Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/1326da-0994-4eaa-83c9-05a01582b9ca/1/1YMmDGbhIphKfAy7RDwS0iv2_pU.mft
File: 1YMmDGbhIphKfAy7RDwS0iv2_pU.mft (raw, json)
Hash identifier: njhlAdmG4En7K3qD0ZGNNa8ix2zxGInCXt7cmlWwmuU=
Subject key identifier: 15:70:93:C8:AE:74:1B:0D:D7:98:0C:DA:66:A0:38:21:6F:66:14:CA
Authority key identifier: D5:83:26:0C:66:E1:22:98:4A:7C:0C:BB:44:3C:12:D2:2B:F6:FE:95
Certificate issuer: /CN=d583260c66e122984a7c0cbb443c12d22bf6fe95
Certificate serial: 01A160B1DE5E67E4EEF035C762D586EFA58C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YMmDGbhIphKfAy7RDwS0iv2_pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1326da-0994-4eaa-83c9-05a01582b9ca/1/1YMmDGbhIphKfAy7RDwS0iv2_pU.mft
Manifest number: 5B
Signing time: Wed 21 Oct 2026 23:00:31 +0000
Manifest this update: Wed 21 Oct 2026 23:00:31 +0000
Manifest next update: Thu 22 Oct 2026 23:00:31 +0000
Files and hashes: 1: 1YMmDGbhIphKfAy7RDwS0iv2_pU.crl (hash: cjaxkRtEcpRsM9TM9RBLDoqFJ8zjcbsfr6/LTfoUDNw=)
2: wtv5JlsouerZ9mKF0DSWEKwQb2A.asa (hash: G3PiXJBr8Bpr8DEk3v6Lnn84qnwslGloPpsFmCCklQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1326da-0994-4eaa-83c9-05a01582b9ca/1/1YMmDGbhIphKfAy7RDwS0iv2_pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1326da-0994-4eaa-83c9-05a01582b9ca/1/1YMmDGbhIphKfAy7RDwS0iv2_pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YMmDGbhIphKfAy7RDwS0iv2_pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:b1:de:5e:67:e4:ee:f0:35:c7:62:d5:86:ef:a5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d583260c66e122984a7c0cbb443c12d22bf6fe95
Validity
Not Before: Oct 21 23:00:31 2026 GMT
Not After : Oct 22 23:00:31 2026 GMT
Subject: CN=157093c8ae741b0dd7980cda66a038216f6614ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:06:a8:97:3b:05:76:b8:33:08:3e:52:c0:
2a:da:40:2b:27:f2:85:fc:9a:51:1a:96:54:d5:8c:
88:02:a2:65:23:43:c6:81:e8:f8:97:e4:7e:23:36:
cb:a9:f1:d9:10:62:50:d1:e6:03:78:23:a8:35:e7:
ac:51:10:5b:27:cd:98:6a:92:7f:af:f4:9b:9d:60:
86:df:e8:5b:cc:c3:66:9f:d6:43:28:ec:b9:df:7d:
2f:2f:c1:ce:12:ce:47:33:bd:a0:70:00:53:12:b9:
1c:cb:2c:a6:84:df:46:14:c3:ca:3c:61:42:88:43:
ad:fb:2e:d0:c8:c4:e2:ae:de:44:ab:bd:74:ca:ba:
45:d8:39:45:d6:6f:8e:0f:a9:41:bd:ed:cc:91:b9:
6a:bb:e1:65:f5:a6:df:df:2b:6d:6e:b5:1f:7d:cf:
6c:89:24:2a:53:19:8a:f1:12:48:47:10:a9:06:50:
f2:9e:3f:58:6f:07:d7:9d:7e:80:1c:57:55:cd:72:
09:f8:29:9c:b4:8f:21:e7:58:39:7a:45:4a:3f:13:
23:dd:5e:f8:f9:21:c2:e2:ba:99:1f:0c:e5:13:31:
b9:92:7a:3e:2d:7d:e5:a7:4c:f6:79:d3:71:85:99:
ea:97:12:7d:09:6c:af:40:c8:dc:f7:3a:22:e2:59:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:70:93:C8:AE:74:1B:0D:D7:98:0C:DA:66:A0:38:21:6F:66:14:CA
X509v3 Authority Key Identifier:
keyid:D5:83:26:0C:66:E1:22:98:4A:7C:0C:BB:44:3C:12:D2:2B:F6:FE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YMmDGbhIphKfAy7RDwS0iv2_pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1326da-0994-4eaa-83c9-05a01582b9ca/1/1YMmDGbhIphKfAy7RDwS0iv2_pU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1326da-0994-4eaa-83c9-05a01582b9ca/1/1YMmDGbhIphKfAy7RDwS0iv2_pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a6:e4:a6:69:1a:06:69:1d:b4:6c:da:6c:d2:9d:30:cf:a2:
c3:58:78:b7:4c:b3:b3:27:56:b7:3f:c9:e9:e1:77:8f:ee:68:
6d:69:fd:bd:6c:6a:92:ad:f5:87:4c:62:67:ff:56:fc:36:7e:
57:de:fa:f1:50:97:f0:af:86:2c:8f:0e:f2:d9:69:75:5e:a0:
ae:be:3e:3c:1e:60:9a:70:f1:27:18:30:5c:3a:12:23:80:84:
e6:1c:c8:60:80:ec:c3:35:d9:05:1b:f5:55:80:c1:2c:a6:cc:
e5:fa:93:19:48:6c:16:57:00:45:6e:47:29:98:ba:f3:a5:49:
2e:5b:8e:37:4b:8e:59:71:ac:be:21:ac:dd:68:50:c3:0f:3a:
8b:e9:ba:47:b7:3f:33:14:2c:c0:02:49:b6:c6:44:c2:d2:76:
49:94:f7:b4:18:4a:c5:46:4e:cb:a7:9a:34:a0:ce:00:f0:da:
51:7d:34:b8:36:9b:f4:d9:c2:e2:f9:e6:3b:62:19:38:7e:2c:
32:03:65:ae:12:35:60:c5:cc:87:98:d3:4e:de:c9:6b:31:64:
46:ee:21:74:10:1a:79:c4:4b:85:7f:82:0a:8c:fb:3e:17:1d:
e4:fd:5b:71:6c:48:72:b2:1a:c6:4b:a1:6b:13:9e:b2:82:ce:
22:1c:48:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:08:30 2026 by rpki-client