Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/YdQKxaVCVASCTrMqHM9R9dy3hRs.mft
File: YdQKxaVCVASCTrMqHM9R9dy3hRs.mft (raw, json)
Hash identifier: X+ZJELMnCztDE38HuVIkfs1rdw9Fy0tX4iMGb3tdQaQ=
Subject key identifier: C5:43:FD:4A:FA:BF:0A:3D:EC:04:31:20:1A:0E:67:1C:5A:6D:BC:8F
Authority key identifier: 61:D4:0A:C5:A5:42:54:04:82:4E:B3:2A:1C:CF:51:F5:DC:B7:85:1B
Certificate issuer: /CN=61d40ac5a5425404824eb32a1ccf51f5dcb7851b
Certificate serial: 01A17DE13D01FE6A417E2E5940A872119085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdQKxaVCVASCTrMqHM9R9dy3hRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/YdQKxaVCVASCTrMqHM9R9dy3hRs.mft
Manifest number: 013F
Signing time: Tue 27 Oct 2026 15:01:15 +0000
Manifest this update: Tue 27 Oct 2026 15:01:15 +0000
Manifest next update: Wed 28 Oct 2026 15:01:15 +0000
Files and hashes: 1: FlZsev4qmKu2pwPsQK4F4RVM8mI.roa (hash: ud7gR1MM1r5c1XfP6THb0VBi1wOIgntgdITcMFxgOdk=)
2: YdQKxaVCVASCTrMqHM9R9dy3hRs.crl (hash: bwCIPa/SPcPgvlSPvEaOZ298rjuWzqUyfKaJ1orM6GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/YdQKxaVCVASCTrMqHM9R9dy3hRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/YdQKxaVCVASCTrMqHM9R9dy3hRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdQKxaVCVASCTrMqHM9R9dy3hRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:3d:01:fe:6a:41:7e:2e:59:40:a8:72:11:90:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d40ac5a5425404824eb32a1ccf51f5dcb7851b
Validity
Not Before: Oct 27 15:01:15 2026 GMT
Not After : Oct 28 15:01:15 2026 GMT
Subject: CN=c543fd4afabf0a3dec0431201a0e671c5a6dbc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:62:75:58:fb:57:47:41:bb:31:9b:40:b6:
bd:0e:76:18:c3:95:85:6f:0f:1c:ba:ae:82:45:69:
6d:e9:fe:99:f8:e8:ec:76:e4:39:c0:ff:8f:f9:4c:
88:28:ec:b4:25:31:b5:f9:fe:b0:78:4e:e7:af:a4:
2f:58:8d:6a:ff:f5:fe:64:1e:e9:47:a1:29:e0:fb:
46:b4:ac:b6:2a:f5:c1:47:14:97:3b:e2:c8:3f:3c:
90:98:b7:b7:12:32:aa:a1:30:25:d9:1e:9c:8a:22:
d7:28:56:4d:04:c1:02:7d:25:dd:3b:25:bf:49:0b:
81:f2:94:db:3b:6b:99:1c:4d:34:1f:2a:0d:aa:4f:
ca:3e:d2:3b:64:83:41:75:1e:6d:c1:af:93:f7:b0:
03:cd:25:67:01:eb:61:81:7a:99:a7:d7:43:d4:45:
85:75:f0:16:91:c2:94:54:8e:35:1e:97:fa:31:17:
38:a7:17:9e:33:ca:d6:b7:9d:e0:7e:37:87:7f:9c:
ab:56:09:e9:85:71:85:72:20:1b:eb:44:4a:2b:8b:
4c:5f:cd:57:22:ee:f1:4e:a5:94:c6:ec:74:3b:63:
06:7d:ba:ed:eb:44:42:4a:9b:ff:a0:c2:5c:71:89:
e1:00:90:a5:cc:03:8d:a3:2d:9b:c3:99:dc:83:ce:
6b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:43:FD:4A:FA:BF:0A:3D:EC:04:31:20:1A:0E:67:1C:5A:6D:BC:8F
X509v3 Authority Key Identifier:
