Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
File: YWAUEB_7zmdROc1MAroAY0rYbgI.mft (raw, json)
Hash identifier: 2Wuv4tNGahx7R2r2donG30klyZpb+BsOeg6HlJMg5vA=
Subject key identifier: D5:A7:9D:E6:04:16:5D:C3:46:2D:97:19:5D:B5:DF:F1:D5:63:CB:AC
Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Certificate issuer: /CN=616014101ffbce675139cd4c02ba00634ad86e02
Certificate serial: 01A1822BF1BC4D8DF7A1BB7AC9035C6AC6EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
Manifest number: 1A5B
Signing time: Wed 28 Oct 2026 11:01:20 +0000
Manifest this update: Wed 28 Oct 2026 11:01:20 +0000
Manifest next update: Thu 29 Oct 2026 11:01:20 +0000
Files and hashes: 1: RF-tJIO2NICablpWJ0rxXstB-5E.roa (hash: B2eozTRe5cg7SctioXDuhV7y1QMBLlq9hEQ1DOOBwlc=)
2: YWAUEB_7zmdROc1MAroAY0rYbgI.crl (hash: AcMy7aCIc0eJlcZvDvxUSWNqHr0m+6LjDd5taPZzZgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:f1:bc:4d:8d:f7:a1:bb:7a:c9:03:5c:6a:c6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02
Validity
Not Before: Oct 28 11:01:20 2026 GMT
Not After : Oct 29 11:01:20 2026 GMT
Subject: CN=d5a79de604165dc3462d97195db5dff1d563cbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:51:bf:3e:65:c1:67:75:08:97:44:46:3f:
43:d6:d9:d8:88:0a:76:1f:92:72:c2:52:39:f2:28:
b9:f2:6e:84:26:57:8b:0b:89:5b:d3:fc:db:c5:2d:
b2:de:81:9c:60:5b:43:da:fc:a5:e5:14:7b:ec:90:
33:d9:61:39:03:23:1d:3b:92:33:0a:7f:4f:70:a0:
08:b2:77:bc:95:82:1c:d2:4b:aa:3e:b9:1a:93:8e:
4d:a4:33:e2:fd:27:e5:32:ed:94:37:d2:84:f0:ab:
6e:6c:41:9e:3e:10:bf:8d:9b:21:c3:e4:ef:ae:29:
e2:a5:a5:30:fa:36:6a:15:57:2a:0b:06:b9:4c:ea:
8b:b0:80:2a:2c:48:da:23:e4:4e:7e:b7:80:84:72:
60:9e:be:17:de:42:fa:32:3e:9c:36:48:d8:09:7e:
a8:41:10:f3:26:61:85:08:11:3f:c4:0d:1d:ec:8f:
66:07:52:95:83:05:23:b5:a4:c1:d8:81:60:04:67:
74:d6:8f:34:fc:f7:4c:50:d1:a1:23:2d:3e:e7:1b:
c9:e6:33:4b:c6:da:3f:ce:8c:6b:2e:45:6f:67:1e:
3a:bd:c8:4b:17:36:fd:af:75:2f:a1:8b:90:e3:2e:
3a:f4:65:d3:bb:fe:ea:77:b3:22:78:b7:e3:d7:b4:
da:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A7:9D:E6:04:16:5D:C3:46:2D:97:19:5D:B5:DF:F1:D5:63:CB:AC
X509v3 Authority Key Identifier:
keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:cc:44:f1:24:85:b4:27:66:7b:c1:e9:48:a5:49:c1:8e:4b:
4a:61:25:18:ab:dc:e6:a4:73:a5:90:df:60:83:c6:4b:2b:c5:
52:46:de:c5:eb:02:2d:1e:42:ff:66:99:7a:60:a5:9d:19:0d:
ef:16:6b:5e:de:19:77:80:38:27:e4:83:42:22:3a:c1:30:68:
03:75:08:c3:aa:29:31:ab:dd:3a:5b:b8:cf:09:6c:00:76:f5:
a9:d3:b1:bd:88:a2:0a:39:2a:0c:35:f6:cb:de:80:bf:c9:71:
25:ab:9d:ca:19:27:8c:9e:88:5b:00:51:db:70:50:56:b8:7a:
2e:44:ef:02:d2:af:91:a0:64:a9:41:5a:02:d5:f0:f0:cd:b8:
97:63:87:56:ba:46:ae:73:91:48:51:e8:55:33:7e:1f:be:80:
03:50:09:ae:1b:b1:64:f0:d0:f2:ec:5e:25:92:a7:32:df:20:
b7:28:66:f2:26:c4:2a:87:fc:a8:9c:c5:bb:fe:cd:f3:8e:1e:
f8:0b:47:5a:42:cf:91:2f:18:1f:2a:59:29:73:da:e6:e0:e0:
37:3f:a5:c1:6a:6c:45:34:32:57:61:ff:62:12:c7:7e:0c:d9:
23:68:f0:2e:20:8e:20:09:32:75:03:f5:04:aa:5f:a1:b9:f8:
e6:ed:f2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:22:24 2026 by rpki-client