b7:33:d0:cd:4f:f9:d5:a7:2c:b6:
c0:8c:3b:e4:5a:48:ff:14:04:d5:a1:1d:e5:25:0d:4f:7e:d3:
8d:1e:30:21:1d:06:e4:ad:21:36:56:b0:16:b6:e1:aa:f9:82:
be:e0:99:1e:b0:88:f0:81:68:6c:c8:25:d0:ed:25:7a:ea:58:
94:1d:97:30:d9:c2:ee:39:83:16:7e:f3:fb:c7:d0:8b:78:3d:
11:4d:d8:41:19:28:c1:5b:b6:f1:37:ea:ef:d9:ee:c5:78:68:
62:b7:73:43:61:e8:1e:8c:67:78:dc:93:a0:83:61:16:17:b7:
4b:fd:7f:da:c0:38:9c:56:67:63:e4:b9:a3:28:14:17:48:69:
cd:10:a3:43:33:0c:e8:f8:87:4d:27:a5:0b:08:eb:7a:9c:3c:
6b:31:e8:ec:5a:2f:01:79:7c:5d:8a:82:16:ea:b2:b5:83:9e:
cb:5b:fb:ed:07:81:c0:ad:cf:b7:0f:42:cf:45:e8:d7:85:89:
c5:cc:eb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:05:08 2026 by rpki-client