Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
File: YRs47qO8cHP29KpNIe1BNmXXyic.mft (raw, json)
Hash identifier: cD/1EJqEMtOqKx+sg03GWMcyuKBjB6W2QywI3KWDjJg=
Subject key identifier: 34:67:AE:6D:8E:CB:1A:32:3C:01:8C:18:12:88:D2:87:22:01:F6:BD
Authority key identifier: 61:1B:38:EE:A3:BC:70:73:F6:F4:AA:4D:21:ED:41:36:65:D7:CA:27
Certificate issuer: /CN=611b38eea3bc7073f6f4aa4d21ed413665d7ca27
Certificate serial: 01A1859B031F052CA03489F314CF8FDD1646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
Manifest number: 0134
Signing time: Thu 29 Oct 2026 03:01:30 +0000
Manifest this update: Thu 29 Oct 2026 03:01:30 +0000
Manifest next update: Fri 30 Oct 2026 03:01:30 +0000
Files and hashes: 1: TcaCPZlW9b7nUjd0B-e1yd0zAE8.asa (hash: Oy2UJlXOZ8xOLUsWDNeaDlW0wd+hjDN8NHEzf1/ZIt0=)
2: YRs47qO8cHP29KpNIe1BNmXXyic.crl (hash: 456g1jjs1uCTJNaPlPupWUJrkIQhgbTdjZmOG8BBJ3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:9b:03:1f:05:2c:a0:34:89:f3:14:cf:8f:dd:16:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611b38eea3bc7073f6f4aa4d21ed413665d7ca27
Validity
Not Before: Oct 29 03:01:30 2026 GMT
Not After : Oct 30 03:01:30 2026 GMT
Subject: CN=3467ae6d8ecb1a323c018c181288d2872201f6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:93:d4:80:c2:4c:ae:e7:22:04:1d:82:62:b5:
f4:16:79:fb:d0:de:f4:ec:32:d0:f6:96:ca:d8:6d:
8e:b1:d6:5c:3a:cf:7c:8e:c1:c6:5d:c4:f7:ee:70:
0b:2f:06:27:8f:0e:ad:65:9a:ba:09:83:f0:8d:6c:
1e:ee:23:48:8f:35:bc:24:c4:37:c9:b4:b0:b5:e0:
9a:c9:8d:ea:b3:33:c5:d1:10:af:5a:71:24:96:8c:
60:00:b0:6c:91:1c:1a:c4:98:88:60:69:03:1c:e3:
cf:79:ad:a6:94:23:71:05:68:94:b3:a8:94:45:69:
89:26:e6:07:96:b9:08:5a:3e:83:96:ea:ab:58:ae:
20:d4:6a:bc:a1:ca:8b:44:0c:9e:a5:d6:3f:d8:e7:
79:e8:63:21:20:e6:90:00:bc:d6:66:31:7f:33:87:
5c:76:e5:5c:c1:cc:38:2d:14:80:43:d6:9c:db:04:
21:cb:05:cd:5e:68:04:83:f7:06:34:96:d8:e6:f4:
9c:99:7d:85:a2:52:d0:f0:b4:df:bd:38:fa:29:a8:
f3:a2:bf:ea:ff:68:3d:34:29:63:aa:d1:29:fe:8a:
01:d5:a1:e6:04:7e:d2:dc:b7:27:e9:eb:7d:75:98:
22:e6:1c:3d:eb:a7:89:0a:a9:bc:d1:4b:ea:d6:22:
9c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:67:AE:6D:8E:CB:1A:32:3C:01:8C:18:12:88:D2:87:22:01:F6:BD
X509v3 Authority Key Identifier:
keyid:61:1B:38:EE:A3:BC:70:73:F6:F4:AA:4D:21:ED:41:36:65:D7:CA:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9a:a5:1f:0f:92:03:40:49:44:6a:c1:56:21:3d:cb:cc:72:
2d:12:37:82:a4:be:53:44:88:bf:b9:bd:76:c8:9e:51:b4:0c:
cf:c0:f7:e7:b4:c7:76:9b:22:91:e5:37:8b:1f:39:d2:1f:aa:
a5:65:c9:16:8b:84:d9:bd:82:d2:dc:d7:12:b6:c1:ea:4d:d3:
12:32:70:2e:2b:3e:ed:11:d4:f5:8d:40:ac:81:0a:47:0c:ef:
f9:c7:25:dc:2d:8f:01:ad:27:5b:e6:a2:24:45:69:29:32:6f:
28:64:83:72:bf:7f:29:d3:57:75:55:ed:87:e7:81:2c:8f:9d:
1e:f3:69:dc:28:ac:65:04:51:11:41:70:6f:14:8a:5d:9c:46:
2f:24:a9:3e:34:28:96:06:40:1f:23:9d:a8:82:01:73:bf:03:
35:a6:62:60:1b:1f:de:87:f7:78:55:54:ab:e6:f6:bb:74:82:
36:13:d5:08:96:6e:e2:92:bf:54:d4:3e:85:3e:d4:c5:e1:6a:
2d:5e:84:05:db:9a:a5:fa:40:a5:c3:9b:d2:9b:9f:e6:f5:30:
4c:30:4e:16:ff:00:46:c5:97:47:b5:e5:0d:8c:d8:51:a4:9b:
8a:9f:1d:fc:dc:61:9a:e2:05:4c:07:61:99:eb:ed:96:b3:07:
46:54:bd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 06:06:05 2026 by rpki-client