Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
File: ytecEmuC93zGO1prbNi9rm4PWjw.mft (raw, json)
Hash identifier: 4No1vLxhbSce6bHlFAKGQp0S7IU22GIUucTcyqRZrII=
Subject key identifier: 5F:D3:B5:40:81:4E:E6:23:0E:49:33:C8:7E:D1:F0:FF:9F:D5:A7:D2
Authority key identifier: CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
Certificate issuer: /CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Certificate serial: 01A14917D37BE1635695C0EF131023E4B8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
Manifest number: 1A3D
Signing time: Sat 17 Oct 2026 09:01:00 +0000
Manifest this update: Sat 17 Oct 2026 09:01:00 +0000
Manifest next update: Sun 18 Oct 2026 09:01:00 +0000
Files and hashes: 1: 39TW_rteZEmG2yqgCNBCF7PjZJA.roa (hash: QiC1evAcCRcezlzRHbRvqDU6mKjNFQuGOEOLFGB1NnM=)
2: ytecEmuC93zGO1prbNi9rm4PWjw.crl (hash: ZI+hWI4Z7RvNkUQRRntsPup/LYjY8Db1m1T390FKNhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:17:d3:7b:e1:63:56:95:c0:ef:13:10:23:e4:b8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Validity
Not Before: Oct 17 09:01:00 2026 GMT
Not After : Oct 18 09:01:00 2026 GMT
Subject: CN=5fd3b540814ee6230e4933c87ed1f0ff9fd5a7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:38:4a:25:40:d6:76:b3:5d:e2:e8:2c:64:
82:42:b4:bb:a4:87:49:b1:fe:d9:ec:4f:07:8c:2c:
36:1f:a2:88:ca:a9:7e:4a:3d:b2:6e:fa:df:5e:57:
7d:8d:d3:80:58:30:ac:ec:06:a2:bc:f3:b0:9b:ac:
c0:87:76:e9:61:f2:70:ca:b4:4f:47:a8:15:80:d8:
02:27:cb:58:35:34:5f:be:fc:ef:49:cb:5f:c7:e8:
f4:9c:ea:2b:14:90:43:80:54:7c:16:3a:6b:5d:14:
d8:24:cf:26:1a:fa:8a:d2:9c:5d:60:95:e7:c0:05:
2f:11:c6:21:5b:be:ca:5b:06:70:ce:3c:19:b0:96:
8e:52:7f:ae:11:aa:cf:3b:ac:11:6b:2c:37:a2:91:
5c:2e:54:8e:7a:00:5e:47:76:c2:6c:3f:94:10:f2:
bf:87:14:1f:63:88:09:26:a9:7d:2d:8c:da:04:44:
9d:28:cc:ab:2c:69:59:d2:59:8d:5b:59:18:18:22:
7e:9f:a9:53:f5:2c:a3:d1:8c:dc:de:47:30:7b:0c:
6b:c0:5f:98:bf:b8:60:66:18:44:38:fe:ca:4a:75:
c9:14:9e:fb:92:dd:e4:28:8c:00:dd:b5:22:87:d5:
7a:5d:9f:bb:6a:ad:5a:21:61:1d:4c:d4:82:9f:90:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D3:B5:40:81:4E:E6:23:0E:49:33:C8:7E:D1:F0:FF:9F:D5:A7:D2
X509v3 Authority Key Identifier:
keyid:CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0b:92:6c:dc:f5:2e:de:98:56:ad:8d:af:fc:e3:f1:93:ae:
c3:ff:71:7f:7b:80:15:40:01:ca:60:01:dd:09:66:e1:55:2b:
62:a2:fb:46:0c:cf:f4:17:59:5c:f6:66:f2:a1:b1:4e:ef:ca:
60:87:5e:ad:0f:7b:b2:24:c0:bf:46:02:70:61:66:43:2a:ad:
94:8e:36:b7:bf:9a:7a:ba:6c:a9:6f:5a:4b:45:56:6f:f1:f8:
fe:09:2a:0c:8b:07:26:05:7e:86:95:12:4d:88:12:c1:93:eb:
9e:af:66:68:63:7c:f1:28:57:91:79:f3:8b:9b:2e:42:b6:95:
48:12:8b:e5:f1:0c:2e:70:c0:61:35:95:3e:52:d0:8c:86:92:
30:e3:09:c2:7e:6d:56:bb:7b:6b:21:6e:b1:32:f5:90:38:46:
9e:32:19:58:0f:bb:b6:6c:ca:34:58:66:cd:b3:70:4d:90:22:
e4:8e:06:d7:64:b5:37:d8:cb:88:d9:ae:74:c8:5a:c4:58:b4:
e4:90:3d:92:c0:b6:1a:ce:51:da:61:9f:15:d9:1d:06:ad:1d:
81:bf:36:da:48:80:43:10:41:77:1f:5d:01:2e:8a:23:28:fb:
2c:80:6c:5a:6b:ee:73:67:8f:3c:69:08:4c:54:7a:e7:47:31:
be:91:b1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:28:06 2026 by rpki-client