Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
File: YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft (raw, json)
Hash identifier: hXFEsA9bQgGELIrufHRkBSfxNuqfIpxI9ZQzWBQ5QUo=
Subject key identifier: 87:7D:7B:5F:55:C3:24:12:54:B8:C7:DB:DB:46:77:26:95:11:5F:11
Authority key identifier: 60:2C:CC:74:B4:FD:14:DA:17:BD:6B:69:BA:9E:19:C2:48:97:F3:3D
Certificate issuer: /CN=602ccc74b4fd14da17bd6b69ba9e19c24897f33d
Certificate serial: 01A15553BB409ED2B742EA89404137DBBB14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCzMdLT9FNoXvWtpup4ZwkiX8z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
Manifest number: 012A
Signing time: Mon 19 Oct 2026 18:01:53 +0000
Manifest this update: Mon 19 Oct 2026 18:01:53 +0000
Manifest next update: Tue 20 Oct 2026 18:01:53 +0000
Files and hashes: 1: YCzMdLT9FNoXvWtpup4ZwkiX8z0.crl (hash: eW+8b6U3tTDZUzwp9UT88khiKJYwVTthtwuFNNZwA3w=)
2: yvqKASYvxT3MxhtOS5-emaUxBc8.roa (hash: tVq+tnubXS3rvDyuKQj8/nMobzt5kNaE/XUuamGgdBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCzMdLT9FNoXvWtpup4ZwkiX8z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:53:bb:40:9e:d2:b7:42:ea:89:40:41:37:db:bb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602ccc74b4fd14da17bd6b69ba9e19c24897f33d
Validity
Not Before: Oct 19 18:01:53 2026 GMT
Not After : Oct 20 18:01:53 2026 GMT
Subject: CN=877d7b5f55c3241254b8c7dbdb46772695115f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:35:4c:24:85:d2:56:b1:fe:54:34:30:77:37:
65:55:bc:e5:36:74:aa:d2:1c:0b:c3:04:26:19:ce:
fe:c9:7a:06:88:e3:e5:9e:32:6d:25:39:08:c7:63:
69:46:a9:a1:28:85:6d:8d:eb:58:80:15:78:4e:c1:
4c:6a:d8:01:d9:2b:ab:e8:59:cc:1f:2d:6c:ff:fe:
03:3b:e6:a1:49:c0:91:6f:05:4e:8e:57:f2:eb:fd:
0d:2c:ab:fb:45:ff:c8:2c:16:b1:f9:a2:82:86:53:
76:29:d5:1d:26:9c:a6:48:47:52:75:5e:d6:70:6c:
41:67:38:f8:8a:13:54:a5:14:dc:13:31:49:15:38:
a9:52:8c:0c:b4:56:4f:26:c8:27:bf:65:33:a4:dd:
3f:97:23:40:0c:85:1a:1a:15:18:05:1d:24:c7:a0:
03:3a:1e:ff:4d:6e:9c:a1:a4:d0:a8:90:09:75:1d:
73:0a:40:44:64:2a:a8:f9:0a:23:fc:e3:0f:dc:71:
0c:d6:94:3c:1c:29:a9:75:90:1b:4a:f9:81:3b:b8:
97:d6:fc:0b:da:70:e4:c1:1b:dc:1b:88:f0:a7:54:
36:04:8c:1f:8f:62:53:61:e7:4f:51:82:ff:2b:d2:
20:79:bc:0f:d8:2d:62:3e:73:96:87:cd:95:e1:c2:
f3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7D:7B:5F:55:C3:24:12:54:B8:C7:DB:DB:46:77:26:95:11:5F:11
X509v3 Authority Key Identifier:
keyid:60:2C:CC:74:B4:FD:14:DA:17:BD:6B:69:BA:9E:19:C2:48:97:F3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCzMdLT9FNoXvWtpup4ZwkiX8z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:55:b5:24:55:0b:f2:ba:b8:05:a8:a3:31:40:0c:db:44:ad:
11:26:6d:6d:99:bb:41:8f:44:c0:8f:ec:39:e8:c1:2b:a4:d9:
af:37:a3:ac:bd:d4:ff:9d:0c:b6:b8:60:77:0c:fb:24:ac:b6:
d6:d1:d9:08:27:1a:57:b9:df:f4:49:4b:17:a3:ea:44:80:89:
31:a4:73:8f:8a:30:da:0a:14:64:21:3d:eb:65:7c:8a:5b:2b:
4f:d4:50:44:9e:54:50:7a:a8:44:44:d5:e3:9c:e8:f4:62:7c:
3a:15:d0:7a:76:a8:23:27:c3:cf:ee:8f:24:7e:07:23:00:dd:
78:06:43:cd:2b:1c:82:88:6c:f7:b9:d2:31:64:69:11:b4:65:
51:88:9c:c6:44:15:15:a3:7e:cd:5c:4c:dc:27:fe:70:41:a0:
12:8c:bd:4c:18:5f:65:50:bb:f2:e9:df:44:59:cc:5a:10:22:
b6:5f:a2:d1:99:2f:84:bf:21:53:1d:5b:72:e7:c2:5b:f8:39:
38:a5:b9:90:d9:e4:e9:35:55:e2:27:59:ce:35:a5:91:78:03:
ce:6c:95:d3:30:85:29:22:89:7c:10:5b:37:3e:81:a0:97:fe:
9b:cb:86:7e:8a:d7:8a:53:12:b9:2d:87:a8:7f:61:a5:2b:c4:
16:45:d8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:53:39 2026 by rpki-client