Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File: yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier: p7D5JFSyIjtGNcUgR5f/V6fOwTEVJ6VB8O/eKFEijo8=
Subject key identifier: 16:17:52:6C:DF:06:2F:E2:66:77:17:89:95:DA:03:70:26:09:4F:32
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 01A178F174287A55C3FB8520A7DF198A2BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number: 17E0
Signing time: Mon 26 Oct 2026 16:00:52 +0000
Manifest this update: Mon 26 Oct 2026 16:00:52 +0000
Manifest next update: Tue 27 Oct 2026 16:00:52 +0000
Files and hashes: 1: F71lf1rO3_j_YrGDLp8vXCnWwNQ.roa (hash: 2T6cEG+G6vR7CgItj3CD3tb1JHo1M1LaioFUbAKMaFQ=)
2: KbGZziqCA41JgOpe8AUOSiv8rIM.roa (hash: MBAhT/6sVckMLfrlu1S3S4sTHwbcNuOAQSyBUhp+xNk=)
3: Lr_Xbb1THDKqD6RwPgUdUA9h3EY.roa (hash: cfMlImvmxi+0oJBR3nteg7NdpbusKTlCxQY6ByRViVA=)
4: ZkNagawyRZ70RDIXLqeICJ_NWvA.roa (hash: 1+wxgjSOWcm3+O0IK2qUtncsQ8Yyn6qzh3/LjTc9BqU=)
5: ba1PPFUfJQPbN0qUaPYUh_lra00.roa (hash: io880q/jxrQW2nbvQeP7+TanhHJv6EExV9pj2tnHEls=)
6: dNRPSnfq_fz0h0Bx9FN48757K24.roa (hash: PQQSUXtMe+CSMqNhT22afSsgYKHVv8p7crL3JYYOlA0=)
7: fotaW3reFeI2SLYUxkvM2Rp9oWU.roa (hash: 6ry4szc/4WpgdCqU6mLC/W0kQtFV5fQ4EQEyOj83ctw=)
8: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: dShModgttGePLhT2T4m856Gn5Ab/4ZPafBkkEJfrJBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:74:28:7a:55:c3:fb:85:20:a7:df:19:8a:2b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Oct 26 16:00:52 2026 GMT
Not After : Oct 27 16:00:52 2026 GMT
Subject: CN=1617526cdf062fe26677178995da037026094f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ab:c8:cf:6b:ec:00:3d:07:64:fa:f1:6f:5e:
58:ed:26:18:83:b0:af:ff:ac:a5:c6:47:2d:23:eb:
6d:3d:ca:1c:df:9a:b0:ab:65:fc:4e:f9:7e:79:f0:
56:ba:2b:7c:9c:4b:64:d2:79:41:d4:ab:22:fd:01:
29:5b:ac:4e:53:d9:82:52:89:75:1b:f9:d9:e2:61:
c3:fe:91:06:7e:49:ff:a2:ab:af:5e:64:13:39:f7:
04:14:88:a0:02:a8:ba:ee:2e:bc:23:87:0c:9e:b6:
8e:f5:2d:14:4a:f7:69:fc:ba:8e:9f:02:44:97:a2:
8b:92:6a:33:60:6b:7e:d0:82:27:03:da:0b:36:ec:
86:44:df:16:b0:dd:06:a1:5c:7d:c0:c4:2f:3d:11:
2a:bc:bb:7d:66:3c:89:89:82:e3:b0:2d:db:75:30:
75:f1:0d:39:5a:12:e0:82:df:e1:c8:26:f6:93:8d:
a9:22:46:13:01:4d:19:7c:bd:bc:b7:8d:18:8e:b6:
0f:90:4f:50:54:fb:39:a7:62:44:cd:81:65:49:13:
52:25:4d:5c:30:54:85:a9:50:ac:89:0b:d0:6c:19:
9e:96:58:9a:ef:ec:cb:b9:89:6e:8e:1b:c0:3e:58:
cb:d7:32:1d:79:e0:b8:5c:a8:5e:d5:5f:76:7b:5e:
9f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:17:52:6C:DF:06:2F:E2:66:77:17:89:95:DA:03:70:26:09:4F:32
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:59:6a:dd:2a:df:63:4f:41:09:6b:da:23:c2:0c:5d:6e:73:
19:f0:ef:54:c9:3d:be:70:42:19:91:83:47:bc:2e:4d:c6:20:
21:b0:c9:59:26:ae:63:13:9b:90:90:75:d7:6a:7b:dc:45:74:
7f:10:bc:8a:50:e8:5c:19:ab:55:1b:40:8f:38:27:f0:64:c1:
6f:28:63:18:db:99:62:d4:28:80:52:f9:7d:07:8e:44:b2:89:
34:00:21:61:ff:e5:cf:55:81:12:df:08:db:99:a4:6f:1a:da:
96:3b:17:12:2a:7b:8f:6f:e4:9f:d9:1f:58:24:1b:d3:de:08:
7e:f8:2c:bc:6a:3d:63:5c:91:3b:29:ca:d2:df:71:e4:ae:6a:
5e:cd:2f:e3:b3:55:d6:c4:a6:cf:6b:d2:5d:a1:3e:5e:3b:5f:
1f:ac:55:93:7a:a1:72:ef:3e:5f:56:92:03:8a:40:18:17:a4:
39:ef:82:18:04:b8:bd:60:d1:fd:60:3a:11:e2:fe:43:1c:29:
c5:6b:d9:f8:5f:0d:ab:73:9b:86:61:81:b0:52:41:11:2d:ea:
6c:cd:b7:69:e4:24:eb:94:72:6f:dc:7d:8e:6e:c3:23:f7:92:
57:e3:7c:6a:85:21:32:0b:65:c8:6e:6c:66:cf:a5:9d:ca:ed:
fd:2b:02:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:56:13 2026 by rpki-client