Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
File: ymFHjk1lm-zoIDxei6jo-C8EcNc.mft (raw, json)
Hash identifier: 7v/HuHSaLMRwtXiZ/521SPN2pVuwKZh612Exuk9YXI0=
Subject key identifier: 81:5D:46:1B:81:01:07:CA:8F:44:A5:62:89:DC:B9:26:D7:98:E5:35
Authority key identifier: CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
Certificate issuer: /CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Certificate serial: 01A1279E49A31F3BFF55FC290E45C5B9F293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
Manifest number: 04C8
Signing time: Sat 10 Oct 2026 21:00:47 +0000
Manifest this update: Sat 10 Oct 2026 21:00:47 +0000
Manifest next update: Sun 11 Oct 2026 21:00:47 +0000
Files and hashes: 1: _MwSvZpK_sGtiYLx6EKzmSrljis.roa (hash: dS+nDUo51n3VpHHiTVTBJXrfS+Wyxklsi3bHmd6A/ks=)
2: ymFHjk1lm-zoIDxei6jo-C8EcNc.crl (hash: o0Kpz6sti5ir0ckmy3zuq5F4sTWlvAJac57B0tIxxcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:9e:49:a3:1f:3b:ff:55:fc:29:0e:45:c5:b9:f2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Validity
Not Before: Oct 10 21:00:47 2026 GMT
Not After : Oct 11 21:00:47 2026 GMT
Subject: CN=815d461b810107ca8f44a56289dcb926d798e535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:08:e1:92:74:fe:c2:95:82:05:7f:b7:26:
29:c2:cd:d3:c7:b8:58:06:3b:1d:4a:16:ea:bf:42:
ce:6c:02:66:87:22:ed:38:a1:25:60:c3:62:3f:dd:
a6:ca:a4:2f:a2:19:3f:75:a3:76:ae:b6:87:e3:b9:
7d:b2:c6:25:89:07:e8:eb:4d:2a:65:c6:07:e2:cd:
0c:98:c7:f0:9c:27:42:ce:d4:51:da:6c:79:fb:7f:
5f:9c:99:3e:0c:87:c6:9e:24:2f:0a:34:3a:82:17:
c3:45:41:87:7f:cd:25:8e:92:75:5c:67:60:7c:58:
5a:f9:03:70:c2:05:40:e6:35:47:0b:a4:e7:fa:33:
ae:1b:25:53:4d:51:de:a4:b3:a3:1b:6c:e2:09:46:
b2:e3:f2:31:44:c6:11:60:df:f8:fc:11:d7:12:3f:
48:e4:79:4c:7f:8b:b7:b5:75:87:d6:e7:f0:e1:39:
96:c1:a6:2b:0d:47:77:53:5b:d8:e1:4b:e0:d6:a5:
b2:df:00:8d:c1:b0:54:c9:cf:ba:c2:cf:20:db:67:
d2:60:58:bf:2a:80:dc:16:8e:ea:98:c1:78:03:87:
b7:24:7b:93:3d:af:d7:33:db:b7:9f:a1:a0:95:84:
a0:67:54:77:0d:50:25:cf:1a:99:b9:04:72:71:a0:
3c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5D:46:1B:81:01:07:CA:8F:44:A5:62:89:DC:B9:26:D7:98:E5:35
X509v3 Authority Key Identifier:
keyid:CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c6:57:27:b4:64:67:39:44:62:2d:4e:bf:32:15:72:e7:3b:
70:ec:bf:53:4a:74:d2:43:99:cb:fb:1f:bb:1c:9a:48:46:71:
1f:a4:d1:fd:b9:e5:b2:71:b4:a5:b5:be:5e:89:6f:e3:c6:6f:
5b:cd:78:c4:3b:55:45:5e:5d:39:14:fa:c2:9e:79:bb:d0:f1:
68:69:b1:12:79:6f:47:c4:ed:50:e8:73:3b:29:a8:39:bd:81:
70:3c:55:f0:e2:6c:43:4f:6d:af:c9:71:0f:03:27:b4:f0:d2:
87:34:a0:1b:ff:88:dc:c6:39:d7:49:b6:63:3e:dd:c9:98:2e:
5f:5b:ae:ae:c8:38:c4:e3:03:64:d4:61:3c:04:d9:ac:54:6a:
43:d3:08:c4:ee:90:ec:57:13:68:78:4a:2d:84:ca:04:c9:a9:
84:87:71:56:d2:5d:e9:15:4f:46:ea:57:1e:03:86:5e:e3:41:
6b:32:0f:33:d1:ae:cb:17:de:27:9f:df:2f:1a:97:4d:f1:dc:
3e:cd:b8:f7:75:87:28:b6:b1:7f:f9:94:1e:8c:e9:a9:65:84:
44:41:60:f6:70:9a:e6:40:67:23:66:1e:01:7d:32:2c:50:d7:
a1:7d:39:1a:91:ff:82:0a:13:80:79:ed:00:1d:3a:4b:ca:a4:
bf:d2:f1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:51:54 2026 by rpki-client