Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File: YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier: Zl5z/uma7wN6Sm9MZzgrej38QkGD/ooiDTLIIlP7WE4=
Subject key identifier: 1C:F5:1E:C5:26:4A:34:7A:23:90:B2:65:B7:01:04:7B:0A:2A:45:98
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer: /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial: 01A14CF4769C41E137AAC5594B76DE0B7B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number: 1AAE
Signing time: Sun 18 Oct 2026 03:00:51 +0000
Manifest this update: Sun 18 Oct 2026 03:00:51 +0000
Manifest next update: Mon 19 Oct 2026 03:00:51 +0000
Files and hashes: 1: D8kmbrxGH990IEjHOfCChDR_0RI.roa (hash: av49JGDKCD6wMkJgxe4+rUguaf8/22rVV0DlSQeu/3g=)
2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: 96OCqZMoc14FdO2pneNyOeY90EMqYGIaQ8376KaDy9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:f4:76:9c:41:e1:37:aa:c5:59:4b:76:de:0b:7b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
Validity
Not Before: Oct 18 03:00:51 2026 GMT
Not After : Oct 19 03:00:51 2026 GMT
Subject: CN=1cf51ec5264a347a2390b265b701047b0a2a4598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:27:ca:d4:25:8e:78:e5:0c:85:ce:28:8a:0c:
26:fe:7f:9d:fe:26:8f:1a:7a:99:c9:e0:51:7c:a8:
00:63:a9:40:c6:99:69:4c:47:9c:5c:82:da:37:5a:
ff:99:9d:d4:8c:b3:c6:31:e0:1d:64:21:66:08:19:
b2:c9:cc:aa:68:af:38:8d:34:f8:8d:cd:58:7b:65:
09:68:37:1a:f0:48:67:73:29:37:9f:18:81:0c:7b:
0e:b6:ae:96:8e:8c:1f:8d:ef:54:0c:6c:4f:54:65:
b5:4c:db:5a:f5:de:cf:ed:0b:6f:2e:44:d7:3f:cf:
8b:ae:f7:66:3a:00:67:d3:d0:f5:a6:97:d6:57:a3:
fc:7d:3b:33:4a:4a:6b:14:31:20:b0:5c:10:c7:88:
f0:4b:f1:7a:24:5e:37:7b:9d:41:9e:35:e4:29:61:
2c:57:cd:15:1b:2a:91:5a:57:14:5a:af:ce:44:a7:
d2:f0:8a:89:0e:db:a8:89:56:e0:31:5c:8e:5a:32:
8c:1c:a9:8a:f7:30:ee:af:f5:6b:11:6d:81:02:db:
ad:32:31:66:fd:e9:c8:3e:32:66:2b:af:76:49:f9:
96:f3:ff:40:93:84:11:61:35:cd:52:26:30:84:f9:
7e:e7:55:c5:72:06:90:5b:aa:b0:98:07:dc:8d:48:
3f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F5:1E:C5:26:4A:34:7A:23:90:B2:65:B7:01:04:7B:0A:2A:45:98
X509v3 Authority Key Identifier:
keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:6b:74:62:3d:46:fb:76:f9:7b:61:72:ad:97:77:2a:43:0b:
95:f0:52:0d:3a:a0:b6:4d:a5:e8:45:7f:db:0d:1f:80:1c:63:
36:d6:52:3c:37:2d:91:35:9b:b9:1b:9f:0d:9d:77:e8:0a:3d:
b3:a2:fc:3c:27:6f:c9:fc:b1:24:ae:0e:65:18:e8:14:8e:f4:
c5:51:f9:97:8c:49:f3:53:59:53:ca:ea:ea:03:05:f3:b8:47:
65:9e:84:d7:31:18:0d:3d:8e:42:12:48:38:72:dd:26:81:e2:
71:96:bb:cf:97:25:9c:c4:f6:93:e9:5f:db:08:ae:0a:c0:04:
c1:71:34:82:74:5f:a2:ef:d5:9d:f6:89:ec:0f:98:b4:09:af:
49:4f:1a:82:31:ad:76:7b:ad:3c:24:c5:d9:c7:2f:ff:5c:8f:
88:db:d9:37:4e:0b:04:d8:31:2c:49:8a:d7:13:50:4c:23:ae:
f5:3b:f6:19:89:35:a8:0b:52:7c:e0:04:e7:5e:0d:3a:97:4b:
f2:44:13:ad:ea:e0:a9:d0:a1:7c:bc:4f:a7:8b:35:7e:83:d7:
f5:dd:9b:42:b6:23:10:5b:6c:16:b1:dc:55:a6:e8:91:a4:3f:
d3:bc:90:2d:bb:fb:7f:76:6a:4e:02:4e:17:61:42:2b:d9:61:
08:91:be:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:39:30 2026 by rpki-client