Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
File: YjUmrZ--xXT6TsPZuttUM_2qyns.mft (raw, json)
Hash identifier: Us2liuf4hmthm3R8cuKZbS0quz+/YC2DcWeSD4xKkPM=
Subject key identifier: 3A:1E:5B:58:94:16:7F:B2:A8:41:A0:4A:9F:36:4E:03:BA:7E:21:14
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 01A175146FE74C16CC860C600514F0C51A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
Manifest number: 10DB
Signing time: Sun 25 Oct 2026 22:00:35 +0000
Manifest this update: Sun 25 Oct 2026 22:00:35 +0000
Manifest next update: Mon 26 Oct 2026 22:00:35 +0000
Files and hashes: 1: 4Mc33bIPqXNt0WBKTY6IWbhZhyI.roa (hash: 0CyjN4fDt2gePEzz6GNI+6v2hHdu94zd3doXA9mCmrY=)
2: E7S8kk0v-3rKEWlslioybHa5U2o.asa (hash: CrfGOpfT92BFeNnmG2NLzbIsZjJeDSaj2z6bEyCVnBE=)
3: P5w8UdbfAfDa1DxOi4VrhWTzLpM.roa (hash: +0DQfwomOYLD75ppkH2FpMEhDzxTGpHuszvhO6Ri7kw=)
4: YjUmrZ--xXT6TsPZuttUM_2qyns.crl (hash: 31oCS4/IQ7w4iworOnZ2adXS0HxH6nqQ5/2r8pJ5PH4=)
5: YrZcQqizcm-6Ws7265yR5ro3QoE.asa (hash: MFAOo3Xix00XFxAQiqGQoGajsrjp1l0fhfv38HvzhSI=)
6: fAgTSS_ONStFnLvEGPMgmGZBmpo.asa (hash: TOVMYJAfL34na7IHXLihlNeKoxMB/uFVliwHd1D3Uzc=)
7: i2ZN82VS7VSqjYAHCBTpFBgLiEo.roa (hash: gw1xxGQ0BqeQr6XFI4+gKsjUN/m1I0WJsAj9BQrH0uA=)
8: uq7KjFfupPB_i8cccfycTh05AaQ.roa (hash: q7ZkYvBa6WisIOhSf12hByjNMV7uSrIgT5csQL8UbvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:14:6f:e7:4c:16:cc:86:0c:60:05:14:f0:c5:1a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Oct 25 22:00:35 2026 GMT
Not After : Oct 26 22:00:35 2026 GMT
Subject: CN=3a1e5b5894167fb2a841a04a9f364e03ba7e2114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2d:62:2b:56:ab:f1:ed:26:81:36:1f:65:93:
ba:3a:02:c8:29:b7:8a:c5:8b:a1:a8:0b:80:f8:a8:
09:c3:f8:90:a1:af:03:08:fa:e6:a9:f6:2c:fa:30:
2a:7b:01:63:38:17:09:0c:38:ad:22:ec:18:6e:d2:
f3:2d:d7:94:58:ec:88:8c:59:69:12:9f:b0:f7:c0:
20:69:0a:4f:fe:ca:3b:84:8b:4d:fd:cc:2d:b2:87:
72:2f:d7:fb:f3:ab:e9:8a:db:33:8b:fd:19:a8:a0:
cb:0c:a4:aa:2c:86:ed:3f:1b:74:d2:32:0b:8a:00:
b5:a1:f6:0c:63:d3:26:b2:79:70:5b:fb:bb:55:fe:
cc:da:2c:6e:08:a2:f8:11:14:48:34:62:97:4b:6a:
6a:35:67:b9:3b:75:37:cb:c1:d9:69:3a:c4:c8:36:
99:5d:fd:0f:f2:11:f9:ef:51:47:54:f2:f5:d2:7a:
8c:ce:73:e9:bc:94:57:a8:ba:84:bb:68:1f:c4:bf:
be:10:75:1c:f6:65:78:26:e4:5d:04:18:75:5a:6b:
24:b7:74:e6:16:be:77:eb:a7:66:4b:84:0b:79:8d:
53:dd:df:09:ff:f3:e2:48:43:34:b4:28:4b:01:5a:
35:8b:6b:98:65:6a:ea:58:18:14:2e:55:a8:3a:7b:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1E:5B:58:94:16:7F:B2:A8:41:A0:4A:9F:36:4E:03:BA:7E:21:14
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8d:ce:8a:2e:88:43:e8:98:0b:07:4e:56:5f:cd:73:05:eb:
6e:e7:3f:73:d0:97:f6:d6:1e:4c:81:28:38:6a:1f:b2:53:72:
f3:d1:79:d1:f8:90:df:07:cd:31:6f:6c:42:53:a7:73:a9:5c:
1b:56:f6:91:75:c1:c5:51:d3:e6:27:65:41:c8:9a:7e:2b:62:
95:66:dd:43:6f:ec:40:13:74:00:e0:7c:69:37:e6:76:d7:b1:
bd:db:57:c4:e4:6d:7e:49:d5:82:36:4d:31:3e:68:76:3f:43:
87:bd:e7:39:76:8d:46:e9:78:0b:11:bd:f6:a7:55:c3:06:f2:
87:72:b2:ae:ec:28:1c:13:bf:61:39:92:40:70:81:48:bc:7a:
77:4e:0f:a5:a4:62:fd:8f:08:15:93:4e:36:ee:bc:d4:ea:13:
5a:da:42:b9:57:3f:9d:61:ac:9c:c7:37:85:66:11:1e:4c:dd:
9e:40:7f:e6:d7:b2:48:79:bc:0a:dd:a5:0e:ec:25:48:d4:1f:
af:49:49:0c:b3:6f:9c:9b:06:83:23:2c:02:58:86:55:de:54:
81:2c:5a:e5:f9:f4:dc:7e:9d:cc:97:65:56:70:71:73:4f:a3:
0b:f7:4f:2d:60:56:82:ba:a9:07:38:09:ab:ec:71:4b:95:0a:
eb:83:9c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:49:15 2026 by rpki-client