Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
File: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft (raw, json)
Hash identifier: 43X93XT9V0clmEpANnnbJU3UuinjX54rIDC9z1ZggG8=
Subject key identifier: 75:DA:18:A4:13:8C:4A:EA:47:11:DA:D2:FC:07:86:60:C2:56:AD:66
Authority key identifier: C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
Certificate issuer: /CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Certificate serial: 01A17BF2A8E9B1CFFB781B9066986AD78A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 06:01:02 +0000
Manifest this update: Tue 27 Oct 2026 06:01:02 +0000
Manifest next update: Wed 28 Oct 2026 06:01:02 +0000
Files and hashes: 1: 2FrN58Szgu73eOaW5wzREjA1APU.roa (hash: eg4laZvDlSkpaWdKinkI+Xun4MLQfCIFg3SA+VvwdzM=)
2: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl (hash: DLpD1U4oWnIpYT4svVHp6E8j8bqD8ews3zF/9J0eXEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:a8:e9:b1:cf:fb:78:1b:90:66:98:6a:d7:8a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Validity
Not Before: Oct 27 06:01:02 2026 GMT
Not After : Oct 28 06:01:02 2026 GMT
Subject: CN=75da18a4138c4aea4711dad2fc078660c256ad66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:be:a1:21:c0:64:12:65:ce:1b:85:23:e1:
de:1d:f4:a5:da:ca:7a:a9:ba:f1:aa:9e:ff:e3:5b:
07:f7:f3:b0:7f:1e:77:52:d2:6b:68:e9:33:4f:af:
9e:5f:bf:00:6d:45:a4:8d:42:74:65:d8:5c:3d:41:
c6:8d:31:7b:b0:a0:5f:68:79:ea:35:b2:00:e3:3e:
53:69:52:e5:88:97:f2:81:1c:bc:4a:ff:4a:7d:fb:
2d:fb:44:74:c9:01:2b:e0:40:13:05:4a:ab:d5:c8:
e0:bd:f9:be:75:17:94:43:09:b3:51:65:42:8e:b4:
9e:d1:fe:c0:26:a0:24:3e:b4:aa:62:df:46:92:b1:
33:7f:0a:f9:89:9d:57:8e:1f:90:18:fb:b8:35:ca:
7b:2b:39:25:95:9e:40:40:c9:a1:ff:47:73:f9:3d:
84:31:12:b8:32:60:1e:3b:34:8b:f2:f7:aa:81:19:
3d:13:26:25:47:e8:ba:77:fd:bc:ea:05:e1:f7:ff:
f6:55:0e:7f:14:4a:93:a2:a4:5d:1a:ab:1a:1f:3a:
d7:c6:8f:b5:45:27:d3:db:e6:39:00:10:b8:f1:c7:
01:40:c5:f6:0b:d5:c6:1a:28:0e:76:1c:4a:68:ca:
24:1a:1b:4c:d6:ba:e3:6a:1d:6e:0d:bb:96:17:7a:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DA:18:A4:13:8C:4A:EA:47:11:DA:D2:FC:07:86:60:C2:56:AD:66
X509v3 Authority Key Identifier:
keyid:C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:46:c6:8f:0a:67:cb:57:ff:d1:32:70:4f:7b:b8:b1:da:bc:
08:f2:7a:ba:4a:ac:a5:b5:2b:b3:95:7d:f8:83:f2:48:85:da:
02:42:b0:82:d6:de:95:1d:69:65:f1:79:1a:2b:31:2c:39:a0:
90:db:e3:85:58:3a:98:02:02:b2:2b:e5:af:e8:dc:40:f3:e2:
6e:e2:3f:63:15:7a:48:fe:71:ba:83:f4:c5:ac:c1:cd:ba:d9:
62:db:29:92:f4:f0:64:77:80:7a:cd:46:72:03:0a:25:38:ae:
22:73:5b:44:5c:bc:e4:11:21:af:99:a9:f6:07:26:4e:f2:60:
fa:cb:20:0a:a8:e7:71:23:d7:55:18:7c:df:b3:7f:f6:98:67:
0d:42:5b:d0:ac:a3:0d:6d:80:02:8e:41:be:aa:bd:c3:13:65:
af:4d:51:14:f6:f5:47:1e:6b:84:ad:6d:d6:51:39:32:4f:6b:
4c:4d:fb:da:c6:3f:88:6a:e2:5c:5d:1a:54:58:ab:ea:9b:06:
28:59:c2:ef:7f:9d:17:91:e5:e1:c3:65:6e:3b:f1:12:7e:37:
55:8b:18:37:d2:dc:29:3a:18:c5:84:8d:99:e2:75:ed:98:97:
a8:a5:de:13:bd:ae:bd:55:a5:f3:93:63:64:dc:40:4c:e2:a2:
5f:73:11:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:42:46 2026 by rpki-client