Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier: BVbYBooboCLpZcYIiZKDAsERGKQx4pCGiAfQGaxMs1g=
Subject key identifier: 52:3F:49:01:3E:CA:BC:9C:84:EE:CE:E8:ED:B0:DA:B1:FE:ED:BC:D2
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial: 01A16B358F52D86348B75E378E503061A47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number: 140E
Signing time: Sat 24 Oct 2026 00:00:34 +0000
Manifest this update: Sat 24 Oct 2026 00:00:34 +0000
Manifest next update: Sun 25 Oct 2026 00:00:34 +0000
Files and hashes: 1: CK8OJfLCISBl1ouaHEnbpGJbOnw.roa (hash: pt47KAPdqRnN1dkS3yo4ZlI5RRvRrx+uI3TswhWMkuU=)
2: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: /R7/IxyaBJLOoOh93QJSr7EFEn8W1hH4jmqoBJUlb0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:35:8f:52:d8:63:48:b7:5e:37:8e:50:30:61:a4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Validity
Not Before: Oct 24 00:00:34 2026 GMT
Not After : Oct 25 00:00:34 2026 GMT
Subject: CN=523f49013ecabc9c84eecee8edb0dab1feedbcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:1f:d0:cf:80:1f:e3:47:ca:45:c5:be:4c:
9f:60:19:b3:04:37:fa:11:63:0f:c0:8d:17:5d:a1:
33:78:88:b3:a0:12:0b:e9:f6:11:3e:01:ae:d3:95:
9b:4c:40:b8:8c:91:67:a9:2b:0d:0c:24:e6:9d:89:
bb:bb:ed:ee:a8:3c:3b:c9:2f:96:9d:72:4a:e0:6b:
0c:73:6d:d2:e0:9b:56:df:96:32:b6:f5:7b:79:fc:
2a:fa:e6:7b:af:0d:d2:fb:9b:87:e7:06:79:6c:de:
49:cf:66:7b:c9:5c:a9:c3:a4:cf:8b:04:48:48:86:
4a:0d:9c:4b:40:06:08:f8:5c:f3:b0:37:29:8a:60:
90:31:68:74:7b:f7:44:76:b3:9e:39:63:ab:f5:9f:
48:c6:f2:91:13:72:d7:25:38:de:36:01:21:ce:48:
3e:29:d1:4c:a9:d3:fa:ca:e8:b3:8e:7a:79:57:6a:
75:cd:c5:a7:39:0d:dc:31:9a:3a:7b:17:14:ac:84:
18:8d:7b:9d:76:7d:d8:a6:47:dd:ae:b9:95:8b:0d:
5b:a6:2f:b1:7e:ea:ba:ad:af:1d:83:84:63:92:23:
48:05:d1:87:98:3c:38:54:ac:ee:7c:51:fe:ce:80:
3b:0d:8a:39:0a:28:1a:87:d2:66:88:c0:cf:b5:4d:
a6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3F:49:01:3E:CA:BC:9C:84:EE:CE:E8:ED:B0:DA:B1:FE:ED:BC:D2
X509v3 Authority Key Identifier:
keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:87:c1:9a:e4:67:ce:d2:ac:a9:5b:b9:74:81:85:51:79:b6:
dd:f2:35:36:ac:ce:7b:e0:2e:7c:2f:b0:61:b9:5b:06:ab:1b:
c5:f9:8c:b2:97:fb:42:a0:45:7a:5a:eb:fa:b3:0a:42:bf:78:
9a:43:65:8d:ac:7f:e8:04:af:f0:2b:63:8f:6b:49:f8:ea:64:
c5:c5:6c:cc:8b:76:00:c5:c8:fc:26:78:31:0f:0d:04:cf:fb:
b4:44:a2:17:dc:79:e7:e4:5e:13:ba:5e:51:a9:00:f8:fc:f8:
d4:69:2a:00:45:92:07:60:3a:e0:c0:5b:4d:86:2a:76:0c:e2:
23:35:89:40:d1:1b:5c:67:5d:57:ee:53:8f:cf:63:76:d4:32:
9f:6a:04:56:54:ba:67:c8:e6:49:87:d5:f1:79:10:b1:3e:82:
7c:15:c9:7a:96:a7:0c:c7:a7:d3:af:ad:8d:d1:bc:ac:5c:b6:
3b:30:2b:1a:a4:55:c8:6c:74:12:be:46:42:c8:54:b0:f4:d6:
c9:78:98:d9:a1:5e:53:87:54:e3:65:a9:65:cf:97:f8:2b:9f:
3f:01:6b:af:21:f8:8f:f8:64:56:93:22:ce:1b:a8:c5:3a:74:
d5:fe:21:46:7b:ee:2c:56:74:61:cb:82:2c:68:c0:d8:15:d6:
e4:86:81:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:13:51 2026 by rpki-client