Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
File: YRs47qO8cHP29KpNIe1BNmXXyic.mft (raw, json)
Hash identifier: b18gZdkRIg7wn+f+90q2T228sXtNTXVQUtXn1kBTR20=
Subject key identifier: FE:09:9A:FD:E6:34:DC:8E:AC:E2:FF:08:5F:BF:72:63:F4:28:19:1D
Authority key identifier: 61:1B:38:EE:A3:BC:70:73:F6:F4:AA:4D:21:ED:41:36:65:D7:CA:27
Certificate issuer: /CN=611b38eea3bc7073f6f4aa4d21ed413665d7ca27
Certificate serial: 01A183ABFD4041574C5442647ED34B261BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
Manifest number: 0133
Signing time: Wed 28 Oct 2026 18:00:48 +0000
Manifest this update: Wed 28 Oct 2026 18:00:48 +0000
Manifest next update: Thu 29 Oct 2026 18:00:48 +0000
Files and hashes: 1: TcaCPZlW9b7nUjd0B-e1yd0zAE8.asa (hash: Oy2UJlXOZ8xOLUsWDNeaDlW0wd+hjDN8NHEzf1/ZIt0=)
2: YRs47qO8cHP29KpNIe1BNmXXyic.crl (hash: aU1na40Jo9RPnrgD1WcDOyc4xLWRLj46qXAdrrMyzzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ab:fd:40:41:57:4c:54:42:64:7e:d3:4b:26:1b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611b38eea3bc7073f6f4aa4d21ed413665d7ca27
Validity
Not Before: Oct 28 18:00:48 2026 GMT
Not After : Oct 29 18:00:48 2026 GMT
Subject: CN=fe099afde634dc8eace2ff085fbf7263f428191d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0e:29:93:7f:92:f8:a6:c4:66:fd:dd:b5:ab:
76:63:56:05:00:e4:a0:f1:7b:a1:1a:43:78:3a:62:
a9:1f:3b:dd:bb:45:79:72:89:2f:4c:19:06:9a:bb:
51:8f:ad:99:e8:fe:37:8a:0c:41:c8:63:23:63:44:
f4:51:5a:44:72:7e:08:d5:86:68:1f:6c:6b:c7:b0:
a7:60:19:47:82:42:b1:ec:3c:76:77:da:42:c3:dd:
e8:b9:25:02:80:9b:bd:e5:d7:4a:88:7b:42:76:3e:
16:3a:63:d8:fe:90:56:e7:f4:e9:fa:4e:7b:50:0f:
03:b8:86:1e:25:04:7c:bf:07:cb:7a:30:7f:59:9d:
3e:ed:75:c9:70:c9:ce:b8:c6:3b:a4:a4:0f:06:92:
66:01:fd:f8:84:8b:7d:81:bd:ab:24:5f:cb:f4:2f:
4b:d2:4b:5a:ab:56:00:0f:ad:90:7b:0e:7b:cc:27:
cb:c6:91:f4:9f:e8:cc:35:90:b6:b2:9d:6c:4c:13:
d0:97:07:9b:d8:46:a0:2f:04:39:53:aa:2e:1a:d2:
79:5c:20:48:db:ea:3c:19:2e:50:89:01:ca:4d:91:
9d:2f:7c:fc:6e:e9:67:f4:6b:7a:21:08:9a:5a:59:
56:85:12:ef:9b:45:c6:04:73:7d:6c:1c:e1:17:18:
6b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:09:9A:FD:E6:34:DC:8E:AC:E2:FF:08:5F:BF:72:63:F4:28:19:1D
X509v3 Authority Key Identifier:
keyid:61:1B:38:EE:A3:BC:70:73:F6:F4:AA:4D:21:ED:41:36:65:D7:CA:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:17:40:a0:ed:ca:9b:1a:7d:2b:9e:b2:47:6f:68:90:3f:64:
57:e1:da:38:61:5e:75:43:26:ed:69:57:8b:fb:50:19:2a:89:
d7:d8:7b:33:a5:ec:84:54:30:c8:47:2f:5a:6e:3e:79:5b:09:
ef:02:84:0e:a4:ca:98:42:7d:42:70:02:05:61:aa:55:76:9e:
39:82:b5:76:1c:1e:cc:e0:23:25:93:c7:c7:47:26:c0:be:bc:
60:df:3a:4a:95:bd:84:21:e8:e6:a2:2a:41:0d:f8:45:06:39:
87:50:68:fe:71:92:a4:fe:46:b8:95:5d:2e:03:ff:11:83:bc:
b8:ef:a4:a3:dc:01:b7:d4:92:8b:7d:68:f5:e0:14:5f:c2:95:
49:9f:2e:73:50:fc:ce:74:20:af:82:37:35:03:aa:a9:32:31:
47:20:e8:3c:d9:ac:2a:a5:29:fb:7d:a7:61:e2:a0:b6:1f:4a:
57:0c:b0:ba:87:83:fb:d8:a4:b3:77:bc:c6:dd:0d:fd:48:53:
f1:4d:d8:7c:7b:57:e0:6f:0a:01:69:5e:37:1b:37:d1:a8:55:
30:3e:ea:17:63:2a:18:72:6d:17:89:50:c7:3c:75:e7:e6:ce:
cf:2f:87:85:3f:a8:35:e7:e8:2d:6d:3f:0d:0f:27:e4:fa:7c:
88:98:cb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 02:59:09 2026 by rpki-client