Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
File: yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft (raw, json)
Hash identifier: F8zyXUGpcWJ3I1EvnR4c/25sqPTJjHDI0jMMP3X44YM=
Subject key identifier: A3:28:75:CC:20:6D:B3:4C:74:49:18:EA:8A:A7:8C:96:34:B0:A7:B8
Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b
Certificate serial: 01A178F1A1E0D5F6D3397AE62E13CDC6FADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
Manifest number: 1AC7
Signing time: Mon 26 Oct 2026 16:01:03 +0000
Manifest this update: Mon 26 Oct 2026 16:01:03 +0000
Manifest next update: Tue 27 Oct 2026 16:01:03 +0000
Files and hashes: 1: 2BMOpp_wwQldET06QZPy2wGLMZE.roa (hash: o3jxLcUWsaBV2UnbMYTOzdFwg6geCgqlvEJuA1VSTfU=)
2: hoZI_9EArI1Si7uz13Ke8OnteiE.roa (hash: LayP+QLnOj4vcYwwGf7M4XCZtnOUkpFaK8bKqcrT3zA=)
3: yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl (hash: AMTUYktuEKrpgvqzkpOFUaEFIjE9PrCsVlrj2mFpbys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:a1:e0:d5:f6:d3:39:7a:e6:2e:13:cd:c6:fa:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37843f0752224459e6034569a217c8b611564b
Validity
Not Before: Oct 26 16:01:03 2026 GMT
Not After : Oct 27 16:01:03 2026 GMT
Subject: CN=a32875cc206db34c744918ea8aa78c9634b0a7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:70:00:f2:85:40:3b:dc:c4:e5:d6:82:70:
1a:8a:70:0d:bf:89:5c:22:a2:2d:2b:21:f1:02:d0:
1f:85:d7:f6:9d:cb:35:b4:90:9d:9f:44:3c:e9:07:
fa:c9:fc:00:4c:80:da:94:a9:4d:47:74:8b:88:63:
f5:ef:3f:eb:46:61:6f:d4:fa:98:a6:41:f4:67:1f:
34:40:b0:33:fd:b7:79:f1:77:b5:65:26:ee:22:cd:
ca:ac:40:fe:43:92:a1:72:32:64:41:4f:ca:f0:29:
d0:61:b9:ec:52:a5:42:f8:89:12:ac:7b:7a:80:c6:
97:89:23:fe:4f:c9:f7:ab:e2:99:e7:8d:bd:c8:d0:
bb:be:e2:1f:bc:29:e2:85:1f:36:a8:1d:b3:20:3c:
fe:c8:02:a7:65:d9:37:1f:24:87:f7:d0:21:32:9f:
d9:f2:38:19:25:78:87:d5:5c:b1:c9:aa:57:b7:94:
a7:76:b6:0c:19:f0:e5:4f:05:0f:30:f9:b1:59:95:
43:fc:d0:f8:51:79:46:e1:c9:6c:f7:c2:77:55:df:
ca:f4:30:4c:f4:7b:1e:ec:39:b7:4f:62:88:3c:a5:
37:5a:46:50:6a:45:46:66:85:c5:f5:62:83:78:61:
bd:15:e0:13:f3:cd:32:76:24:83:71:aa:67:97:82:
cf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:28:75:CC:20:6D:B3:4C:74:49:18:EA:8A:A7:8C:96:34:B0:A7:B8
X509v3 Authority Key Identifier:
keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e7:50:1b:fc:0a:3f:c0:e8:a7:f2:56:c8:f5:54:06:06:95:
9f:f6:74:6b:eb:f8:02:18:bb:22:ed:1f:ea:6d:55:d1:52:af:
be:ca:11:6a:26:5c:e1:a0:ba:bd:78:b7:55:ba:90:f7:b0:1d:
0a:55:33:65:73:5c:da:d5:b4:f9:0b:dc:29:fe:67:34:65:b6:
7a:ec:9f:0d:8b:34:db:ce:39:2d:08:df:fa:12:d3:c8:1c:7e:
d2:06:ec:14:fa:3e:f9:7b:02:28:ba:21:a7:58:5f:4c:98:b8:
59:b4:f8:e6:56:cb:b4:d1:01:db:6f:9a:da:a9:3d:f8:56:8e:
9e:06:81:41:84:9b:8e:37:43:e4:22:01:34:ab:ca:9e:85:ae:
7e:48:e7:1a:5a:84:ad:2e:a1:d8:b6:4b:e9:d5:e2:79:1c:7f:
37:cd:4e:e6:00:1f:f9:d1:c7:10:ff:76:ab:b4:f7:98:2c:b6:
5b:84:9f:79:10:8d:03:51:5d:7f:20:af:14:ab:c8:3f:27:4d:
92:24:5c:94:1f:6c:ee:51:e7:48:e1:d6:e3:bd:cf:e8:55:1c:
4b:f2:32:1a:8b:bc:c9:f8:49:43:21:8f:2f:be:ba:96:bf:ee:
d8:3a:35:0d:f1:b8:d0:c9:0a:45:9a:16:ce:a9:41:b3:5d:64:
4c:c5:bf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:44:29 2026 by rpki-client