Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/a4b6b2-8edc-4e97-8337-86e076280f7b/1/ycxfyOcBVDdjrPLMO8CPMkY_oow.mft
File: ycxfyOcBVDdjrPLMO8CPMkY_oow.mft (raw, json)
Hash identifier: /Z59DBhAdChIQPRW5kLfQ//t7wFAwDfc/AvWGY2fAqU=
Subject key identifier: CE:5B:AD:AB:D0:7E:5E:AC:38:31:43:1C:FF:B0:BC:E1:04:3C:4B:4B
Authority key identifier: C9:CC:5F:C8:E7:01:54:37:63:AC:F2:CC:3B:C0:8F:32:46:3F:A2:8C
Certificate issuer: /CN=c9cc5fc8e701543763acf2cc3bc08f32463fa28c
Certificate serial: 01A164FD7F91B909F7DF504A9DAEF10CCD6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycxfyOcBVDdjrPLMO8CPMkY_oow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a4b6b2-8edc-4e97-8337-86e076280f7b/1/ycxfyOcBVDdjrPLMO8CPMkY_oow.mft
Manifest number: 32
Signing time: Thu 22 Oct 2026 19:01:37 +0000
Manifest this update: Thu 22 Oct 2026 19:01:37 +0000
Manifest next update: Fri 23 Oct 2026 19:01:37 +0000
Files and hashes: 1: ENW-zt_XOq72TUtcJz3AOjtHm38.roa (hash: zsdi1ZIA59lGBKG2MSkftLbtRQ9yicDr9Hyo4DLVavw=)
2: ycxfyOcBVDdjrPLMO8CPMkY_oow.crl (hash: jN4fVNCWz4JrKGjMU4eAawvCgpwMCHRoEr0mfea/eQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a4b6b2-8edc-4e97-8337-86e076280f7b/1/ycxfyOcBVDdjrPLMO8CPMkY_oow.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a4b6b2-8edc-4e97-8337-86e076280f7b/1/ycxfyOcBVDdjrPLMO8CPMkY_oow.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycxfyOcBVDdjrPLMO8CPMkY_oow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:fd:7f:91:b9:09:f7:df:50:4a:9d:ae:f1:0c:cd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cc5fc8e701543763acf2cc3bc08f32463fa28c
Validity
Not Before: Oct 22 19:01:37 2026 GMT
Not After : Oct 23 19:01:37 2026 GMT
Subject: CN=ce5badabd07e5eac3831431cffb0bce1043c4b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:88:90:62:31:e4:f6:1a:d7:48:34:09:ca:5d:
b6:bb:ac:22:b8:66:f9:e8:cc:fb:c3:22:64:bb:09:
0b:2b:f5:bc:8a:98:85:af:5f:09:55:26:94:98:41:
42:d6:91:2d:6d:b0:43:a0:bd:14:43:3d:f0:65:ad:
ac:3a:d9:6e:2d:c8:54:b8:e3:77:54:06:4e:fc:f4:
c9:35:55:9e:f5:46:2b:5c:7f:09:45:5b:b0:a1:49:
3f:b0:2a:d1:b9:df:ba:6f:96:18:5d:d6:cf:06:a3:
a0:4c:30:55:cd:1c:f0:5e:1b:fa:3b:44:fc:6a:78:
6c:31:73:33:55:68:2a:38:25:e6:39:d1:eb:63:9d:
e5:b6:2f:b2:59:7a:f8:19:45:bd:43:75:d8:bd:6c:
43:fd:4b:27:61:78:97:d3:fc:28:2e:85:99:9d:6e:
71:4c:eb:aa:a2:82:a0:1d:d2:0d:3b:b4:8d:bc:ee:
73:7c:8d:b5:19:09:27:04:4a:a0:f7:13:af:60:ff:
46:7e:a0:8e:7b:ce:29:28:5b:ee:cb:cd:b0:22:75:
fe:a9:d6:ca:42:bb:05:db:37:91:30:54:94:ce:37:
16:45:58:99:ac:38:03:9a:64:d5:e1:c5:35:f0:3f:
40:f2:91:d9:23:59:cf:78:e5:96:2e:cd:37:9b:9e:
20:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5B:AD:AB:D0:7E:5E:AC:38:31:43:1C:FF:B0:BC:E1:04:3C:4B:4B
X509v3 Authority Key Identifier:
keyid:C9:CC:5F:C8:E7:01:54:37:63:AC:F2:CC:3B:C0:8F:32:46:3F:A2:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycxfyOcBVDdjrPLMO8CPMkY_oow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a4b6b2-8edc-4e97-8337-86e076280f7b/1/ycxfyOcBVDdjrPLMO8CPMkY_oow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a4b6b2-8edc-4e97-8337-86e076280f7b/1/ycxfyOcBVDdjrPLMO8CPMkY_oow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:40:e8:49:03:a9:72:51:40:73:58:0d:e2:cb:aa:2b:aa:05:
cb:a7:57:b8:71:83:df:82:29:a8:45:8e:42:0e:44:7e:22:07:
93:39:49:03:bc:e2:c8:df:c0:e7:55:48:f0:99:0f:67:cf:3b:
a0:02:7d:ab:6c:09:69:fb:36:57:f7:10:af:e1:e5:a9:0a:f6:
d4:af:c6:28:75:28:b0:1e:57:a1:ba:cd:68:de:ce:d1:ec:03:
9c:48:53:ac:ba:93:40:4f:f2:00:be:83:ab:83:d3:97:7e:a1:
21:d1:6e:63:4f:95:d9:6d:1a:3b:b5:e4:d5:94:5f:d8:3a:c5:
bc:63:40:ae:bf:65:2f:40:31:8c:1a:3b:b1:38:d5:fb:a9:8a:
21:85:17:5e:af:ed:53:5e:66:48:6b:5a:57:05:74:54:0b:e8:
15:29:72:b4:f2:bd:bb:82:45:7e:37:b5:7d:76:c1:32:83:ff:
da:30:2c:b6:6d:49:32:89:bc:cf:4e:71:cf:e7:74:21:ea:4d:
f8:d4:35:3c:1c:90:cb:93:3e:0f:68:65:16:e3:55:54:2a:6d:
0d:3a:c4:3d:14:22:13:e0:52:49:44:a6:5a:6b:ce:0c:94:1c:
51:c8:74:43:5d:98:16:37:a7:4c:0d:a3:f8:a2:c6:1c:f3:33:
53:16:62:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:41:08 2026 by rpki-client