Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: fRrdnbQS6RgYSQ2oMAnTF9iG8Peub0J9Tei7JMImCVc=
Subject key identifier: CF:ED:1E:12:EB:8D:C6:62:1E:3D:88:FE:E0:E4:6B:0E:E8:94:C4:62
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 01A17C608EC9F4EEC507DBFF9EA6FB122584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 15A5
Signing time: Tue 27 Oct 2026 08:01:05 +0000
Manifest this update: Tue 27 Oct 2026 08:01:05 +0000
Manifest next update: Wed 28 Oct 2026 08:01:05 +0000
Files and hashes: 1: 1k7VTB7SeldaLWRNqkcJf8z7HHw.roa (hash: 3oiTUkjmYdO5UbIwN8Ds5tNRJC/IkTwk80H4gmRZk9M=)
2: RrLny5U_ijBVCGnLCvuUJJ18m5s.roa (hash: bpv8Zff7lwgvln+/BYJURzEncDhJwqT1vkhDlSV1O1g=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: R9iZyD+oBRkP99ZhaPVj7RuuoB0kzbMPqw2AMjQ0mjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:8e:c9:f4:ee:c5:07:db:ff:9e:a6:fb:12:25:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Oct 27 08:01:05 2026 GMT
Not After : Oct 28 08:01:05 2026 GMT
Subject: CN=cfed1e12eb8dc6621e3d88fee0e46b0ee894c462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:75:5b:8f:7f:60:72:27:ce:f4:0b:3c:55:
d2:14:ec:65:4d:9e:a3:05:5f:7b:cd:7f:49:53:7e:
8e:ab:2d:74:67:89:26:8d:d1:da:81:57:54:b8:4f:
e2:9a:fd:0e:14:fd:ba:b9:74:db:7c:94:6d:41:d1:
37:f0:74:ef:88:37:e5:ae:ec:b1:bf:0e:b7:6d:44:
10:5e:de:26:2d:1a:4c:ee:03:f2:12:70:3c:1a:e2:
f2:86:67:1a:a7:91:74:92:8b:9c:df:69:0c:b4:6f:
9a:99:f6:f4:8c:f0:c7:af:0f:47:ac:ac:c9:08:70:
fc:be:65:77:50:17:f3:e0:13:c1:98:3a:32:8a:50:
cc:00:e5:96:4b:c0:1d:e0:7d:d0:f5:c4:9e:03:40:
c6:f5:45:e7:4f:58:f1:43:db:60:e4:a4:64:59:c1:
6b:cf:eb:1e:18:54:f9:6f:32:27:bc:68:31:ec:6f:
e1:ee:6b:ce:7f:59:b5:db:b8:82:48:a9:6e:7c:eb:
74:82:b3:e6:ca:ee:9f:73:58:56:92:3e:8d:26:db:
15:1b:00:1b:b8:aa:fd:f5:1e:06:12:2c:46:68:f8:
21:35:2d:dd:63:15:02:dd:4d:b4:3b:46:30:06:19:
08:bf:e2:6f:9a:40:e7:3e:7e:9b:27:c9:4d:2e:d8:
74:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:ED:1E:12:EB:8D:C6:62:1E:3D:88:FE:E0:E4:6B:0E:E8:94:C4:62
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d0:6c:0f:31:71:f0:77:d5:41:4e:c4:07:c4:ea:98:57:e5:
b0:e8:86:1e:6e:bc:2b:36:a1:c9:cf:50:86:ad:00:c2:1d:17:
b0:3d:8e:5b:90:3e:10:83:ad:67:e4:7f:ba:29:64:4b:7f:9d:
9b:23:e6:3b:eb:b3:d4:22:ac:0f:5f:1f:91:af:1e:e9:17:18:
76:2e:94:b0:35:3e:3f:e8:0f:4b:15:b4:50:97:05:83:d2:b9:
a5:05:71:2e:56:c0:af:10:85:30:b2:fc:c8:fd:d7:d5:07:a1:
82:f7:ff:ca:d3:ad:68:35:b0:0f:7d:ab:42:39:e6:66:62:fe:
de:9a:58:fe:0e:e3:07:73:c5:21:90:0e:dc:7a:1d:6a:83:67:
d6:38:d6:cf:b1:77:6a:ed:fa:21:d9:56:85:71:02:45:9e:31:
70:74:09:26:83:d7:6f:74:e8:13:27:58:14:2d:a0:e2:43:fb:
c3:1f:92:a6:80:6a:f4:0b:f6:db:c0:db:2c:f3:65:b9:38:fa:
13:33:72:f9:db:84:93:df:4b:6f:ad:ff:60:9c:88:f8:51:fb:
9c:5e:31:b7:bd:49:24:e3:3b:92:5c:b4:7d:46:ed:45:a0:6b:
0f:8c:f3:02:f2:9a:df:c1:22:dc:79:f3:1e:38:ca:8e:18:40:
b3:b0:d3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:34:10 2026 by rpki-client