Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
File: _y4WckY7fxXxKyL4uWcEsEpdvpU.mft (raw, json)
Hash identifier: s3SahTyYQ9dD9FF+TAkpGU/rtLuAtfCnSvk+Qg0cdqo=
Subject key identifier: F2:7B:8B:30:94:A1:53:DC:05:AE:F5:A2:4E:F8:5C:A4:61:CF:86:BF
Authority key identifier: FF:2E:16:72:46:3B:7F:15:F1:2B:22:F8:B9:67:04:B0:4A:5D:BE:95
Certificate issuer: /CN=ff2e1672463b7f15f12b22f8b96704b04a5dbe95
Certificate serial: 01A1784CAE20BC4371EF47B992496DB1B89B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
Manifest number: 027E
Signing time: Mon 26 Oct 2026 13:00:53 +0000
Manifest this update: Mon 26 Oct 2026 13:00:53 +0000
Manifest next update: Tue 27 Oct 2026 13:00:53 +0000
Files and hashes: 1: ORD0ibB7Qbi2VAqjn7de--YwbBw.roa (hash: EySJQ7PIleQkWh762AOp7DMGiFBRJZ4vqqitqSVoVfU=)
2: _y4WckY7fxXxKyL4uWcEsEpdvpU.crl (hash: 34thG0j7FYjXZr5HWiQl9jFA31YCDjpnFdbuQowbFeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:4c:ae:20:bc:43:71:ef:47:b9:92:49:6d:b1:b8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2e1672463b7f15f12b22f8b96704b04a5dbe95
Validity
Not Before: Oct 26 13:00:53 2026 GMT
Not After : Oct 27 13:00:53 2026 GMT
Subject: CN=f27b8b3094a153dc05aef5a24ef85ca461cf86bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:a6:ca:7e:b9:a0:b8:71:e8:53:b4:76:19:
db:9d:06:2c:15:e7:cf:6c:b9:2b:3c:2d:e5:18:b6:
65:fc:f2:dd:79:20:3d:39:69:b9:a3:c9:0a:4b:e1:
bf:de:8a:ab:9c:ba:db:56:d2:11:de:3b:ca:d5:d1:
95:2a:94:0f:f9:cd:d2:b0:81:78:24:ff:88:20:70:
f0:26:fd:21:5e:97:ab:69:f1:25:be:63:53:ea:73:
93:7a:d1:f8:5a:7b:c0:6a:c7:02:1b:1f:5c:96:cb:
6f:64:3b:30:0f:25:cd:77:4a:f4:c5:b7:c6:5d:63:
6d:27:3e:d3:6e:35:78:fd:24:32:32:15:0a:ab:63:
14:fd:24:f3:2e:52:1f:9c:23:ce:6b:32:c6:9a:45:
a0:6b:6b:ff:2c:fe:bc:78:9d:29:ee:d6:5a:2e:8d:
e1:a9:8a:ee:20:42:29:76:04:aa:3e:d6:d1:b7:c1:
01:be:4d:f0:a5:94:1d:62:88:8c:f0:1e:39:10:28:
82:e8:61:a5:b7:2d:33:78:36:c1:8c:99:e8:4b:d6:
9d:44:cd:b9:8a:a0:d9:ff:42:96:9c:dc:b5:70:83:
7a:43:43:68:71:4e:a1:31:76:ec:83:79:43:85:13:
0a:f1:64:20:91:8b:62:dc:a6:6a:c0:4c:cd:4c:fd:
74:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7B:8B:30:94:A1:53:DC:05:AE:F5:A2:4E:F8:5C:A4:61:CF:86:BF
X509v3 Authority Key Identifier:
keyid:FF:2E:16:72:46:3B:7F:15:F1:2B:22:F8:B9:67:04:B0:4A:5D:BE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:46:90:59:1c:4b:c2:63:24:11:c0:7f:fc:3f:71:1f:49:79:
dd:c0:90:25:54:01:5a:18:79:bc:08:10:b4:da:b9:09:83:f7:
6d:a5:c5:c0:3f:89:ab:83:17:a6:bd:4a:4b:c7:85:10:2a:52:
1d:24:e3:ef:17:9d:07:cc:37:9d:95:67:21:a1:83:52:4b:6c:
76:e5:50:c4:fd:bc:51:ee:b8:91:69:47:4a:5c:fd:97:7b:e7:
aa:b4:29:be:e6:97:2c:ed:95:20:ef:a4:17:84:17:e5:ec:5f:
35:11:4f:af:55:c3:90:53:1b:38:a7:b5:c8:be:38:65:46:1f:
9d:59:18:57:16:c1:2a:53:7e:1b:78:59:f4:f1:c2:c5:a2:27:
14:27:16:3f:74:6e:bb:0a:bf:ad:bd:92:d2:a2:fd:47:84:33:
12:fc:6a:ca:3c:3c:91:c4:83:49:ee:19:d2:27:73:ed:98:94:
a5:40:05:25:27:a4:07:87:6d:0c:27:e1:90:66:04:63:10:f5:
43:b6:bb:e9:34:eb:5f:1d:f2:28:3e:21:95:77:f5:04:c8:0f:
06:b8:d1:b5:4d:4a:38:27:02:91:fe:b8:52:52:64:1e:14:42:
f2:ee:ea:39:18:e4:9b:a4:af:9f:ee:5c:08:ee:d4:13:33:cd:
4d:b1:01:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:53:10 2026 by rpki-client