Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File: yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier: J8q8ekHGpozdYfV/S6dz7rqaEm/IQ6Z/ga+2NNLcRUE=
Subject key identifier: 99:C1:2E:ED:32:17:A0:41:A6:BE:A4:46:00:F0:78:BE:7E:D8:60:7C
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial: 01A17EBD517B7CA7E15DCCB1110FB14E6991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number: 1322
Signing time: Tue 27 Oct 2026 19:01:38 +0000
Manifest this update: Tue 27 Oct 2026 19:01:38 +0000
Manifest next update: Wed 28 Oct 2026 19:01:38 +0000
Files and hashes: 1: D3wkpKKSoJovDsiCfvbh1DYTkx8.roa (hash: c0FcHGYTB+tG9IR/+QbyBfjUn2VqFpbtfy3DDserGhM=)
2: KSjHgXPRASqnBW1tjOtvhmkWPHE.roa (hash: h5XvzMTTFxSuHg9vWwCmjacM7SXacJTLfB8wl2n3Cec=)
3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: r6RhYCu3fIglfWaJ0ffWQfK+YYWrisCSytHfTxSWcFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bd:51:7b:7c:a7:e1:5d:cc:b1:11:0f:b1:4e:69:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Validity
Not Before: Oct 27 19:01:38 2026 GMT
Not After : Oct 28 19:01:38 2026 GMT
Subject: CN=99c12eed3217a041a6bea44600f078be7ed8607c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:25:84:30:71:45:75:03:02:57:5e:5f:7a:
28:23:96:26:70:e3:df:a2:a8:05:9f:c7:74:6d:19:
aa:c6:e5:d4:e4:1e:24:64:1e:62:d0:f0:02:66:db:
b9:71:13:ca:18:95:0f:86:4b:64:12:93:a3:3c:c9:
1e:88:ca:79:3e:d5:cb:c7:89:cb:f0:a2:d2:69:0d:
b1:67:3c:27:60:48:52:f8:16:72:a9:e9:d6:46:66:
ba:28:9a:26:be:18:34:64:03:34:7b:33:46:49:19:
b6:4d:66:ec:17:bd:31:61:ed:9c:ec:6c:e1:ce:53:
92:7a:63:1b:43:5e:18:58:d4:2c:80:05:ad:ef:9c:
53:62:27:7b:17:50:19:12:25:cf:06:6a:37:05:f9:
81:b2:54:d9:b7:44:fb:cc:51:4a:99:b9:ed:ef:69:
b5:e8:a6:2e:25:51:38:7f:c8:fb:c3:d1:9f:bc:64:
ab:e3:11:23:25:5d:93:fd:f1:f7:82:e6:95:88:88:
bf:50:7e:51:18:f9:e8:ed:0f:a9:ad:6d:ec:0e:26:
54:c7:be:32:19:85:5d:40:f5:a0:83:4a:5d:00:64:
31:16:b1:05:b0:49:4f:56:22:68:15:1a:33:de:02:
de:86:0b:b5:22:a5:52:f8:8e:81:db:51:a6:77:46:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C1:2E:ED:32:17:A0:41:A6:BE:A4:46:00:F0:78:BE:7E:D8:60:7C
X509v3 Authority Key Identifier:
keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f1:f3:7d:05:b9:a2:1a:dd:96:be:48:88:18:1e:5c:b9:b2:
0f:3c:f9:83:c7:5b:d9:2b:a2:15:98:ba:5e:73:a5:e5:cb:b8:
2e:80:42:a6:c2:aa:5b:c8:99:2a:be:8e:29:d4:36:1b:2c:9c:
e1:68:87:a3:9b:c7:e8:a3:4b:08:11:b3:c4:7f:5b:6f:c3:b0:
17:eb:61:fd:a9:72:22:5e:af:d0:4a:e4:34:d6:b3:03:d6:2e:
7a:bf:4c:72:d9:f9:a2:9b:34:0e:e9:c8:1f:04:15:41:10:e7:
57:59:3e:dd:8b:51:ea:63:aa:15:9c:d2:0a:ee:9e:87:67:b4:
08:bb:3a:57:69:27:27:ba:1b:a8:44:cd:59:e6:9a:67:d4:ec:
e9:53:df:31:36:35:34:f9:45:e2:da:ba:55:43:b7:25:3d:bd:
21:50:8e:37:77:88:fe:11:bf:ea:89:e0:c5:c8:0e:05:88:a5:
81:1b:d3:ab:fa:34:58:20:32:d3:2e:1c:30:a9:e0:88:a4:fb:
1f:c8:00:c9:a1:74:7e:0b:81:6b:e0:d3:9f:d0:af:c0:47:85:
ed:f7:35:cb:c6:d9:66:33:10:3c:c9:0b:30:c9:cc:76:cf:f1:
11:5e:6f:a8:c3:ce:87:01:9e:11:d2:ab:01:83:c2:9c:f8:1f:
9c:d5:0a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:56:45 2026 by rpki-client