Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: Z/bQa27UdY8zecP2vF0uqMYtrZsJ2vVPAwyqU8a/li8=
Subject key identifier: D8:F8:47:D4:B4:9F:E0:0C:D6:01:14:5A:8D:EA:A5:40:65:31:88:B6
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 01A133D9D7D9EC87BBB62741E1EF1AD0FC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 1AA0
Signing time: Tue 13 Oct 2026 06:01:16 +0000
Manifest this update: Tue 13 Oct 2026 06:01:16 +0000
Manifest next update: Wed 14 Oct 2026 06:01:16 +0000
Files and hashes: 1: Xz1YPhwlgcFJn9H6zKCHQE9OZMs.roa (hash: E23r1ViDJSDDunuaw4r4shrNSmLJDRKbQsrvll9ROpQ=)
2: Y6uXwuSAMDltrgK47G1JT4Ly1MU.roa (hash: kINCl8tG1shq70mte4iuRzZgEl60hKLBpRpKxfDa3dE=)
3: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: 1T4VPmVnpS5YoWWNpb+fFvdAA4sNgyaP0AolUHYG5mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:d9:d7:d9:ec:87:bb:b6:27:41:e1:ef:1a:d0:fc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Oct 13 06:01:16 2026 GMT
Not After : Oct 14 06:01:16 2026 GMT
Subject: CN=d8f847d4b49fe00cd601145a8deaa540653188b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:ad:de:e9:9b:55:cf:8e:eb:56:8f:a6:ae:
e1:43:c9:7d:ca:59:64:cd:aa:4e:fc:9a:c4:c2:6c:
db:12:57:d0:63:61:51:85:59:85:d8:7d:00:80:e7:
d0:90:9e:ae:48:38:64:cb:6e:83:22:4a:c2:c7:56:
a6:f0:c2:eb:5b:5a:74:c4:02:0f:23:76:ae:41:03:
8e:7a:d6:36:bc:17:05:c2:47:32:ca:09:c1:8c:b1:
2a:94:86:7f:3d:39:9b:77:d3:75:01:61:b6:e2:0b:
11:26:45:fd:98:b1:91:49:8e:ba:05:87:d7:e1:f2:
e7:99:39:a4:f3:05:02:02:06:37:7a:81:c2:45:60:
1a:81:be:c3:b9:23:22:68:07:7a:e5:0a:11:9f:fa:
6a:f9:a0:2f:3d:82:39:40:be:81:8c:39:91:51:66:
e2:5b:f5:ee:5f:a3:b2:5d:e5:00:34:ed:36:df:e8:
18:0b:33:9c:cf:37:b4:1b:2e:a6:66:66:eb:66:65:
75:36:5d:64:78:65:f9:2e:24:8f:04:d7:3f:f4:8c:
e6:b0:ae:e1:7b:1e:48:0a:9b:b2:e6:e3:58:51:ac:
6e:1c:22:64:eb:ff:8b:17:f2:52:e8:95:87:11:a4:
41:a2:07:20:8e:c5:96:84:57:54:fe:56:39:cc:38:
d0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F8:47:D4:B4:9F:E0:0C:D6:01:14:5A:8D:EA:A5:40:65:31:88:B6
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:01:62:f7:cb:97:e1:b3:58:cf:85:c6:e2:35:88:65:64:db:
13:5e:f7:2d:0e:44:0b:43:df:b5:ca:d8:35:ec:ae:8f:ff:e0:
b2:b4:e3:cb:e4:f4:34:eb:e0:a1:22:0e:7e:0a:86:06:57:e0:
7e:87:a4:11:5a:78:08:bf:6e:75:f1:fa:91:6a:3c:b5:5a:cb:
17:7c:19:3f:e7:88:85:9d:28:a9:06:ce:62:94:19:c6:84:1a:
1e:52:7b:64:34:1d:a6:8d:cb:52:a2:cc:db:3b:ec:fe:9f:1b:
d0:ff:4e:97:c4:d6:5b:51:8b:10:51:06:69:a3:c0:06:b8:60:
e9:8d:5d:d7:c1:ed:4f:a3:48:30:4f:5b:e2:f1:f0:10:fa:f5:
b0:d5:38:fa:f5:5c:88:1e:9d:a4:a7:f0:94:94:59:12:af:d6:
41:d8:3e:65:21:fc:33:66:d8:a5:97:c3:d6:dd:5d:52:44:65:
56:59:51:8c:04:db:56:3d:36:0d:86:ff:9a:6e:a4:23:48:d5:
12:38:e1:e2:ab:04:80:bc:b6:3e:52:27:f1:ea:a0:db:b9:d3:
70:01:da:4a:46:29:03:d8:74:bc:62:e1:3b:37:4b:5a:71:67:
2d:3a:11:ab:f5:be:5d:da:15:32:a7:f5:a4:ee:dd:65:9b:b2:
3e:ed:b3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:52:53 2026 by rpki-client