Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json)
Hash identifier: wGOJRLIhpQRTCpo0bKl/CHqe8tHrRdv8GqZ2zh8TqLU=
Subject key identifier: 45:51:5D:DB:B5:68:E5:87:BE:AC:CA:7A:92:57:DA:B5:5A:17:BE:A9
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial: 01A17A3A765834CD3E3B7861803A2CC6DED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
Manifest number: 0914
Signing time: Mon 26 Oct 2026 22:00:14 +0000
Manifest this update: Mon 26 Oct 2026 22:00:14 +0000
Manifest next update: Tue 27 Oct 2026 22:00:14 +0000
Files and hashes: 1: xhEpzuzPdr7FtKXm7Ee8F2PUMuM.roa (hash: ZZQLbsx4gzi8cJrXW6oszW6wVIFBCSGts3XsIhFjyzo=)
2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: +sbf4hNmvANEEjEPnpL8+1g8MX7mwQeCJBE6MQGr6dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:76:58:34:cd:3e:3b:78:61:80:3a:2c:c6:de:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Validity
Not Before: Oct 26 22:00:14 2026 GMT
Not After : Oct 27 22:00:14 2026 GMT
Subject: CN=45515ddbb568e587beacca7a9257dab55a17bea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b7:35:69:23:53:d7:e0:8f:e8:df:a1:a0:c3:
db:8f:b3:58:2e:5c:88:14:f6:9a:84:43:e4:4d:4d:
76:da:f4:b1:ea:6f:48:34:35:ef:4e:7b:54:ff:6a:
fe:e0:bf:ce:47:ac:45:27:a8:d0:80:06:25:4e:67:
a3:13:51:3d:9c:c7:3f:f9:42:cc:bb:a6:fa:8f:a4:
5f:d8:84:9d:61:1a:45:96:8d:97:92:54:e3:0d:90:
2d:b5:74:a8:f2:2f:64:33:0d:d0:32:0e:a7:5d:5e:
65:b9:ab:df:41:3a:d8:08:2a:3c:da:74:10:b5:72:
2a:32:82:b6:7c:fc:24:12:41:9b:6a:eb:83:b9:93:
73:2b:f7:a0:d0:64:4c:a1:d2:d5:e3:b6:ea:d0:6c:
3d:31:87:dd:68:c0:9c:aa:ae:56:0c:4f:b7:3c:e9:
18:0d:4f:71:55:31:3f:41:62:99:48:f4:71:29:54:
ad:aa:a3:23:31:e3:c2:12:ff:fe:29:82:e1:9e:c9:
e3:25:0a:20:69:05:74:bc:44:56:53:78:2b:15:9f:
2c:40:e9:57:51:e7:be:fd:35:c3:cf:ab:22:5d:88:
a5:3f:5d:7d:1e:ef:5c:30:04:5e:d2:3a:d1:18:ce:
05:04:72:9f:03:38:6d:ac:5a:cb:39:36:db:36:14:
f4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:51:5D:DB:B5:68:E5:87:BE:AC:CA:7A:92:57:DA:B5:5A:17:BE:A9
X509v3 Authority Key Identifier:
keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:22:d4:75:6c:9d:3e:73:66:af:bd:76:eb:a3:ef:8d:b7:2d:
76:09:c4:c9:d2:04:3e:90:af:39:e4:7c:ff:d6:bb:ba:ef:29:
99:2f:73:fa:4e:30:46:d2:6b:ae:c6:a9:21:13:05:db:c2:40:
44:0d:e5:57:25:5f:bf:e7:3b:7e:10:af:9f:66:2e:b0:29:4a:
c9:d6:ea:15:83:6c:d1:10:e5:fa:b1:f8:aa:e9:47:ce:89:46:
f3:37:43:18:72:8d:e3:31:69:44:55:b1:e4:70:b3:d6:3b:e6:
ab:5e:60:f7:ff:f2:a4:50:d0:e4:71:b9:e4:8b:a7:bd:9a:40:
96:24:e1:16:d8:2a:44:66:c0:f3:5e:a1:07:ed:29:62:01:e3:
f5:30:d9:22:10:60:a1:90:f7:28:28:e0:28:c6:53:df:92:dc:
21:2e:94:5e:7d:54:5e:4c:9b:67:c0:0e:b9:2b:fa:34:b2:d2:
16:3e:87:ed:62:61:dd:6f:fa:5d:62:c5:65:e3:13:0d:17:ab:
ea:f4:25:97:91:e1:37:84:55:84:69:61:a3:a4:54:17:d0:19:
f6:b4:8d:d9:a2:87:55:a7:f0:9e:8d:24:dc:3a:b4:1d:b2:6c:
fb:1e:12:76:6a:3e:e3:1e:c8:b9:b1:81:33:fa:71:d8:28:2e:
95:b2:25:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:18:27 2026 by rpki-client