Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.mft
File: yiMaQ2K8HsD9tDSZAbYcz51nnWU.mft (raw, json)
Hash identifier: VV7ZCdvdqLeqH2oJe3rvf9WJsbxGXPAyx1d/yp1rUOQ=
Subject key identifier: 69:67:E7:FF:EF:07:05:BA:19:EC:A3:C8:77:2B:9B:84:46:ED:98:C0
Authority key identifier: CA:23:1A:43:62:BC:1E:C0:FD:B4:34:99:01:B6:1C:CF:9D:67:9D:65
Certificate issuer: /CN=ca231a4362bc1ec0fdb4349901b61ccf9d679d65
Certificate serial: 01A187885594A2A39FD93900630EFFE25CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yiMaQ2K8HsD9tDSZAbYcz51nnWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.mft
Manifest number: 0850
Signing time: Thu 29 Oct 2026 12:00:21 +0000
Manifest this update: Thu 29 Oct 2026 12:00:21 +0000
Manifest next update: Fri 30 Oct 2026 12:00:21 +0000
Files and hashes: 1: WxNi3FY5cr-Bjj8BRJGuFpl1ulQ.roa (hash: uM3IRzOQy7yokmWWB+yCvHyVpY0d0sa0ZM1vmaCKkO8=)
2: yiMaQ2K8HsD9tDSZAbYcz51nnWU.crl (hash: 3EIX6bWjriFLV/gNskFUlWTeCA0PsxPHqYfJNLZzv+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yiMaQ2K8HsD9tDSZAbYcz51nnWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:88:55:94:a2:a3:9f:d9:39:00:63:0e:ff:e2:5c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca231a4362bc1ec0fdb4349901b61ccf9d679d65
Validity
Not Before: Oct 29 12:00:21 2026 GMT
Not After : Oct 30 12:00:21 2026 GMT
Subject: CN=6967e7ffef0705ba19eca3c8772b9b8446ed98c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b5:70:95:60:df:be:cd:aa:4d:5d:a9:ad:73:
b9:65:c5:8e:22:b9:75:cd:0b:f7:67:ee:60:6b:31:
84:02:d1:35:d5:4f:fc:f1:0b:9a:d6:64:8b:95:11:
b0:a7:58:ab:8f:3e:4c:32:c2:51:2c:c8:3f:2b:77:
d4:26:dc:49:b2:60:61:37:0a:a1:94:3b:8b:e7:68:
79:04:69:68:f7:57:9b:bf:53:66:28:8d:b0:4e:5d:
67:bd:dc:6a:fd:dd:ad:6e:77:48:4a:0c:f8:1b:cd:
d3:9e:c6:38:c3:de:2f:30:1c:a6:d0:39:6c:4f:27:
82:8e:27:c5:27:99:0a:19:ae:2e:bf:7b:af:42:3a:
e1:07:2b:d4:57:2c:e5:bd:4d:11:af:db:06:cf:2b:
ad:2a:97:72:82:fc:9f:47:bb:f0:51:88:d2:d0:8b:
c3:10:c9:e9:fb:2c:81:fa:5b:56:53:78:53:7c:fd:
13:39:f2:4c:b7:a6:ad:5e:54:4b:7e:b1:3c:47:44:
b6:c4:1e:83:30:9d:0a:2e:52:2c:fd:03:c0:ea:83:
48:a6:00:a0:65:ad:44:4f:42:33:5c:4d:2e:65:93:
23:99:4d:56:dd:5a:9c:00:5f:9f:9f:72:98:49:ec:
25:51:df:3f:2d:00:0b:09:84:0f:18:32:fa:f9:0b:
6e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:67:E7:FF:EF:07:05:BA:19:EC:A3:C8:77:2B:9B:84:46:ED:98:C0
X509v3 Authority Key Identifier:
keyid:CA:23:1A:43:62:BC:1E:C0:FD:B4:34:99:01:B6:1C:CF:9D:67:9D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yiMaQ2K8HsD9tDSZAbYcz51nnWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:bb:68:0d:0c:fb:b0:6f:0c:f2:ee:82:92:ba:5a:8d:8f:f0:
20:65:14:6a:8b:03:2d:66:13:f0:94:d1:7e:a3:89:e1:03:93:
f9:cf:7f:11:58:6e:33:4a:4c:9e:fe:7d:2a:fa:cc:9f:05:60:
5a:cc:40:d0:85:85:a7:b4:d8:62:79:5e:2f:42:89:72:71:a3:
9e:6c:37:ac:c1:49:af:e0:61:a3:e7:17:10:f9:75:ef:8a:f4:
5b:24:ff:7e:1f:06:da:9f:09:dc:22:09:c1:af:17:e0:72:40:
17:23:c5:47:bf:42:aa:b6:00:c8:58:7a:c0:6f:40:4b:6f:c2:
e4:96:9d:66:d1:c3:5c:29:17:4a:a3:03:20:14:c3:9d:0d:30:
2b:bb:a3:1f:6f:e8:9d:3e:95:16:63:46:b7:21:8d:5f:dc:c3:
a0:a5:5d:62:57:ad:fc:b5:6a:41:6c:4a:88:a8:d3:d6:90:fd:
86:d6:6f:9a:7a:8d:39:3c:36:c0:68:95:76:75:54:b5:cc:95:
ba:2d:a8:57:63:9e:b6:3a:84:23:eb:d9:13:3d:8c:d7:33:c6:
e8:f3:d7:bb:3e:ae:ef:e2:75:5a:ed:37:f5:c0:2d:5c:8d:5a:
06:fc:f6:4e:c6:6e:5d:78:75:a4:5d:2c:b4:9e:8c:d1:ad:1d:
e8:c6:fd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:59:25 2026 by rpki-client