Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
File: yAYJ8hhRvff3TtGPDwnfku23U1U.mft (raw, json)
Hash identifier: pIhDVS+1cva/4KkozOxorQ4O+8bBuSWonp1xeNFee4U=
Subject key identifier: 86:91:D9:6C:28:6C:6E:00:68:2A:CA:34:9A:6F:A6:F7:27:83:6E:5D
Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
Certificate issuer: /CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Certificate serial: 01A18ED48C43B28CEBD8E92D5EB3188F4A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
Manifest number: 1293
Signing time: Fri 30 Oct 2026 22:00:56 +0000
Manifest this update: Fri 30 Oct 2026 22:00:56 +0000
Manifest next update: Sat 31 Oct 2026 22:00:56 +0000
Files and hashes: 1: 7dhm2Zcd4Yp-TNCgcfPEdG07eU0.roa (hash: Ku59KYA/bpOTiSrNCRzEUdSrtiwxD1BQ8G4rzI5+xwk=)
2: yAYJ8hhRvff3TtGPDwnfku23U1U.crl (hash: 7OGyTRKoYfmxm4b57ovzt+lejOOVrgqq3lhOvFfLfGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:d4:8c:43:b2:8c:eb:d8:e9:2d:5e:b3:18:8f:4a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Validity
Not Before: Oct 30 22:00:56 2026 GMT
Not After : Oct 31 22:00:56 2026 GMT
Subject: CN=8691d96c286c6e00682aca349a6fa6f727836e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:84:b1:cf:48:dd:3c:91:57:19:ad:f2:c3:
25:15:dc:a1:26:60:be:3e:9c:7f:5a:51:c6:38:03:
d0:5d:f4:67:89:1d:b5:52:5c:73:c1:52:37:91:a7:
2b:8e:38:71:9a:74:3d:72:0e:c0:d1:4a:0f:f6:bb:
aa:40:67:1d:71:e5:7d:b4:5e:cd:a1:c0:c7:dc:62:
e5:6b:89:56:f6:59:5a:9a:f1:48:bc:6c:ea:5a:e1:
c0:8a:0e:d1:29:ab:c0:39:ea:1d:b7:9d:30:af:3e:
73:68:c1:60:df:7d:e5:fe:f8:7f:92:64:03:58:a2:
6f:5a:fb:16:42:94:d8:5f:56:80:df:94:82:8c:cb:
98:31:d7:c2:5b:ad:f9:a7:5c:ec:e7:5f:21:e1:6c:
f0:ec:f4:08:02:5d:bb:4f:3e:8d:6e:66:c0:4a:01:
39:8c:e8:84:4b:08:87:71:ff:9d:78:ff:fe:bb:49:
fb:8a:0a:3d:b6:ef:df:71:01:b3:a3:73:6b:36:07:
c7:89:de:b1:a6:3a:0d:67:40:59:07:e2:15:4a:2f:
e6:bc:89:01:fe:26:2d:3b:b4:25:81:87:2f:2a:77:
d5:ff:f8:31:c2:ff:bb:a2:ef:f6:73:ec:5a:7c:e7:
74:61:a2:c3:2c:61:c6:7c:0f:0b:d4:07:a6:1e:36:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:91:D9:6C:28:6C:6E:00:68:2A:CA:34:9A:6F:A6:F7:27:83:6E:5D
X509v3 Authority Key Identifier:
keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:15:53:d8:19:b8:7d:c7:13:44:bc:be:ab:9b:57:19:66:89:
30:f4:68:d1:22:e0:a5:bb:84:db:97:6f:b2:ab:ff:fc:0c:3c:
9e:d2:33:fe:50:42:74:fe:93:ad:68:1f:dd:b7:99:d8:94:d4:
d7:03:48:54:cd:84:85:06:3a:60:17:91:a7:13:47:2f:3f:53:
63:84:08:f4:97:42:41:1f:c0:66:23:3e:8d:7c:e0:8e:6c:bd:
4c:96:49:ff:b0:2c:20:3e:8b:ba:ed:52:08:a5:d5:92:9a:23:
3c:cb:9a:90:89:4b:d0:b8:ac:1d:ee:ec:21:96:01:64:62:0c:
4a:c7:57:15:48:e9:32:40:c3:6e:b6:81:06:c8:0b:d1:fe:f4:
8d:c6:95:bb:0c:1e:97:35:09:51:13:cc:d1:1d:a0:85:fb:58:
ae:08:b4:da:1d:34:b1:38:8e:2f:14:ff:58:81:71:cb:e8:17:
b4:3a:a6:f2:5a:45:59:56:b9:d5:57:80:06:3d:ff:fc:3e:f6:
93:7f:c3:f1:10:0d:06:14:9f:01:f5:83:96:cb:7d:4e:73:90:
cd:c4:50:25:c3:aa:75:e0:6e:cf:22:10:fd:fa:e3:f8:fe:ad:
1a:90:a4:9b:b4:af:48:89:95:39:8b:a7:c9:79:6e:56:d5:9d:
df:ef:1d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:17:28 2026 by rpki-client