Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: Z+8L9QWJTqXuoxv0FFe20PtY0+V/+kgMiYu42GucSmE=
Subject key identifier: 8D:82:E2:41:C1:3D:3F:D8:C0:52:54:67:A4:57:33:E8:9B:2F:CC:BB
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 01A13E5D185926B6EA7B980A1E587F294245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 1192
Signing time: Thu 15 Oct 2026 07:00:50 +0000
Manifest this update: Thu 15 Oct 2026 07:00:50 +0000
Manifest next update: Fri 16 Oct 2026 07:00:50 +0000
Files and hashes: 1: N5RdOcKSZn2WXo-xhdOApmXM6X8.roa (hash: RQA+nWi3E8uaz/WCsQIw7b6rquiEkScjYVEe+LbnjAM=)
2: eG6HpNNeD2WlW2-WkUghRp2wqyY.roa (hash: nvEhBM2Rox5+ny1WoBOojQfN4JcL4da706fz8O30oPs=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: PjVbsW7QXdNZ2C91neKnWe08s0BPSfUK7hD8aCYC4yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5d:18:59:26:b6:ea:7b:98:0a:1e:58:7f:29:42:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Oct 15 07:00:50 2026 GMT
Not After : Oct 16 07:00:50 2026 GMT
Subject: CN=8d82e241c13d3fd8c0525467a45733e89b2fccbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:db:e5:42:dc:dc:28:18:bc:31:34:bf:3c:44:
6b:3e:1f:a8:f7:9d:64:7b:93:1b:a4:bb:c9:5b:38:
24:c9:70:ec:22:7e:27:7e:5c:40:1f:d0:32:b2:4b:
22:71:49:48:94:cb:f4:63:1c:1e:b6:d9:e3:c3:8c:
cf:bc:23:37:51:9b:46:e8:40:73:63:24:de:e0:e4:
77:ac:a3:25:87:52:4a:ef:b4:8a:71:07:8f:1c:ba:
50:94:ff:38:8e:16:cb:8d:f0:61:6b:d2:b6:45:5a:
49:99:a4:fa:86:e7:fb:ef:68:63:01:2f:a2:69:d2:
1b:f7:f5:94:27:df:b9:86:4d:55:a5:76:da:ad:d8:
ff:0d:0a:56:f7:e2:8f:06:ca:55:22:6c:2f:a5:32:
00:b3:ad:a2:b8:45:99:57:f2:05:37:24:e8:13:dc:
aa:6b:be:94:cb:cb:d7:6b:76:4a:16:86:ab:03:86:
7a:1f:9c:ca:5f:e9:0f:69:3b:2b:50:cf:73:43:62:
80:9d:7e:dc:d7:b2:4e:0c:2a:12:f1:58:87:84:d4:
55:c3:d4:38:8a:cc:0a:77:13:ad:7f:6a:30:46:68:
f8:21:4e:e4:f4:81:df:e0:1f:ad:27:de:cf:6e:ed:
ea:cd:d8:cc:02:71:ed:13:b8:26:87:ca:ff:ad:47:
63:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:82:E2:41:C1:3D:3F:D8:C0:52:54:67:A4:57:33:E8:9B:2F:CC:BB
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:33:f5:50:31:4a:83:d1:cf:40:b8:bd:b0:04:92:cf:f8:94:
b4:3e:af:8e:fa:74:fb:66:74:8c:89:c9:9c:9d:6a:27:8a:73:
95:b6:97:d7:04:68:35:25:29:4a:31:09:55:2e:bd:9b:a9:e2:
2a:82:48:ad:0a:c8:3c:1a:9e:32:f4:94:07:23:a6:57:ee:e2:
3b:24:44:b2:01:0a:d0:8a:e3:92:92:cf:c0:af:57:96:5b:99:
a7:52:20:26:6d:16:e5:f9:1b:e2:24:63:54:b2:ea:0e:f5:ff:
a8:0a:bc:f8:f7:d1:5c:42:3a:9c:ee:2b:82:12:28:f6:ac:42:
15:7e:38:48:7d:e4:a4:da:6b:36:fe:61:a4:7a:89:96:8d:b7:
bf:e5:a7:d5:bb:5e:fe:0a:16:18:a2:57:b4:a8:7e:00:52:09:
29:6a:a8:f7:94:c0:5c:7f:17:04:05:6a:d7:db:00:5e:cf:ab:
53:1e:d2:d2:a7:0a:e7:35:c7:5f:e5:c2:c8:51:90:e7:66:9c:
80:ed:ed:aa:2e:7a:8a:52:38:3a:d3:b9:04:b5:88:e1:67:0f:
e1:f0:bc:e8:ab:5e:44:30:b5:6a:a9:02:58:16:93:26:cb:df:
da:72:4d:67:4a:a1:e2:ff:b5:68:34:02:32:a0:44:84:7e:b1:
71:78:d6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:32 2026 by rpki-client