Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
File: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft (raw, json)
Hash identifier: wVqhi2mPiMg2K7BHBOk8sohAxwjdiRIduIcUfRFMlbU=
Subject key identifier: 5B:C2:86:2B:B5:A7:55:35:3A:7F:1A:D3:A4:22:EC:A0:32:FC:52:C5
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial: 01A15440C70D9775106630408B13063B9A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
Manifest number: 1AB8
Signing time: Mon 19 Oct 2026 13:01:33 +0000
Manifest this update: Mon 19 Oct 2026 13:01:33 +0000
Manifest next update: Tue 20 Oct 2026 13:01:33 +0000
Files and hashes: 1: 8Q0Zf_p2yrZ0sNHZrjCdOSKVFH0.roa (hash: yTf6BtJWlrsaOEBrk5U/warCLRXhsKvIf1U8hGm0E84=)
2: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl (hash: 5GDBmV2tBDFkmsenzfC9R2e5Gx7RNHnetyeD1tKBJ6o=)
3: ZcwqCFu-ugccIfT-C61LOqP6Rms.roa (hash: zUv7VdLIHUw6+UwEQbFc7BcKwkxW2AOANbLeMf0i6t0=)
4: rs6yJB-ATXmRXu9gnNIG7o1cIYA.roa (hash: hRdyzbfU/p9o7os4bIOu1TBbp1XcS6MpucnHy6ueOrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:40:c7:0d:97:75:10:66:30:40:8b:13:06:3b:9a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Validity
Not Before: Oct 19 13:01:33 2026 GMT
Not After : Oct 20 13:01:33 2026 GMT
Subject: CN=5bc2862bb5a755353a7f1ad3a422eca032fc52c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3b:10:b7:74:5c:aa:58:86:85:b2:2c:9a:0c:
c5:c9:88:a1:63:a9:b0:3e:d5:95:fa:f8:b2:95:f1:
15:05:52:46:a5:37:3a:7a:8b:4a:72:89:5f:e1:12:
da:d8:13:e6:f2:3f:df:17:05:7e:c1:9c:42:10:1b:
bd:de:ed:98:e1:92:bc:11:98:b5:91:24:ce:88:e0:
23:3b:d0:e2:a1:db:36:29:44:93:be:34:a9:e2:b4:
74:50:1b:63:46:3b:62:fb:bf:26:17:58:3d:66:8e:
ce:c1:ab:68:5a:63:a7:55:fb:d8:da:2b:51:cb:5d:
fc:f3:38:47:0f:d4:45:c8:26:13:39:fe:28:f3:16:
8c:22:b9:ac:57:02:da:2c:54:ec:22:21:df:90:37:
01:f2:32:d1:83:59:98:50:bf:d3:e1:1d:59:e2:0d:
d4:4c:d5:4d:93:91:3c:86:26:9a:3d:48:f2:a3:ca:
3f:3e:91:0a:62:5e:c5:cf:5b:02:51:4a:ba:01:da:
26:bd:f2:0f:b8:de:3d:5f:df:64:51:54:92:cf:88:
b5:24:c4:02:b2:f8:32:89:68:9a:4e:ed:64:bf:af:
19:d8:c7:8b:5d:e5:57:01:80:f4:db:f6:ae:21:94:
06:ba:7c:3c:af:e6:dd:43:a0:6f:09:1f:e8:b5:83:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C2:86:2B:B5:A7:55:35:3A:7F:1A:D3:A4:22:EC:A0:32:FC:52:C5
X509v3 Authority Key Identifier:
keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e1:08:cd:6f:27:6a:8c:e0:03:c0:b1:19:10:66:d1:d0:9d:
4c:c9:70:89:5f:7d:c7:f4:cd:aa:a0:a4:6d:f4:1e:f4:14:6e:
dc:d4:94:19:06:5d:1b:98:04:21:c2:b2:c4:42:f5:23:b4:b3:
9e:42:e1:b8:88:51:20:6d:0f:c6:ed:3b:c2:90:cc:4d:44:6b:
54:48:6d:fc:9f:a6:54:f0:b5:4b:31:00:65:e9:06:00:8a:93:
85:6d:d4:2f:97:9b:4b:46:b8:63:18:e5:cf:55:0b:ce:24:c8:
72:42:e1:5b:e1:18:7c:78:f9:74:94:d2:58:f1:e5:35:20:27:
06:1a:83:9a:5f:2a:63:50:bb:3e:93:a8:15:ba:c1:63:f4:c8:
b3:f6:01:d3:95:c0:4d:8a:8a:e4:3c:0c:6c:9b:5c:6f:1e:a5:
6f:06:38:0a:dd:4e:91:e7:b9:e3:46:1b:d7:60:3e:df:91:9d:
43:6c:40:ad:5b:00:da:9a:87:5b:25:81:fb:e6:b0:e9:01:80:
64:23:e7:da:46:a3:1b:6b:5e:dc:c1:9f:05:3e:c1:81:2f:7e:
f8:ab:b8:5d:53:de:e0:97:83:49:70:ba:92:ba:05:22:4a:7b:
32:54:d3:22:e0:56:f3:40:48:d4:c6:8e:df:e4:e7:fd:e5:99:
67:7d:54:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:49:22 2026 by rpki-client