Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File: YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier: V5MvrkIE2TCY7gOBHnWSmKt1Avz8AD+OzUvlwcLu+uI=
Subject key identifier: CF:52:7E:B8:7A:34:77:59:64:27:E6:CA:C0:E4:84:07:08:9D:37:74
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer: /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial: 01A180E297BA8B085E477D6D480E9FC81186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number: 168A
Signing time: Wed 28 Oct 2026 05:01:35 +0000
Manifest this update: Wed 28 Oct 2026 05:01:35 +0000
Manifest next update: Thu 29 Oct 2026 05:01:35 +0000
Files and hashes: 1: ET5vMhLbSdWsUS7cNiMD0Da89x0.roa (hash: +AkKc2WCnmOlPOxnIiAKu7no0yZQrgr6+XgFHwBRgZU=)
2: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: vKMs7HrFH3+uU010vhjNvi9YotpszJyE1ZnBG2VxtwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:97:ba:8b:08:5e:47:7d:6d:48:0e:9f:c8:11:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Validity
Not Before: Oct 28 05:01:35 2026 GMT
Not After : Oct 29 05:01:35 2026 GMT
Subject: CN=cf527eb87a3477596427e6cac0e48407089d3774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:4a:c4:08:3c:9c:7a:fd:2b:8e:67:39:6f:ff:
14:39:89:8c:f9:4b:2a:62:2a:27:f7:c5:bb:0d:3c:
52:6f:e4:cb:52:e4:2d:12:4b:db:d9:5e:2f:ea:60:
15:a2:2d:1f:37:a0:a7:9e:f7:4a:0c:a9:b2:81:4d:
7b:d8:39:d3:30:45:75:32:58:0f:4a:16:7a:2b:06:
6d:95:87:d3:e4:4f:dd:0b:b5:bb:69:ab:6a:53:f8:
b7:66:2f:ee:09:40:5a:8f:d8:f3:bd:d0:0e:b9:93:
fb:79:79:e9:97:2d:58:00:71:d7:24:5c:fb:23:a2:
97:0d:2f:b5:60:4e:59:d8:75:fc:ea:2a:87:dd:16:
25:69:2a:6a:10:6b:a4:c4:88:3f:d9:39:75:c6:ee:
c3:64:7d:e9:5e:36:9e:34:8f:f4:2f:d7:42:39:4c:
1e:be:67:50:f9:63:c1:12:b7:c6:7c:42:74:9b:b1:
55:81:cd:a1:07:ed:da:c7:83:90:2e:69:42:93:9b:
b8:62:c3:3c:1e:58:23:e4:a0:69:56:3a:31:07:41:
90:c8:2b:4e:ae:f3:0a:7f:65:0b:2e:c9:09:18:0b:
f8:e3:57:42:89:5c:80:b0:2a:ba:4a:1b:61:70:f7:
b3:1b:b5:ca:a5:3b:ad:f0:99:0e:13:0f:86:ae:dd:
69:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:52:7E:B8:7A:34:77:59:64:27:E6:CA:C0:E4:84:07:08:9D:37:74
X509v3 Authority Key Identifier:
keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8c:2c:8c:0c:6e:d2:b1:81:1c:f4:e5:d3:a8:a2:b6:4a:ee:
63:bf:00:84:c5:04:0c:0d:96:93:9e:89:93:36:da:c2:fa:93:
d4:f1:a5:f0:8b:73:0b:9e:3c:b6:c9:51:8e:0e:f1:b4:35:69:
94:d2:48:ee:f3:cb:b4:e7:59:4d:83:33:c6:d7:ac:4d:9f:2b:
fc:dc:56:c9:61:d1:f4:e2:35:3b:72:de:d7:4d:f9:3e:ce:63:
21:a9:3f:d1:a8:72:db:42:17:dc:68:6c:cb:7c:c5:6e:ff:e4:
d1:13:54:19:40:e5:13:4a:02:aa:e2:73:37:65:e0:10:03:3e:
a8:2d:b1:14:7f:52:02:11:f1:0a:0e:28:31:9f:fd:5f:7a:ff:
e2:db:2e:5d:c5:14:cb:a6:d4:77:e6:35:d8:c3:bf:10:03:8f:
bc:f6:0b:c9:52:df:db:0e:7d:56:b9:00:28:0e:43:74:17:c5:
d5:97:45:98:19:f4:95:c7:6e:4b:23:fe:22:87:a8:6c:32:c1:
14:38:95:b0:9e:46:61:c4:62:f4:71:ad:cc:d9:39:28:7c:b2:
3f:64:88:ca:63:cc:b6:ad:aa:d0:43:b5:8c:58:07:95:c7:71:
df:a1:6d:f9:2a:0c:2b:8b:1c:c2:a8:25:0e:e1:5d:b2:a1:37:
7b:56:37:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:08:05 2026 by rpki-client