Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
File: yalITKcIq3cesduQuvyKEUwsPXk.mft (raw, json)
Hash identifier: iWzwpK2ax6qTgFS7MPGhnESDqjBYq3MpR2huCgyp704=
Subject key identifier: EC:29:1A:D4:1B:D7:70:D0:1A:3B:3D:84:1D:1C:57:AC:06:81:0C:93
Authority key identifier: C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
Certificate issuer: /CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Certificate serial: 01A16B6C7D7A26A534DF8458FC7FB22241BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
Manifest number: 1ABD
Signing time: Sat 24 Oct 2026 01:00:34 +0000
Manifest this update: Sat 24 Oct 2026 01:00:34 +0000
Manifest next update: Sun 25 Oct 2026 01:00:34 +0000
Files and hashes: 1: 3eahbNs7sLSlMwMQAPIK4WlF5S0.roa (hash: iShcDJZ7gmNtw4FSGePEabrCqu38c4kHe0CrQJ2Q7ow=)
2: MuKPEjpSeKLvjqZfVopVa-G44-Y.roa (hash: gXY94gXYWU1Pqibv85vvI+18JY770F42380MRYt28Gc=)
3: yalITKcIq3cesduQuvyKEUwsPXk.crl (hash: CeA+LkRxpeBe1mXqLW9k0Ns6rTH2lq2weLN5CopToQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:6c:7d:7a:26:a5:34:df:84:58:fc:7f:b2:22:41:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Validity
Not Before: Oct 24 01:00:34 2026 GMT
Not After : Oct 25 01:00:34 2026 GMT
Subject: CN=ec291ad41bd770d01a3b3d841d1c57ac06810c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:44:12:20:96:d8:9f:5d:52:ea:54:9b:40:f8:
8e:d0:6b:16:43:e2:8f:f8:ac:be:45:3f:32:bf:a6:
46:da:7a:67:9a:0a:b9:54:fc:41:45:43:4b:a5:58:
c0:e5:27:9a:c6:a9:10:60:c7:2f:b5:4c:58:03:69:
49:dd:74:92:a9:1b:a4:c1:ac:b4:45:f1:c6:75:e5:
be:9b:a2:e8:2b:e4:20:02:a7:cc:6c:f7:b4:4a:bc:
41:cf:ba:20:b5:3c:3f:7e:5e:90:cc:96:a4:bc:d7:
ed:b2:2d:98:4e:a7:94:ea:99:d6:c1:c7:8c:f0:71:
d9:65:93:a0:09:99:8e:f2:db:1a:ca:06:db:01:5d:
5b:c9:2f:52:68:f5:f5:a2:f2:0d:5a:bf:33:6e:16:
df:7c:39:20:75:fb:1c:43:03:74:21:15:c0:53:0d:
c0:7f:86:6f:70:f4:96:64:d3:d3:d0:55:3e:88:6a:
22:9c:69:37:65:4d:89:5f:e0:ae:5d:63:0f:8f:f8:
c3:6c:12:f7:0f:6e:96:af:9f:99:a7:74:4f:60:b1:
73:23:33:22:82:e2:f4:d6:db:ce:41:6a:c2:eb:e1:
11:ba:9e:00:fa:c4:d4:74:12:c1:cb:bb:ff:24:10:
62:54:52:f4:a1:be:68:cf:7e:7c:02:4b:82:a0:c4:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:29:1A:D4:1B:D7:70:D0:1A:3B:3D:84:1D:1C:57:AC:06:81:0C:93
X509v3 Authority Key Identifier:
keyid:C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:70:03:d8:e8:5e:90:4f:f0:8d:18:24:98:17:58:5b:f8:c0:
4c:58:47:d1:e1:08:a2:02:a2:d2:7d:cc:25:32:01:51:ea:10:
05:af:5b:d4:35:30:78:ed:da:51:86:d6:12:1c:e9:a7:da:6c:
56:91:b0:84:96:8c:51:3a:20:e4:55:d6:9e:c9:0c:b8:db:53:
d6:54:4e:bc:93:10:9f:84:41:44:66:e1:66:a5:2b:ed:fe:ac:
15:86:71:62:00:56:33:76:06:e2:d6:90:b6:bb:d5:1d:f8:aa:
95:5e:d8:21:6d:dd:23:10:49:d4:c9:38:a3:9c:33:f9:62:05:
f8:ac:2c:90:9d:44:05:6f:d4:bf:b2:0c:04:9b:bf:5e:90:31:
65:9c:ae:b3:82:15:91:c3:e0:03:39:00:c0:c8:3a:32:f7:8d:
01:63:b9:f6:14:0e:ad:10:0d:e7:61:97:4c:36:54:29:ef:38:
77:24:f2:87:e3:9d:b2:94:61:cf:a5:2c:5f:d8:b3:44:5f:11:
3b:eb:ca:f3:4d:62:6d:86:7a:be:12:c6:b2:c6:dd:b3:7b:e2:
bd:81:08:09:0d:bc:47:8f:21:1d:81:12:8e:bf:98:85:6f:63:
4d:04:b5:8e:73:d5:9f:e7:64:19:a3:76:f8:2b:8f:f4:4b:93:
cf:a1:1e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 09:52:16 2026 by rpki-client