Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
File: YlK_stYtvrdoczSHSHy2BMrvw5Q.mft (raw, json)
Hash identifier: jgr+DjCv+tH9By+Uf7fABFfuwBGuluzZfakLxrgUQcg=
Subject key identifier: FD:D4:6C:FE:4C:B0:97:94:FD:2A:D8:50:81:47:91:C2:34:71:D0:91
Authority key identifier: 62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
Certificate issuer: /CN=6252bfb2d62dbeb768733487487cb604caefc394
Certificate serial: 01A13167F4CEDDD3C4EF062EC38A555C5EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
Manifest number: AA
Signing time: Mon 12 Oct 2026 18:37:38 +0000
Manifest this update: Mon 12 Oct 2026 18:37:38 +0000
Manifest next update: Tue 13 Oct 2026 18:37:38 +0000
Files and hashes: 1: 9KcGuja7ApV2Mr-rhW0hTr9A-As.roa (hash: C4R39buTOsJZMMwpeVU6OOyn4tTTjvYX6fEIxtq/6dM=)
2: LuU8gJ-fjPSUdy9FvX0CGcbhjvY.roa (hash: aGdXmYk3UJO5PBiGQxDG95DNI1OlCf0Xm3vAt2dRzTk=)
3: YlK_stYtvrdoczSHSHy2BMrvw5Q.crl (hash: /6VZeagDlZOAHl1y1foNR+jqQBNZvInDa523vWS7i3c=)
4: tJZr6HzpTZvuaQTWcDkPnA3RBWw.roa (hash: Qv4GlbTwoHQA8Y7B7E4xOe/5V/IhBMLvR3lxhbFDtsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 18:37:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:67:f4:ce:dd:d3:c4:ef:06:2e:c3:8a:55:5c:5e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6252bfb2d62dbeb768733487487cb604caefc394
Validity
Not Before: Oct 12 18:37:38 2026 GMT
Not After : Oct 13 18:37:38 2026 GMT
Subject: CN=fdd46cfe4cb09794fd2ad850814791c23471d091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:37:81:20:bc:a5:9a:d8:58:e6:c4:fd:bb:
cb:24:ed:5f:1c:0b:13:2d:f7:70:fe:0e:ca:fa:b2:
85:1f:14:ef:78:bb:66:a6:9f:b5:54:8e:12:e1:9b:
a6:de:a4:74:e3:51:5f:10:85:e6:6c:85:11:7b:4b:
f8:15:e7:be:27:df:1f:2c:2c:23:e8:02:cf:d0:1d:
30:8a:a8:64:57:f1:c6:b9:10:8c:e8:bb:e0:39:b8:
10:80:e8:dd:c8:05:39:a8:73:a9:26:47:da:9b:98:
47:6e:c5:fc:15:73:bb:19:d7:7c:13:17:08:64:32:
b3:af:50:7a:80:65:4b:94:63:5c:2d:a5:df:e4:91:
60:77:f3:14:00:21:2b:39:a2:ca:f5:e9:38:1c:cb:
6e:6b:13:43:3c:65:76:fb:02:1e:8f:d8:7a:26:df:
12:23:41:d9:22:f3:24:b3:e3:b8:ad:01:ec:43:10:
7a:0a:74:09:ec:9d:8b:88:3c:82:b6:3b:25:35:2c:
6a:aa:1c:65:cb:21:75:67:b6:1c:cc:38:eb:1d:3d:
89:8a:ff:ac:a4:55:9c:5b:a3:17:93:ef:97:15:07:
17:26:09:81:5e:44:07:f4:54:a1:48:7d:90:02:ce:
27:e9:41:dc:af:df:4d:4b:6f:bb:61:4b:71:45:99:
91:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D4:6C:FE:4C:B0:97:94:FD:2A:D8:50:81:47:91:C2:34:71:D0:91
X509v3 Authority Key Identifier:
keyid:62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:21:ba:71:90:0b:f4:36:f1:be:db:ef:19:6f:27:81:bb:22:
96:85:a6:ab:ca:83:a4:98:bd:3d:a3:19:5f:76:ab:04:16:96:
e2:eb:ab:7e:2d:d1:2d:b4:07:47:fa:1f:00:5b:bf:87:30:f5:
6d:39:17:00:6f:b7:6b:e7:f7:8a:75:f6:a3:33:11:cb:0e:90:
7e:0f:2e:d0:b9:89:a4:61:21:eb:a1:4b:e9:e3:d9:a6:4d:66:
d5:d3:5f:78:ca:b0:d9:ff:3b:55:09:3d:58:a3:07:0d:3b:53:
df:05:2c:00:29:de:28:33:4c:4c:44:61:3a:ca:4d:de:4c:5e:
2b:30:ed:ed:d8:81:66:61:63:7d:81:c1:96:dd:8d:06:e7:12:
77:5a:af:93:f6:6e:53:dc:bf:47:85:ff:e7:fa:70:00:5c:5d:
13:53:b5:f7:2b:71:7f:2b:7c:fc:8c:cd:3c:cd:36:44:ee:32:
2f:48:96:f1:08:a6:94:af:0a:f7:fb:14:df:b7:d0:9b:73:8f:
2c:23:2c:e6:98:5c:b4:33:3d:5a:52:2b:6e:69:e5:73:65:20:
7f:b7:50:cc:84:94:90:d6:6a:00:bd:83:f0:d1:62:6a:38:66:
07:89:f5:59:9e:36:41:3d:b7:1a:71:d3:5a:08:bc:38:28:4d:
53:ad:97:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:22:26 2026 by rpki-client