Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/098b44-81dc-408b-93d6-f9300380c517/1/ytW3kQ2wt4Y3-Xxth8eARcuQ3SY.mft
File: ytW3kQ2wt4Y3-Xxth8eARcuQ3SY.mft (raw, json)
Hash identifier: VpZ1uVkkFzoQLT1Xgh52yiKyXQU9Vky90kqNvoDKxUk=
Subject key identifier: A0:EF:8A:A5:1D:34:EB:5F:61:E8:39:C4:39:2B:07:A2:59:83:71:12
Authority key identifier: CA:D5:B7:91:0D:B0:B7:86:37:F9:7C:6D:87:C7:80:45:CB:90:DD:26
Certificate issuer: /CN=cad5b7910db0b78637f97c6d87c78045cb90dd26
Certificate serial: 01A1754BF8D1C312B4FBF9CF1491CEACBD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytW3kQ2wt4Y3-Xxth8eARcuQ3SY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/098b44-81dc-408b-93d6-f9300380c517/1/ytW3kQ2wt4Y3-Xxth8eARcuQ3SY.mft
Manifest number: 93
Signing time: Sun 25 Oct 2026 23:01:15 +0000
Manifest this update: Sun 25 Oct 2026 23:01:15 +0000
Manifest next update: Mon 26 Oct 2026 23:01:15 +0000
Files and hashes: 1: TAVHSoe6jpflVHNRANOQNq6T4Bg.roa (hash: 5XAyyOjGSfV88o2algBifGdl3VtbRL7Z/4G3iGV5JkU=)
2: ytW3kQ2wt4Y3-Xxth8eARcuQ3SY.crl (hash: UvGkzjMkP6QTViW1ULd6TmWMTaqNrQBTNoTeTd2f/78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/098b44-81dc-408b-93d6-f9300380c517/1/ytW3kQ2wt4Y3-Xxth8eARcuQ3SY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/098b44-81dc-408b-93d6-f9300380c517/1/ytW3kQ2wt4Y3-Xxth8eARcuQ3SY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ytW3kQ2wt4Y3-Xxth8eARcuQ3SY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:4b:f8:d1:c3:12:b4:fb:f9:cf:14:91:ce:ac:bd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad5b7910db0b78637f97c6d87c78045cb90dd26
Validity
Not Before: Oct 25 23:01:15 2026 GMT
Not After : Oct 26 23:01:15 2026 GMT
Subject: CN=a0ef8aa51d34eb5f61e839c4392b07a259837112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:d9:5f:d9:f9:1e:66:7c:73:69:e5:70:b5:
1e:57:7c:1f:99:66:d8:5e:29:51:9f:2d:f5:4d:96:
69:e7:28:ad:6a:03:35:e4:ab:d7:64:45:a3:62:c3:
bc:61:d6:e3:33:db:ee:22:25:51:f5:33:2a:3d:b3:
96:bb:5e:a7:0f:47:d9:d9:65:ec:58:07:12:d7:ee:
c1:d8:18:69:80:61:8c:f9:d6:e0:86:6a:cf:00:4d:
37:55:a8:df:f6:92:2a:f8:10:e2:26:08:25:97:1d:
65:a7:c9:54:e3:af:f4:8e:9e:25:7d:ad:32:6d:95:
cd:b7:1d:ad:e1:88:c1:45:41:45:f9:41:ba:5f:9c:
35:dd:0e:32:bb:61:b2:18:5e:2f:cb:3e:43:c8:9d:
b7:d8:ab:aa:3f:5c:c0:e0:62:ed:0d:01:30:3c:c2:
53:b2:91:85:a1:13:c7:b8:47:74:33:6c:72:4c:c1:
93:b4:75:64:c8:ed:82:9b:fa:4c:22:3c:61:11:f7:
8b:de:d8:65:06:7c:30:25:82:58:98:06:1a:b6:0e:
0d:06:9f:72:3b:79:0c:c7:da:97:3c:cb:50:1c:47:
98:88:2f:ec:77:9a:0e:b9:31:17:03:15:65:c5:ac:
1f:2e:2d:29:07:cb:11:57:78:11:2d:b7:af:5a:33:
60:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EF:8A:A5:1D:34:EB:5F:61:E8:39:C4:39:2B:07:A2:59:83:71:12
X509v3 Authority Key Identifier:
keyid:CA:D5:B7:91:0D:B0:B7:86:37:F9:7C:6D:87:C7:80:45:CB:90:DD:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytW3kQ2wt4Y3-Xxth8eARcuQ3SY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098b44-81dc-408b-93d6-f9300380c517/1/ytW3kQ2wt4Y3-Xxth8eARcuQ3SY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098b44-81dc-408b-93d6-f9300380c517/1/ytW3kQ2wt4Y3-Xxth8eARcuQ3SY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ff:74:66:5e:bf:9b:aa:91:3c:93:34:d9:ce:42:fd:ab:ff:
b2:6d:77:c3:fe:1c:d4:3a:9a:1b:bd:a3:09:39:e7:76:8b:4f:
09:38:4f:5b:08:23:9b:c3:16:37:39:e7:fb:04:ef:33:37:c9:
16:61:6d:e9:88:ed:56:91:82:07:8d:c4:71:88:af:a3:bc:ba:
9e:d3:33:87:35:93:e6:84:c2:ab:99:31:b5:1e:35:9a:e1:7e:
48:ab:ec:6a:bd:56:57:fd:bb:08:cf:45:0c:89:1d:09:b5:f8:
44:ee:b3:44:2f:77:d8:34:d5:59:e4:fd:89:06:f6:43:15:8a:
ae:17:8c:45:e8:07:98:d2:58:53:09:cb:97:8d:0a:a3:08:73:
9f:d4:69:34:67:6c:53:40:e2:96:d2:55:b8:40:6a:5b:76:42:
24:2a:7b:3c:f8:b8:7c:02:95:4b:94:54:e0:be:a4:3c:09:af:
e1:43:b3:53:8c:93:57:d1:31:ca:23:fa:f4:31:42:22:00:2a:
1f:9e:46:d3:5b:a6:55:55:03:35:4d:b6:9b:79:ae:69:58:02:
79:3e:53:75:c7:6c:65:08:53:0a:cb:be:9a:d0:ac:bf:e8:cd:
4a:8a:14:5f:3b:6c:88:f6:52:9a:70:df:0f:d8:26:99:92:7b:
5f:03:11:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:24:00 2026 by rpki-client