Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
File: YddkoENCcsEymumSiNCSvD7yIo8.mft (raw, json)
Hash identifier: UJd82TuNALl2XUnwB8Yg4xmQ6jaFqc0Fi5QlW2vhr5A=
Subject key identifier: 1A:0F:0B:28:10:95:00:4C:6A:C4:AE:A1:4C:01:85:A7:6A:CD:25:33
Authority key identifier: 61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F
Certificate issuer: /CN=61d764a0434272c1329ae99288d092bc3ef2228f
Certificate serial: 01A175B91BF561C6370F1F8EA06A85C0DA5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
Manifest number: 1A19
Signing time: Mon 26 Oct 2026 01:00:27 +0000
Manifest this update: Mon 26 Oct 2026 01:00:27 +0000
Manifest next update: Tue 27 Oct 2026 01:00:27 +0000
Files and hashes: 1: 1-yDfFT1Of1QgdiD6UOPZeuLc3DU.roa (hash: 8/0JD00W9iNEqIm7TkhD9o/ThL160i8acaV44zkpW3I=)
2: YddkoENCcsEymumSiNCSvD7yIo8.crl (hash: tpzwYM/w2JE2s38IBFNlcgljYIfusMe6wulluWMHdII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:b9:1b:f5:61:c6:37:0f:1f:8e:a0:6a:85:c0:da:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d764a0434272c1329ae99288d092bc3ef2228f
Validity
Not Before: Oct 26 01:00:27 2026 GMT
Not After : Oct 27 01:00:27 2026 GMT
Subject: CN=1a0f0b281095004c6ac4aea14c0185a76acd2533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:37:a6:27:89:97:5b:4c:c7:df:3c:1d:8a:
a2:ac:58:65:4f:e4:8f:06:2a:9a:f1:69:c4:ef:5c:
4b:d4:91:61:c4:6b:f3:77:64:3e:84:1e:97:89:d3:
49:8a:b1:5f:9e:9e:93:3f:1a:04:69:52:dc:e6:d1:
9c:20:3d:ec:01:d6:d6:3c:f2:ae:85:e7:08:88:00:
2a:80:75:0f:2a:6c:15:91:09:57:99:ff:31:9a:64:
ac:fd:c5:45:e1:86:2a:83:de:f5:94:fd:9f:7a:08:
36:36:b6:3a:dd:15:a6:5c:d5:81:16:27:39:e3:60:
ab:30:30:5a:65:95:a4:d6:c0:fc:67:7c:c3:98:10:
7e:51:da:9e:9c:fd:13:8c:cf:ed:25:50:5c:30:4b:
54:af:c6:37:3e:7a:f7:b2:c5:05:07:82:ce:6f:7c:
30:44:87:ef:39:77:60:91:fa:ab:cc:df:89:d8:b5:
50:8e:6e:ed:11:88:0c:ac:53:43:45:df:07:9d:91:
0f:35:27:91:04:5d:9f:90:dc:c7:76:28:f7:dc:ee:
e5:c3:88:8a:36:78:85:15:74:42:5f:44:e2:0c:74:
43:2a:6f:b5:f4:57:a9:75:31:02:db:b7:45:65:ec:
02:2a:ba:ef:08:c0:cc:c7:6e:93:2c:47:19:24:e2:
ee:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0F:0B:28:10:95:00:4C:6A:C4:AE:A1:4C:01:85:A7:6A:CD:25:33
X509v3 Authority Key Identifier:
keyid:61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:4f:82:3b:1a:48:d4:7c:c7:00:a2:64:e6:0b:9c:fa:d4:3c:
4c:d3:cd:7f:59:0a:24:4e:5f:08:c5:50:b3:c6:32:fe:8e:67:
70:e5:cf:4e:ad:7e:8b:7a:f8:f3:5d:2c:55:82:a6:3b:48:2e:
7c:95:90:1f:50:31:dc:61:04:9e:28:f2:0f:79:65:c5:24:7b:
2b:c4:23:5f:21:55:41:b9:eb:97:a4:c9:17:a1:e7:6d:aa:fd:
85:7e:60:7b:26:7d:37:86:1e:34:03:68:76:f0:fe:ed:70:59:
25:bb:1d:37:d5:86:d7:6c:ff:00:c7:a4:7e:10:5e:f1:61:7b:
fd:5a:8a:ad:95:87:40:9a:db:96:2e:e3:72:6a:f2:e1:a0:24:
6d:47:fc:03:bd:35:52:d5:3e:de:51:6e:a1:5c:43:7b:d2:45:
c1:8c:fe:f1:d8:84:6b:4c:ee:41:a5:77:58:c9:65:65:ff:63:
fc:4d:ff:98:45:d5:89:9a:9f:11:e1:4c:1b:4e:67:54:e6:13:
a5:0e:63:dd:46:96:e5:5b:2b:c9:c7:df:cb:cd:41:5e:b7:9e:
19:0f:37:c4:91:6a:f6:b3:f7:f8:55:0e:ec:30:0d:ce:5b:23:
e5:04:d9:af:a7:87:08:25:c0:9e:ad:09:6d:95:7a:dd:b8:fd:
47:18:02:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:56:01 2026 by rpki-client