Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
File: YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json)
Hash identifier: aMeqvQAcZj12EgpWMW9IrIMzP3+n40wM1uU0VtCwa/I=
Subject key identifier: B6:CC:39:94:03:B8:74:AB:5A:7E:EB:E5:FD:CA:6E:21:BA:AB:D6:66
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 01A11ED24FD07345F2D98D94378D56030FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
Manifest number: 14FB
Signing time: Fri 09 Oct 2026 04:01:01 +0000
Manifest this update: Fri 09 Oct 2026 04:01:01 +0000
Manifest next update: Sat 10 Oct 2026 04:01:01 +0000
Files and hashes: 1: OmKYv-eBNTYluusfNr4dZe7zC_c.roa (hash: w1Hd7iJpZYHQEo80iQwx2qNAI2ou5wncgHu/GLia0Tg=)
2: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: 1wQbVY7yyfP3wAeR3SZMWNm9nm/NwBBnfQMPrg88MbI=)
3: l-QyBKePUGvgwvLYQ39xVIrG-Xc.roa (hash: BEyQW94VrHgV1DUmSXCji9F0XD6RgtTzxouMSqJBF3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:d2:4f:d0:73:45:f2:d9:8d:94:37:8d:56:03:0f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Oct 9 04:01:01 2026 GMT
Not After : Oct 10 04:01:01 2026 GMT
Subject: CN=b6cc399403b874ab5a7eebe5fdca6e21baabd666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:7d:ee:e0:3c:fe:66:82:0d:81:a1:a4:eb:
30:42:d6:7d:01:aa:f1:2b:09:37:ac:ae:c5:3a:06:
86:4a:60:62:db:5b:5c:e5:9d:f1:9b:15:f9:4a:f4:
52:1e:09:82:48:7e:c5:31:46:32:5a:91:16:24:0c:
79:fd:43:e2:92:fa:f8:06:45:9c:ba:73:fd:c0:8a:
d8:9f:c9:bd:23:d2:09:88:9c:13:48:8a:7b:9f:63:
8b:60:1d:70:22:f0:b1:2a:f5:e5:d5:a7:9f:2c:d0:
8b:8f:9b:54:32:b1:49:76:6a:62:73:bb:9c:7a:68:
c7:46:e3:76:cc:f3:ce:b1:50:4f:ff:e1:f5:bf:b3:
14:cc:de:c0:23:ac:3e:71:3e:1e:bb:ab:9c:ac:09:
bd:31:12:c7:b6:e5:8e:0b:76:71:48:36:54:31:a7:
99:b7:56:a3:fa:2d:38:7c:d8:c0:02:f1:3f:25:ec:
6d:92:6a:48:66:df:34:ea:76:64:ef:ca:6b:36:7d:
56:a2:a5:c6:fe:73:e1:e6:d8:99:db:31:e9:89:09:
31:ca:bf:5d:16:23:2f:ba:11:12:11:f7:d2:ea:81:
6c:ca:18:65:62:0e:74:88:ae:09:07:1e:16:ab:f8:
b0:28:6a:c8:af:24:18:19:42:8a:23:15:a4:d8:c0:
c2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CC:39:94:03:B8:74:AB:5A:7E:EB:E5:FD:CA:6E:21:BA:AB:D6:66
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:37:3b:d4:b4:bc:a8:a0:a9:98:04:07:54:8e:e4:53:21:66:
79:97:c0:52:8b:3b:06:7d:29:9e:b6:45:26:81:8d:3c:72:22:
29:61:87:c7:44:ed:3b:9e:59:4f:b2:7e:6b:97:08:e7:79:e3:
f0:73:46:12:b9:5c:b2:b7:17:c0:5a:d0:d6:7f:d5:67:b5:28:
8f:ac:39:f6:67:bd:2a:fa:1c:d6:6d:f3:ec:d2:20:90:d3:5d:
b9:fb:8a:93:78:29:da:1f:8b:3e:da:6e:b4:c6:66:dd:9f:d4:
91:1f:6c:f7:38:de:3f:b7:43:11:1d:51:3b:a8:06:93:81:b5:
25:a4:88:d2:ae:b4:9b:86:5c:56:30:43:ba:71:dd:3d:4c:2e:
d7:b2:a5:15:95:d3:06:f4:29:39:ba:b3:73:7a:5b:c3:69:6e:
26:c0:be:87:f4:9d:b8:2b:20:fd:0e:bc:c6:fc:b9:84:4c:dc:
fc:12:fe:a7:0d:71:d6:80:ed:e4:88:35:bd:39:4a:96:26:6a:
fb:dc:e9:51:d6:e1:10:fe:83:df:b2:d9:bd:ea:e4:6c:4f:a0:
9c:33:44:56:bc:c2:7e:cb:fb:0b:80:8e:1c:e0:54:f1:e6:3d:
fd:44:09:29:12:c1:9c:9c:59:1e:01:70:95:02:ea:48:85:3a:
5a:a4:c1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:57:28 2026 by rpki-client