Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json)
Hash identifier: 1W8YF4tWH8IL8T0QLWnCgYQLYCKT8K88tESKR1KOXgQ=
Subject key identifier: C0:32:BC:A8:8C:6F:40:01:EB:23:0C:0C:58:C2:AA:9C:5C:4A:D1:58
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 01A1238B32E7EA571489C9C9E62EEDC1A46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
Manifest number: 1AA2
Signing time: Sat 10 Oct 2026 02:01:27 +0000
Manifest this update: Sat 10 Oct 2026 02:01:27 +0000
Manifest next update: Sun 11 Oct 2026 02:01:27 +0000
Files and hashes: 1: 5L2g6nDW06irIUq83phIZ53C1IA.roa (hash: JbdTWcKtL0GeFigj6GMvD4sLu582tKI8ZbvVxkhlvCI=)
2: AeVrZINs9Mwgw--CeQuhBL48V9o.roa (hash: tOULrw1qQEUkRt4Egsmhx0JNl0n1ptX0coLHQFBvARg=)
3: AzSbSNEJjHOAmPD-lEIirqfh5dg.roa (hash: ZHEBSxcyGtvAyqmQJ49m4K5zjUBmt85+2wE9Fs3EpwQ=)
4: UcKG60X0bY06GvhRzuyCZXPPpEs.roa (hash: CiNS7tumSY9kA1IK1COc42ZCVYSO1Vjftuq3lKqZ0Tg=)
5: VB7XO0ymTrFmXwqFwsQgqVfLeRw.roa (hash: 7CJ7QikKkqwN0XgN8t0cIqxMckNcSYUmDfhH8CM9bnM=)
6: c0IiT_bhf4sAeq2ZJ69mDEiSeKE.roa (hash: WC6msRGLImOXKWuJcuzV4dtFJSxBDOZv82faENvIVf0=)
7: f-sruYLmLAQF45fvBkTZ4sUoHrs.roa (hash: 8P04B1C9VS8sjuPoAqAxmLe2sS/eh9nL22FO4SV0ZsQ=)
8: rGoiQCmdvS4XmAkVedOPWx6pvfc.roa (hash: NENGKfJhaegTvTeAkQES6pzY2mWvrE4Gty5ShbLzPEM=)
9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: 9UZKiTaQK/WzyPnZHHZbdCOxUsPeMZp6V/vQudo+0uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:8b:32:e7:ea:57:14:89:c9:c9:e6:2e:ed:c1:a4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Oct 10 02:01:27 2026 GMT
Not After : Oct 11 02:01:27 2026 GMT
Subject: CN=c032bca88c6f4001eb230c0c58c2aa9c5c4ad158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:ad:85:35:b2:6b:62:0c:db:16:de:51:d1:
27:ec:14:c0:a0:44:46:f0:04:6e:78:df:f4:8f:da:
2d:e6:fd:a8:5c:e7:06:75:5a:3a:c5:50:98:ad:9a:
63:2a:6c:0e:66:84:f3:87:8b:93:f1:db:3c:f5:1e:
bf:0f:b0:97:27:c6:c8:d6:3e:85:8e:49:bf:85:a3:
14:65:93:3f:f2:fe:25:7c:0a:14:d4:23:9a:ae:2b:
41:0a:11:33:ea:26:c8:03:ee:2c:c2:ca:86:1b:0b:
fc:6e:be:c0:a4:8c:53:73:b5:9c:21:b3:53:0b:cb:
b4:39:a4:d8:c8:cd:55:c7:c7:ce:99:bc:7c:70:ad:
e5:82:d1:23:5c:12:e7:5b:c7:48:ec:54:5b:f2:42:
54:5b:cd:a7:aa:5e:46:60:5d:e1:a0:12:6f:72:06:
52:7c:fa:0c:3f:ee:7c:92:ac:99:2c:6d:b8:54:dc:
9a:56:7f:26:43:df:08:df:40:24:5a:b4:ac:b5:40:
d8:e1:df:aa:74:86:92:f9:ad:4c:a1:25:48:4e:a4:
23:6e:28:e4:fb:0e:82:04:d5:f4:e6:70:6e:81:4a:
07:01:7a:67:00:77:cc:55:5e:78:f5:d1:27:0f:af:
b6:32:61:d5:13:8e:97:2c:6b:40:81:03:b0:10:4b:
26:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:32:BC:A8:8C:6F:40:01:EB:23:0C:0C:58:C2:AA:9C:5C:4A:D1:58
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:47:9c:b4:ac:26:e7:d7:58:df:9c:0f:73:55:70:4b:15:0b:
4e:cb:d8:fa:4f:63:a9:fc:36:8c:2f:c1:63:73:fa:f4:b0:f8:
3d:36:cd:41:97:30:33:8b:d9:54:7f:2a:3d:f4:88:6e:63:25:
e7:2d:8b:06:51:bd:39:e5:c2:51:fd:ad:1b:2f:5c:fc:8e:83:
ae:9e:bd:53:7b:23:1c:95:ac:d8:b9:65:67:5d:30:57:7b:f0:
5e:4b:7b:f1:ff:6a:cd:09:26:2f:c4:8a:56:da:14:2f:fa:99:
4f:c9:62:30:7c:07:64:83:92:27:22:fa:5c:8c:c7:67:f2:1f:
e6:ea:9c:a8:47:a5:ee:14:a8:7f:d4:97:c3:c9:d3:8f:41:09:
3c:43:67:cc:7b:c1:f0:4f:95:d5:fb:5a:c9:08:80:0b:03:6e:
9f:1d:88:b1:bf:4e:27:5a:fb:b9:b2:23:65:dd:74:0e:20:83:
bb:75:2c:be:6b:c8:fd:a1:64:a3:f3:e3:40:cb:18:91:5a:6a:
b1:e2:9b:e5:f5:d2:ed:80:b1:b4:77:9f:e6:23:1e:51:ec:f1:
62:ad:89:2c:5c:f9:35:9e:57:4a:5f:6a:0e:e6:75:33:49:29:
c8:30:3b:83:49:21:6d:f2:64:aa:75:11:4d:b6:76:12:a5:ed:
36:a6:ca:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:06:10 2026 by rpki-client