Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: oodmRrlUECy+vSKPaR2p/aBhZ0JMKgi5qizkBjKDlKc=
Subject key identifier: 36:8F:18:AC:58:B6:20:77:7D:15:B7:12:A8:89:49:1A:92:95:77:0B
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 01A17A71A3B3554EB96B8716293359B50BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 1338
Signing time: Mon 26 Oct 2026 23:00:30 +0000
Manifest this update: Mon 26 Oct 2026 23:00:30 +0000
Manifest next update: Tue 27 Oct 2026 23:00:30 +0000
Files and hashes: 1: BV_wbDPbUT8cQpcSNghKFwGtfvA.roa (hash: ICfuWyqr7El/ZDMz8MEEp0z3PKwy83J5F2WdPeRDG0A=)
2: BtrLSX90RAzPB8q1LlQ_3fEu81g.roa (hash: IqKkz+SIVV58QahCkxGAqKBl0a+skMTLBVSIzhk1MFc=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: jm9D3isfYqBIbbJXRDAuLLqEnEQ0hjgW0iBv+N0cFjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:a3:b3:55:4e:b9:6b:87:16:29:33:59:b5:0b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Oct 26 23:00:30 2026 GMT
Not After : Oct 27 23:00:30 2026 GMT
Subject: CN=368f18ac58b620777d15b712a889491a9295770b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:96:f6:70:5a:ca:95:5e:6d:d4:f9:12:81:
fe:02:55:46:1d:10:04:09:c5:ed:7c:3a:60:b8:6d:
de:77:c4:91:9d:5a:26:53:b3:3d:4c:7b:d8:39:1a:
e3:5f:db:22:65:ab:ff:cb:21:12:de:9d:7c:a4:33:
76:84:01:a8:4c:90:6a:61:a5:6b:30:6f:30:29:3a:
04:9e:65:1f:e8:f6:dc:e0:fa:3a:1d:9f:8a:0a:68:
dc:30:7a:4c:93:e4:62:dc:5c:eb:4f:33:b8:e4:d4:
7b:aa:44:5d:d6:1d:d9:78:4b:4c:92:a4:0a:02:88:
c2:13:1a:b3:9c:42:5d:05:47:8e:5a:8b:3f:91:aa:
a5:1c:8b:11:43:66:57:5f:a4:c1:8a:b1:f6:2f:05:
df:54:b2:16:5c:81:82:71:86:cc:e2:ff:7b:24:32:
7e:0c:e8:15:b4:ce:d4:44:e1:a8:5c:09:b6:ba:cf:
1b:a5:9d:47:89:d6:69:28:a0:81:4d:ea:e7:62:2e:
c8:f1:96:38:0f:51:38:a0:ec:e7:4b:d8:fb:2a:c4:
c5:0d:f7:42:8f:46:aa:3e:64:74:de:e5:55:fe:b4:
06:5f:7f:f2:4c:8c:2a:15:aa:66:f3:8e:62:0f:cf:
64:a2:25:68:25:ea:b6:9a:53:ff:ed:5a:94:60:76:
83:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8F:18:AC:58:B6:20:77:7D:15:B7:12:A8:89:49:1A:92:95:77:0B
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:23:de:d8:0b:a2:d8:8f:3b:60:dc:80:50:ba:55:c2:2d:67:
a4:dd:c3:b1:68:ea:67:fe:52:40:76:15:1a:74:2f:6c:2a:46:
72:59:fc:0c:56:80:92:86:09:60:f3:18:64:00:3c:b2:32:1b:
c4:58:34:37:c0:0d:2c:00:40:9e:29:8b:47:9d:36:e0:89:57:
8e:de:7e:e9:95:54:4a:7f:ab:24:6d:f1:54:2e:d4:e1:cb:81:
93:6e:6d:a2:2d:66:31:f2:9f:c7:b6:5a:b5:5f:7b:62:01:d6:
74:05:e3:a1:4d:5d:e4:e6:48:f5:2c:c9:e4:80:90:3b:51:62:
8b:04:ba:98:d6:75:d6:19:71:06:a9:26:13:ee:e4:ba:65:cc:
ac:85:14:2f:b5:85:38:62:19:d8:b3:bd:5b:66:7f:88:c2:71:
51:21:04:85:92:7d:dc:5d:93:dd:90:fc:46:f9:56:c3:7a:16:
89:d5:27:da:b6:57:26:45:d4:34:14:ef:f8:4f:44:04:31:52:
ea:6d:1c:45:df:7f:14:e8:b3:ff:52:0e:17:d8:5e:27:45:cd:
be:a5:d0:bf:8b:93:55:5e:f2:fe:95:4d:98:7d:da:cf:0b:49:
9c:34:2b:8c:7f:f8:54:de:7a:46:2a:a2:df:11:e9:9c:99:11:
40:51:77:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:42:52 2026 by rpki-client