Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
File: yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft (raw, json)
Hash identifier: O6aCYHCLtbC/YW8NWdqcIQkt+qV2+VqPBY0pNVEY158=
Subject key identifier: EE:6A:E4:F7:30:63:B0:2A:A0:F1:E8:A2:2F:EA:EA:61:6B:07:C2:30
Authority key identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
Certificate issuer: /CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Certificate serial: 01A17394C6FA81BF6E1E7CE6ED9CD9762983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
Manifest number: 0455
Signing time: Sun 25 Oct 2026 15:01:32 +0000
Manifest this update: Sun 25 Oct 2026 15:01:32 +0000
Manifest next update: Mon 26 Oct 2026 15:01:32 +0000
Files and hashes: 1: Pk6dmv-1h5zWIXu5Oty1Pp_3yV4.roa (hash: /ND/9TFeaNgP6XF6YHep3PGuc7vk/LLfQoeSDsS92Uk=)
2: yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl (hash: Az6uXz6UkJXLDeGrk0T8XIHyhQrc97jB+2Q1Vym0/rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:94:c6:fa:81:bf:6e:1e:7c:e6:ed:9c:d9:76:29:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Validity
Not Before: Oct 25 15:01:32 2026 GMT
Not After : Oct 26 15:01:32 2026 GMT
Subject: CN=ee6ae4f73063b02aa0f1e8a22feaea616b07c230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cd:85:d0:a8:33:0c:aa:75:ad:2d:37:3d:0d:
60:48:82:df:06:98:1c:f1:47:a5:4e:76:34:19:89:
08:ac:52:93:7f:12:55:a3:4a:58:08:65:4d:11:04:
4e:e9:73:67:9f:b8:a6:51:80:24:ff:b8:76:73:7c:
d3:c2:4b:4a:9a:b0:43:1c:fa:0f:db:c8:b8:b0:0f:
56:d2:c8:93:a4:44:93:79:01:ee:83:dc:50:c2:8c:
c9:5d:43:41:9e:45:36:7a:e9:0e:65:a7:ad:59:99:
04:ee:84:cf:76:fa:78:4c:20:9a:d0:ab:93:2d:a4:
46:8b:a0:7f:88:92:f0:87:45:c9:74:cc:47:d3:b9:
fb:d0:37:b8:61:4e:67:0d:c8:14:02:c1:3c:42:af:
22:a7:0f:5a:79:78:55:71:6e:9a:59:77:79:dd:26:
2b:89:b7:d6:dc:c6:e0:ca:89:b1:c9:ad:4c:82:4f:
cd:69:6f:4b:a4:21:27:23:07:df:39:5f:c5:f7:f8:
e7:9c:5c:9b:a5:c8:fa:0f:d4:fe:7b:fd:77:3a:39:
88:d2:c4:e7:dc:0f:3a:0a:3a:39:4e:b1:25:31:87:
93:6c:0b:55:3c:f1:e4:25:ae:2d:33:90:ee:14:71:
c3:83:22:32:f1:9d:66:5c:9f:7c:77:29:82:60:f2:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6A:E4:F7:30:63:B0:2A:A0:F1:E8:A2:2F:EA:EA:61:6B:07:C2:30
X509v3 Authority Key Identifier:
keyid:C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2a:01:60:23:27:e4:fa:5e:c7:40:87:a4:76:59:93:4a:24:
42:46:de:e1:f5:11:22:cb:ee:d0:7f:2d:76:e1:b5:f5:26:52:
85:2d:51:10:6a:d5:98:8a:81:0e:bc:da:ac:1b:34:38:4b:ad:
49:de:dc:be:03:00:48:60:ea:58:e0:c4:61:64:0b:b9:6b:8c:
c8:67:60:cc:33:27:af:67:ed:60:d1:49:70:cb:5a:5f:c4:4f:
72:96:6b:64:cc:c5:3f:a3:f7:1a:ed:c9:18:e7:35:70:54:20:
3a:c1:1e:2e:1f:c5:26:cd:22:a8:23:ac:17:b3:ba:87:25:2c:
b5:21:b7:09:5f:3a:1e:12:2c:07:28:70:87:64:7d:a1:96:59:
c4:d9:22:5c:4f:83:ba:8c:e6:6f:ca:2b:42:32:29:18:54:f2:
df:7b:0f:96:89:a0:1e:53:d0:e2:8c:ec:b4:29:00:68:c7:3f:
8c:03:05:92:8d:52:3a:fb:d4:94:7f:49:06:88:c3:4a:e6:20:
8b:21:7a:6a:5b:20:36:88:02:ce:79:2c:43:be:52:ea:12:2f:
50:16:39:8a:58:6b:8a:c3:32:1d:d3:55:49:ce:ab:66:67:1c:
7d:90:29:39:09:58:fb:e8:13:1d:33:ab:e7:47:fa:83:d1:32:
1e:e9:1f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:58:08 2026 by rpki-client