Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
File: YxGmnIFyBEhUkx8QClm9CJy4iBo.mft (raw, json)
Hash identifier: 5oIBS423ORZUx+/Y3mHtNTb83b+zcBvID4BKv4vwBis=
Subject key identifier: 70:C1:FB:9F:FF:90:83:85:A1:D7:A0:1D:A8:52:FD:06:2C:25:EC:10
Authority key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
Certificate issuer: /CN=6311a69c8172044854931f100a59bd089cb8881a
Certificate serial: 01A156D42CC23ED9C5AEE70DCE101F3D380C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
Manifest number: 1AB1
Signing time: Tue 20 Oct 2026 01:01:47 +0000
Manifest this update: Tue 20 Oct 2026 01:01:47 +0000
Manifest next update: Wed 21 Oct 2026 01:01:47 +0000
Files and hashes: 1: NITgwZ0BoycrXSGPU8iX7ZnWyHc.roa (hash: 5tWOFXf/UnsBI5wfRpAA1+yDyuJUDNX32cEt3vj5vdk=)
2: YxGmnIFyBEhUkx8QClm9CJy4iBo.crl (hash: BYmKBWh9DjGI404MEZLxnKNSW6droejgf6F+wjtcfWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 01:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:d4:2c:c2:3e:d9:c5:ae:e7:0d:ce:10:1f:3d:38:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a69c8172044854931f100a59bd089cb8881a
Validity
Not Before: Oct 20 01:01:47 2026 GMT
Not After : Oct 21 01:01:47 2026 GMT
Subject: CN=70c1fb9fff908385a1d7a01da852fd062c25ec10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:bf:2d:c0:a0:27:c5:65:8f:64:32:b3:c0:
46:ef:20:c1:19:ef:73:d6:7b:cc:91:18:a0:96:5e:
4c:be:ce:f3:11:62:52:d6:f8:26:6d:b0:0d:c8:c0:
09:46:d0:9a:20:49:6b:70:1a:7b:33:e4:25:73:5d:
f5:3a:f1:fc:80:4d:8f:a9:90:5c:84:82:09:00:ed:
20:15:2f:f4:f3:5e:6b:01:30:fd:ef:3d:a7:17:74:
75:9b:88:2f:53:02:dc:b2:4e:1f:3d:f0:02:86:ab:
84:af:86:c9:0a:19:c1:b8:c4:cb:88:8f:3e:3e:2e:
fa:59:a5:e0:30:bd:a6:41:2c:2d:11:e6:a1:c0:07:
10:fc:e5:b8:ca:4d:ea:2a:16:a4:4e:3b:ed:6a:05:
ee:9e:98:41:43:73:07:55:f0:75:ad:9e:90:66:9c:
ea:82:75:15:e2:47:28:c8:82:a6:3d:ed:c4:90:73:
a4:cd:6a:35:05:df:67:44:e1:a8:34:c0:37:9e:7b:
f9:31:8d:22:54:31:bc:e0:55:b8:72:1f:3d:ba:ed:
96:3b:7a:00:18:67:9e:e1:d0:1d:78:22:b0:1e:f2:
79:b4:90:7a:d8:26:24:5a:8d:f4:7d:46:e3:2b:e4:
10:cb:ed:ae:86:0f:bd:85:3d:e0:41:12:a2:69:4e:
56:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C1:FB:9F:FF:90:83:85:A1:D7:A0:1D:A8:52:FD:06:2C:25:EC:10
X509v3 Authority Key Identifier:
keyid:63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f3:08:f4:f8:3f:ac:2b:ce:36:2d:b5:78:14:84:4c:be:59:
16:93:12:a3:33:1e:0e:a6:43:e4:09:83:88:a3:1e:a7:66:5f:
c4:b9:1b:43:bf:06:89:67:4e:62:98:4d:66:3f:f5:c7:30:18:
88:82:af:26:de:d0:06:37:c9:28:e0:ea:38:f8:5b:8d:f4:75:
b0:f3:d0:e3:b8:ba:77:11:30:fe:9f:80:55:e3:48:be:2b:53:
45:58:47:d2:0c:ee:a4:64:5b:69:3b:7b:06:89:0f:81:92:e4:
d0:ba:7b:8e:39:af:b5:f3:24:83:cd:3b:1d:f7:91:3c:51:17:
61:8b:57:c7:89:84:8b:5b:47:c0:f6:db:e3:f3:5f:ff:aa:aa:
df:9b:67:5e:05:ee:c6:29:30:3e:5d:ea:f4:ee:e3:e7:bd:5e:
e7:24:48:f9:87:ff:d2:6b:6d:2c:c7:a5:89:5f:88:7b:ae:57:
a6:28:1e:c4:d1:ef:5e:96:d7:33:2b:b8:cf:b6:b1:47:a9:81:
31:44:4f:57:90:89:33:a5:4d:b5:c3:63:d1:4f:49:b3:75:23:
73:be:b7:d5:51:d2:90:e8:d5:98:d9:09:7c:a6:83:c9:fb:69:
d1:f1:7c:55:18:41:3d:f4:0c:c5:a9:d3:61:bd:a3:85:78:cb:
d9:d1:35:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:30:37 2026 by rpki-client