Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
File: yh79jmMWnY_b-YtxOfzd7a8BbLI.mft (raw, json)
Hash identifier: kHuvGrDir6cqVX+hGLywIh6epat8ODM73Dyzq13r1nA=
Subject key identifier: 54:43:07:1F:15:5C:CB:02:ED:5C:72:02:B5:23:DC:91:DC:3D:BB:A8
Authority key identifier: CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
Certificate issuer: /CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Certificate serial: 01A17D05194BB77F842C0D0F388FB053C670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 11:00:48 +0000
Manifest this update: Tue 27 Oct 2026 11:00:48 +0000
Manifest next update: Wed 28 Oct 2026 11:00:48 +0000
Files and hashes: 1: am-H2T7Ww6jJ95ZGxjcLz-wLU1Q.roa (hash: 2kQQ9mXqE14fd45u6l3SdSU3Gho7WxKdsdIPxleaIU8=)
2: yh79jmMWnY_b-YtxOfzd7a8BbLI.crl (hash: 4foLWXlpyqP4CTW/O9pyjWwW+T/bRMXwSJG1f0T0WBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:19:4b:b7:7f:84:2c:0d:0f:38:8f:b0:53:c6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Validity
Not Before: Oct 27 11:00:48 2026 GMT
Not After : Oct 28 11:00:48 2026 GMT
Subject: CN=5443071f155ccb02ed5c7202b523dc91dc3dbba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:f1:06:fb:f7:cc:f0:30:ed:c6:15:b3:1d:
34:5b:61:2f:e7:cd:1c:59:e0:ce:1a:98:10:96:96:
04:19:bd:ba:8b:9b:5f:4d:08:ba:86:6d:db:10:0e:
f7:28:2d:51:da:eb:71:73:40:b1:b3:8a:20:48:42:
a8:9b:99:d5:bb:b0:04:a0:f6:8e:94:9f:40:33:96:
0e:00:48:f7:d2:c2:43:17:d8:ad:7e:cf:07:93:60:
b7:73:c0:74:59:e2:ca:b8:8b:66:eb:6b:b6:5c:65:
88:55:ad:10:38:6f:e5:7b:31:ac:8c:72:48:13:71:
d0:ef:38:72:6a:0a:cd:06:7f:36:ea:3b:dd:1b:93:
28:fc:e5:e1:7a:5b:10:a3:44:e4:ec:01:34:c0:5e:
4c:98:05:cd:43:3d:ac:3d:c6:64:12:c0:b8:2f:47:
49:67:e7:dd:6a:bd:93:85:4a:d9:0a:16:2b:52:78:
c8:85:4f:c6:0d:83:6d:b6:50:54:51:39:06:b6:40:
26:b4:11:ba:56:d2:b8:1a:39:db:be:9e:d8:12:c1:
eb:ae:e7:26:db:ae:be:38:66:87:c9:60:7b:b0:69:
64:5b:ba:86:7b:f9:b4:16:90:3f:a3:88:5b:f9:cb:
03:30:bb:39:53:5b:84:08:a4:e6:10:d8:cd:1c:e5:
bf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:43:07:1F:15:5C:CB:02:ED:5C:72:02:B5:23:DC:91:DC:3D:BB:A8
X509v3 Authority Key Identifier:
keyid:CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c4:37:a4:47:2d:d4:ec:11:ee:64:a9:ca:7a:21:00:eb:9e:
5d:25:bc:a7:61:09:01:fc:44:d2:f9:52:72:65:26:e9:8d:26:
dc:c9:65:32:72:a5:84:49:f3:cb:2b:bb:51:71:5a:89:6b:5e:
ad:0b:12:8b:6f:0f:cd:52:fc:de:b2:8f:35:90:18:90:6a:ef:
79:2b:09:23:4f:71:e5:8a:85:56:33:5f:77:6b:e2:be:c7:c8:
62:aa:ad:91:8b:d6:bc:c1:3a:9d:1d:9c:8f:7c:80:82:53:30:
71:65:c9:14:3a:34:f6:76:50:83:7d:81:f8:53:8b:52:25:1b:
e6:5f:f1:ac:71:08:2a:7a:9b:b1:5b:50:1d:b4:1b:7a:a6:a0:
36:5d:6b:19:c2:7a:d7:89:d2:00:b3:0e:aa:33:72:63:6d:b2:
cb:b3:58:bc:fc:3b:c3:11:75:62:78:84:98:c1:57:f0:c1:96:
b2:65:16:09:23:78:62:1e:f1:cb:02:fc:3f:13:16:d0:03:e5:
41:d3:78:eb:4f:d6:15:19:ae:da:7f:87:62:4b:56:fb:43:cb:
b7:89:78:ef:2f:45:09:7c:59:9d:8e:e5:1d:25:5a:5f:67:10:
8d:a7:23:6c:c9:32:b4:d6:5e:bd:9e:f0:4b:6e:24:31:a4:a1:
57:ac:42:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:36:25 2026 by rpki-client