Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
File: _yXZxSk7p7_lIHSsJ_x9-aZJshs.mft (raw, json)
Hash identifier: v/ykAmxAWid+MIrlRn52aZhM2Wi0RCn0D4GHaSrwu7Q=
Subject key identifier: CE:78:9B:7E:35:C5:6B:60:FE:F9:E9:0B:D1:C5:DB:C1:95:F4:F5:3B
Authority key identifier: FF:25:D9:C5:29:3B:A7:BF:E5:20:74:AC:27:FC:7D:F9:A6:49:B2:1B
Certificate issuer: /CN=ff25d9c5293ba7bfe52074ac27fc7df9a649b21b
Certificate serial: 01A181BE1379EA6A4A64433D3B94234E6216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_yXZxSk7p7_lIHSsJ_x9-aZJshs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:01:19 +0000
Manifest this update: Wed 28 Oct 2026 09:01:19 +0000
Manifest next update: Thu 29 Oct 2026 09:01:19 +0000
Files and hashes: 1: VoyMNhhHVQ4I5z9WjjUHws6hk2U.roa (hash: 07v8p+Qbq8NkDFnmR77Sitj/ACMVAdh3jZDXmBPQOXA=)
2: _yXZxSk7p7_lIHSsJ_x9-aZJshs.crl (hash: cK4ovBPkkbfeMKEsgPqeThem6NX7MXXydpZNTEgyvVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_yXZxSk7p7_lIHSsJ_x9-aZJshs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:13:79:ea:6a:4a:64:43:3d:3b:94:23:4e:62:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff25d9c5293ba7bfe52074ac27fc7df9a649b21b
Validity
Not Before: Oct 28 09:01:19 2026 GMT
Not After : Oct 29 09:01:19 2026 GMT
Subject: CN=ce789b7e35c56b60fef9e90bd1c5dbc195f4f53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:0b:77:5a:83:30:df:59:e4:10:12:74:be:
db:e4:ba:06:0c:ef:e4:50:7c:39:0d:33:eb:cb:f3:
92:1f:ee:62:83:c2:83:99:b5:91:22:21:17:39:5f:
90:03:af:7e:51:ba:ff:c5:2a:b2:8b:62:10:c2:c0:
96:a1:ac:e4:8c:6a:e4:b4:ad:ad:f2:73:bf:94:4e:
a6:1a:b5:e3:09:8e:1b:7e:87:9f:c7:fe:a3:3c:d7:
0e:b1:20:9d:dd:c0:7e:1c:b0:4d:54:ca:c9:20:5c:
2a:a3:f1:87:ee:cf:b7:fc:7f:21:d5:a5:86:b6:5c:
c3:88:72:f1:35:54:d0:31:af:b3:e3:39:c7:da:23:
f9:f2:b5:93:be:71:78:4b:a1:88:d4:38:3f:6a:3b:
97:78:7d:65:52:eb:5c:87:52:18:67:71:18:62:54:
42:66:eb:42:db:0e:c6:49:32:33:aa:c0:7c:80:22:
d1:c3:e4:a8:c4:df:7e:3e:65:d1:45:be:d1:8e:18:
7e:2c:df:8e:a0:7e:8b:fe:02:3a:2a:79:5f:17:25:
4f:63:89:7f:2e:f6:b5:f0:d9:80:85:50:62:9f:c2:
e1:24:ae:6d:6a:49:a9:32:30:93:aa:65:f2:31:76:
a0:6d:b3:e2:bc:4f:e0:51:98:be:f5:e4:c0:53:17:
d5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:78:9B:7E:35:C5:6B:60:FE:F9:E9:0B:D1:C5:DB:C1:95:F4:F5:3B
X509v3 Authority Key Identifier:
keyid:FF:25:D9:C5:29:3B:A7:BF:E5:20:74:AC:27:FC:7D:F9:A6:49:B2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yXZxSk7p7_lIHSsJ_x9-aZJshs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0e:44:f4:e7:b4:07:b0:01:ef:40:5a:c2:89:41:94:a5:d0:
08:24:6c:d8:80:54:e9:3a:e4:ba:7f:24:e3:16:11:97:07:20:
45:61:43:1a:4f:65:12:29:21:48:d9:65:0a:08:ea:10:74:e7:
77:f0:b8:57:0d:86:e3:13:6b:16:10:38:76:e3:2a:ec:03:81:
f2:1f:21:c5:8e:1c:c1:c6:a9:49:26:30:d0:9b:e1:d8:e9:eb:
6a:9c:43:8b:1c:61:bb:67:b5:c2:05:30:f6:70:fc:6c:40:04:
e2:08:a0:98:4d:21:d4:1a:9b:41:c1:5a:35:fe:da:aa:a6:e8:
59:4a:a3:72:ce:29:56:57:c6:fa:92:4a:8b:9b:d6:1b:ca:70:
ab:f5:1c:3f:bd:a4:93:24:46:7b:25:4f:f2:a5:c9:7c:d5:97:
c7:8d:ad:4b:35:44:5a:e7:dc:59:f6:eb:d1:37:1b:8a:b1:b7:
51:4b:75:7f:17:02:28:96:d8:f8:44:d0:62:47:21:cb:c3:7e:
93:56:fc:06:fd:cd:4c:48:b5:63:88:f8:35:25:16:76:6f:03:
60:b4:ea:dd:b2:01:09:53:3c:0a:53:33:95:c6:b8:36:99:e8:
70:ca:03:d5:e4:d2:cc:ed:7e:b0:3c:fc:8f:2f:ba:f2:97:5d:
0b:96:a8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:31:15 2026 by rpki-client