Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
File: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft (raw, json)
Hash identifier: FJAWmUz1JoCEz+5lEFLm35nCXOhbKcRAEBzCpnIUfyo=
Subject key identifier: 6D:71:C5:7B:67:F4:EA:3D:B7:69:BB:E8:1A:2C:C6:DA:BC:F0:D3:94
Authority key identifier: 61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
Certificate issuer: /CN=61041121ccc6e65d933961fd572d59e261f21a31
Certificate serial: 01A17702C2F1A7BA4F9A16E7DD64A6C38625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
Manifest number: 1AC3
Signing time: Mon 26 Oct 2026 07:00:31 +0000
Manifest this update: Mon 26 Oct 2026 07:00:31 +0000
Manifest next update: Tue 27 Oct 2026 07:00:31 +0000
Files and hashes: 1: 8x9EixpS_cTo1YUsFO5RBhE9yQg.roa (hash: H+557dvreWM3Tp/NNdorNLcHs2h/JJEHvmmY5yieUec=)
2: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl (hash: ecNnIrs7EG8v64gbSSovVdTau8zarsumr8kJ0tNBQqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:02:c2:f1:a7:ba:4f:9a:16:e7:dd:64:a6:c3:86:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61041121ccc6e65d933961fd572d59e261f21a31
Validity
Not Before: Oct 26 07:00:31 2026 GMT
Not After : Oct 27 07:00:31 2026 GMT
Subject: CN=6d71c57b67f4ea3db769bbe81a2cc6dabcf0d394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:ea:f7:f9:3e:43:3f:16:78:02:1e:cc:20:
e2:0a:a0:76:e4:93:b6:da:8c:f8:e9:5c:48:65:63:
bd:eb:29:aa:f2:3f:94:e0:f2:1e:9a:c0:27:20:44:
bf:15:77:1e:31:f0:2b:65:5d:41:5c:08:ce:ad:64:
84:b2:f7:29:71:ec:44:1c:8d:a7:b5:85:a7:8d:02:
1a:e1:fe:22:82:3e:35:49:99:80:5c:4d:b3:d6:b7:
fd:5e:5f:0d:23:e6:60:d0:02:89:65:5f:cb:2e:72:
16:d2:2f:05:22:c9:76:5b:be:17:ec:cc:5d:65:a7:
08:79:ac:17:b1:a3:50:b5:19:e8:2a:e9:60:b2:05:
74:5a:14:f1:d0:a4:9a:82:2e:44:35:46:1c:09:33:
75:5a:a1:ff:16:f4:e6:ee:75:66:a3:a6:d3:21:b7:
27:fb:6c:98:73:4c:1e:ee:4f:0b:1a:a7:a7:d5:95:
56:18:e5:ea:bb:f7:6c:3c:07:66:66:76:0a:3e:73:
5f:a5:6e:ee:0e:b1:9e:d1:d1:db:26:2e:90:5c:c0:
8a:5f:20:10:4f:f9:86:d4:4f:ff:c3:f5:0a:fb:40:
4c:b1:ba:e0:b4:2d:b2:f9:6e:e9:5f:e2:0e:be:43:
c4:5b:08:43:7a:8f:1c:3e:18:42:ea:b8:19:6b:b8:
da:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:71:C5:7B:67:F4:EA:3D:B7:69:BB:E8:1A:2C:C6:DA:BC:F0:D3:94
X509v3 Authority Key Identifier:
keyid:61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:16:70:ac:5c:d3:17:be:b5:91:f1:de:c9:bb:5f:1e:bf:b9:
63:fa:e0:66:4b:56:3b:60:89:4d:4d:9c:ae:c4:f6:79:d0:be:
56:7b:32:9b:b2:d0:46:ce:5a:63:24:f4:5f:34:e6:5b:e6:a5:
73:fa:24:9c:b8:52:1b:8b:e8:21:bc:83:69:ab:5b:03:f4:1f:
4d:32:ee:19:11:dc:1b:fc:58:c4:ad:64:1e:de:b1:52:fe:d9:
fb:cf:f3:8b:b1:56:3e:3e:b5:32:bb:f8:66:36:53:7c:c6:f7:
7c:e9:05:b6:c0:84:68:af:1d:5f:8a:7c:98:1f:8d:4a:29:53:
20:b0:71:8d:94:e5:38:0d:8c:53:c1:80:f8:a4:ec:cb:60:f5:
6d:6c:11:69:eb:2b:0a:df:1a:02:98:4d:75:9a:3b:cc:11:82:
d0:ee:52:26:f0:96:a5:d6:d7:2a:2e:e4:2b:47:5c:2d:ad:6e:
b8:40:d7:41:53:ae:bf:da:92:fb:48:93:2a:3c:2b:60:70:31:
3f:bd:af:2e:8a:1f:44:28:7b:64:3e:98:50:14:ac:90:f6:08:
41:00:e2:98:ae:dd:c4:a8:e2:52:39:4f:d3:23:c9:b8:52:d6:
7b:79:99:e1:a4:fb:2f:8c:25:03:06:75:b4:5c:94:a9:32:88:
22:e3:90:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:20:36 2026 by rpki-client