
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
File: YaXSF3WehhaW_HftmqY7lO2zvn0.mft (raw, json)
Hash identifier: FbA/p964QnZTTBpwO+ICjqcauvHAjntHv1Gujf+YNXA=
Subject key identifier: 9F:D9:E9:A7:3B:FE:0A:CE:BA:A7:A3:72:A6:5C:B6:02:A7:7E:58:06
Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
Certificate issuer: /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Certificate serial: 01A17CCE2413DB0CD837EA68ECB456DB00CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
Manifest number: 1A55
Signing time: Tue 27 Oct 2026 10:00:46 +0000
Manifest this update: Tue 27 Oct 2026 10:00:46 +0000
Manifest next update: Wed 28 Oct 2026 10:00:46 +0000
Files and hashes: 1: 7nMDcW2MBzGpfpdKdPDTB0QB3hU.roa (hash: en70sYlojLOJhZvnO4mg1gQMw5JWdqgwDgeNhf3auMU=)
2: En1jde_TIQ7LiMKAfWOjQ8-vueQ.roa (hash: B07iauNs3fJKlZyy9+dMg1gGMxORKFzCKI2QAYo7MVI=)
3: QaLldwyWCNmsJuYxanxijJENiro.roa (hash: zZJuFSJ24SLOyuCH72+V4rIHBfJPcOF4kPyYmAT7g5s=)
4: YaXSF3WehhaW_HftmqY7lO2zvn0.crl (hash: nAsClGM6gYYl/xM8zX6j7HA1LJnirDLfU9Syszx3x/A=)
5: jdSwXFGYkX-QEBXIuasgwFC2D7c.roa (hash: 8ECDcLMvUhxjcLk2BpSduz0pbSgekU1Tj/Vgy8O0Vqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:24:13:db:0c:d8:37:ea:68:ec:b4:56:db:00:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Validity
Not Before: Oct 27 10:00:46 2026 GMT
Not After : Oct 28 10:00:46 2026 GMT
Subject: CN=9fd9e9a73bfe0acebaa7a372a65cb602a77e5806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:62:c0:a3:fe:ef:96:2e:c9:88:0f:cc:0d:fc:
2d:c4:98:26:fa:b2:40:db:94:35:43:07:64:d0:b3:
44:f1:02:5e:e6:ee:21:27:65:21:0e:af:0b:e4:e5:
2d:c5:e7:6d:7b:82:2b:8c:d1:fe:2c:61:7c:57:02:
d1:2e:19:87:e0:71:12:96:ff:00:01:de:7a:01:a1:
be:be:96:a3:43:06:f4:cd:3b:8e:ee:b6:78:e8:f7:
d3:7f:aa:97:78:ea:69:86:d4:e0:d3:56:b7:09:30:
72:3f:68:27:88:72:a0:60:88:3b:ea:a5:85:e8:60:
b9:46:33:9e:4c:c9:a3:b8:48:77:16:da:7d:16:20:
4e:c1:f7:54:b8:26:77:01:79:9e:56:92:f7:7d:96:
28:a4:89:be:94:25:6c:9b:18:53:e2:3f:f3:96:90:
68:bd:e1:17:8f:74:49:00:67:f7:f7:3f:d2:9e:3e:
44:d1:cf:d6:12:50:ad:a1:a1:13:ba:14:73:c6:54:
74:09:92:8f:39:f0:13:ea:f0:c7:d5:a6:e6:30:d8:
58:51:18:68:7d:a9:8e:ee:ab:d8:be:d2:3c:dc:7d:
2c:38:fe:fb:b8:65:92:eb:f8:7a:e3:ce:af:e8:69:
dd:81:ef:2e:5b:1e:59:a3:09:36:c5:b0:77:f3:37:
99:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D9:E9:A7:3B:FE:0A:CE:BA:A7:A3:72:A6:5C:B6:02:A7:7E:58:06
X509v3 Authority Key Identifier:
keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:08:9b:8c:10:91:9c:4f:9d:2f:18:34:91:b7:0f:c8:ef:90:
3b:8e:ec:36:df:71:6d:d6:83:35:71:4c:09:23:30:5a:be:b0:
93:67:68:ea:85:c0:cf:96:d7:da:20:70:2d:1a:29:78:aa:99:
f7:2f:12:c9:79:5b:4b:fc:4c:90:10:41:d2:c3:e8:54:66:4a:
70:21:ba:3e:ca:9d:92:7f:8a:60:c5:b2:91:8c:be:6b:f3:58:
4e:c4:15:7b:8e:82:e8:65:b2:0d:7a:12:a5:13:bf:7e:17:04:
9f:c4:59:de:1c:c3:5e:31:f5:be:c9:54:a5:d8:6e:3e:03:90:
e6:2a:3e:36:b7:aa:e1:24:78:c6:40:ed:52:60:29:44:40:51:
24:d4:a5:5f:71:9e:bc:0c:89:58:9e:96:64:2c:49:f0:b5:9d:
d6:21:18:f9:b0:60:7b:83:26:6e:49:ba:3b:6f:81:c8:3c:f7:
0f:55:59:04:4f:54:fd:27:b4:c3:2a:93:a1:af:47:d4:97:a8:
d8:4c:aa:c7:f9:c7:e5:72:22:3a:78:df:6a:8d:1f:c8:71:3e:
fd:57:ec:26:c4:67:a2:29:7b:d4:92:69:b3:84:8e:5a:42:de:
0c:aa:3b:e1:06:c8:7e:2c:f7:cb:f9:16:fb:67:0f:17:c6:4f:
9e:af:12:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:56:13 2026 by rpki-client