keyid:61:D4:0A:C5:A5:42:54:04:82:4E:B3:2A:1C:CF:51:F5:DC:B7:85:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdQKxaVCVASCTrMqHM9R9dy3hRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/YdQKxaVCVASCTrMqHM9R9dy3hRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/YdQKxaVCVASCTrMqHM9R9dy3hRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:81:68:86:3c:43:a5:c8:65:c5:eb:c2:3c:c8:20:7e:6a:73:
e9:9e:2e:35:65:12:50:6d:d5:ea:85:3b:03:4a:52:58:88:b4:
d2:49:d1:2f:20:67:2e:73:f6:0f:f0:55:e7:2a:ae:51:74:bd:
17:a8:66:22:72:a5:fd:fb:4c:02:89:96:6d:4e:28:04:07:04:
d1:70:5c:e7:1e:8a:cd:03:8c:23:cc:1a:02:6e:8e:d2:31:62:
11:c9:b2:f0:40:88:e1:da:44:c8:ee:83:05:af:0c:99:ec:0f:
58:3e:61:76:ad:2e:1c:9e:38:eb:3c:f7:c1:18:90:8d:72:79:
93:f3:74:6e:5b:f8:28:85:ad:8b:bd:60:9f:52:37:3d:49:a7:
9c:91:69:8c:1c:77:48:f8:64:40:47:ac:ec:9c:3d:b6:d1:d5:
1a:48:bf:b2:da:35:be:15:14:c9:ae:ac:a5:f3:82:65:2b:30:
6a:57:fe:a5:b3:0a:32:31:55:5e:3f:49:01:76:6a:70:87:a1:
04:7a:aa:74:ab:2e:22:1a:75:f2:07:27:48:17:29:7b:f5:12:
d7:ee:bd:9c:5f:95:46:c7:36:2b:8a:8b:0b:15:0e:93:b2:54:
40:15:38:0c:66:3c:38:1e:41:86:c4:23:61:13:08:99:67:92:
2c:0d:51:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF94T0B/mpBfi5ZQKhyEZCFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZDQwYWM1YTU0MjU0MDQ4MjRlYjMyYTFjY2Y1MWY1ZGNi
Nzg1MWIwHhcNMjYxMDI3MTUwMTE1WhcNMjYxMDI4MTUwMTE1WjAzMTEwLwYDVQQD
EyhjNTQzZmQ0YWZhYmYwYTNkZWMwNDMxMjAxYTBlNjcxYzVhNmRiYzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspNidVj7V0dBuzGbQLa9DnYYw5WF
bw8cuq6CRWlt6f6Z+OjsduQ5wP+P+UyIKOy0JTG1+f6weE7nr6QvWI1q//X+ZB7p
R6Ep4PtGtKy2KvXBRxSXO+LIPzyQmLe3EjKqoTAl2R6ciiLXKFZNBMECfSXdOyW/
SQuB8pTbO2uZHE00HyoNqk/KPtI7ZINBdR5twa+T97ADzSVnAethgXqZp9dD1EWF
dfAWkcKUVI41Hpf6MRc4pxeeM8rWt53gfjeHf5yrVgnphXGFciAb60RKK4tMX81X
Iu7xTqWUxux0O2MGfbrt60RCSpv/oMJccYnhAJClzAONoy2bw5ncg85riwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVD/Ur6vwo97AQxIBoOZxxabbyPMB8GA1UdIwQY
MBaAFGHUCsWlQlQEgk6zKhzPUfXct4UbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWRRS3hhVkNWQVNDVHJNcUhNOVI5ZHkzaFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xMTNmNWYtYmU1OC00NzhjLTkwMzAt
MzJkODBkOGQxNjE1LzEvWWRRS3hhVkNWQVNDVHJNcUhNOVI5ZHkzaFJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8xMTNmNWYtYmU1OC00NzhjLTkwMzAtMzJkODBkOGQxNjE1
LzEvWWRRS3hhVkNWQVNDVHJNcUhNOVI5ZHkzaFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYFohjxD
pchlxevCPMggfmpz6Z4uNWUSUG3V6oU7A0pSWIi00knRLyBnLnP2D/BV5yquUXS9
F6hmInKl/ftMAomWbU4oBAcE0XBc5x6KzQOMI8waAm6O0jFiEcmy8ECI4dpEyO6D
Ba8MmewPWD5hdq0uHJ446zz3wRiQjXJ5k/N0blv4KIWti71gn1I3PUmnnJFpjBx3
SPhkQEes7Jw9ttHVGki/sto1vhUUya6spfOCZSswalf+pbMKMjFVXj9JAXZqcIeh
BHqqdKsuIhp18gcnSBcpe/US1+69nF+VRsc2K4qLCxUOk7JUQBU4DGY8OB5BhsQj
YRMImWeSLA1Rng==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:46:10 2026 by rpki-client