Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
File: ym3NrZkpBFbG18GOscBY2UEIiAE.mft (raw, json)
Hash identifier: z0dLdOhK+2ToeDsndkprO7tXjRKuYkJLH97eQc7p2r0=
Subject key identifier: 1B:84:18:28:AD:6E:A5:6C:33:BF:96:0F:4E:D5:CD:4F:DE:17:90:6C
Authority key identifier: CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
Certificate issuer: /CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Certificate serial: 01A15E55F096D5B51A9329C811818DAE2CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
Manifest number: 1A5A
Signing time: Wed 21 Oct 2026 12:00:52 +0000
Manifest this update: Wed 21 Oct 2026 12:00:52 +0000
Manifest next update: Thu 22 Oct 2026 12:00:52 +0000
Files and hashes: 1: bG2ai37iVGCdW98mBInWrIrYPA0.roa (hash: xkK4nEMctXQLAAuz2jXwdJcPBigpmy2jrTbYqyPGIj4=)
2: ym3NrZkpBFbG18GOscBY2UEIiAE.crl (hash: LePV3koElUSaoHWSlucNAWwa4KOn/x+X/1tRx62qFhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:55:f0:96:d5:b5:1a:93:29:c8:11:81:8d:ae:2c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Validity
Not Before: Oct 21 12:00:52 2026 GMT
Not After : Oct 22 12:00:52 2026 GMT
Subject: CN=1b841828ad6ea56c33bf960f4ed5cd4fde17906c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:00:e3:99:0b:2f:ea:e8:f9:12:e5:17:de:
ab:1a:48:ad:52:5d:b9:f5:de:a9:dd:ba:2c:c8:61:
a2:d7:9e:77:e4:28:83:d3:4a:d6:10:e1:44:db:af:
0f:3c:93:3e:39:9c:fe:bd:52:ac:68:62:74:c6:a1:
43:69:a2:64:ee:eb:d0:f4:57:5d:50:be:54:60:49:
d5:d6:c9:31:30:d9:25:1f:cd:52:b3:e7:07:22:8f:
0d:59:c0:d3:91:47:60:20:46:da:25:74:13:2f:82:
31:d0:4f:bc:2a:d5:a1:a1:2a:02:5a:55:fc:17:bd:
13:4d:3a:79:78:a4:a6:56:bb:a7:0d:a6:41:29:cb:
f1:69:93:a8:03:ca:7e:29:4d:c5:bc:11:6a:1d:3c:
3a:92:cb:38:28:06:30:7e:4f:2b:d3:25:60:e9:5f:
24:36:6c:16:26:c7:e5:e6:93:80:2f:93:13:ae:58:
90:1b:51:91:96:6d:74:97:4e:f8:e0:fb:b8:b4:c1:
4c:3a:c3:1b:c4:2d:52:c4:90:46:e2:f8:e0:f0:1b:
11:29:a3:a2:ab:ee:8b:80:ee:24:11:b6:8d:1c:9f:
14:64:5f:97:3b:c3:72:50:03:65:e3:6e:66:7f:25:
17:66:59:ca:8c:89:f8:72:c5:7f:61:1a:a8:51:5f:
08:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:84:18:28:AD:6E:A5:6C:33:BF:96:0F:4E:D5:CD:4F:DE:17:90:6C
X509v3 Authority Key Identifier:
keyid:CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:81:ea:07:5c:cf:27:8c:c6:cf:d9:ec:8b:43:39:cf:de:74:
9d:ab:b2:45:01:45:64:8d:8c:8e:b8:aa:ed:7a:4c:95:07:79:
78:a4:1c:e3:e1:17:e8:90:68:eb:f9:c3:3c:b2:f8:5c:45:b9:
29:42:36:c4:8b:bf:62:05:76:a6:92:ca:3c:63:f4:59:b4:7c:
21:63:6f:bd:89:0d:1b:5c:24:bf:21:31:86:12:9c:c8:df:ab:
5e:72:9e:58:bb:cd:5e:af:e8:10:c3:5b:8c:a4:d7:4d:3d:38:
84:f5:d0:34:36:0c:98:db:f9:62:99:aa:0a:b7:d5:d1:1e:08:
5e:07:74:3d:77:c5:71:df:60:0b:04:b8:f6:75:0c:81:28:27:
49:42:89:a9:6d:e2:af:84:d2:ae:a0:7f:3b:6c:9b:f9:c5:a2:
41:9f:b8:f6:14:c5:42:02:4a:af:18:44:ab:c1:fa:80:85:57:
0e:1c:90:b7:73:5d:26:1b:74:8d:ba:ce:31:72:12:18:16:88:
d8:ea:0d:81:43:94:30:95:35:df:7c:07:65:2e:a4:e3:18:c5:
98:bd:e7:30:26:df:d1:2a:5c:53:c1:b4:a7:a7:d4:18:58:a4:
a1:f4:f7:ee:84:cf:4c:e1:37:cb:59:e5:1e:1a:df:14:16:7b:
5a:25:4f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:53:39 2026 by rpki-client