Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
File: YUyVhYifmODHf5ts2ANhqgK91o4.mft (raw, json)
Hash identifier: 9x2quEM6bjmvckjnI3dcfoUhLl46A4dkwrSIVTEX69w=
Subject key identifier: AE:33:17:CD:CC:84:FF:04:56:CA:EC:E1:09:C6:F2:B0:0B:DB:D0:8E
Authority key identifier: 61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
Certificate issuer: /CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Certificate serial: 01A133A2F0C662DDE9FC5D39494A7F68173D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
Manifest number: 1AA6
Signing time: Tue 13 Oct 2026 05:01:18 +0000
Manifest this update: Tue 13 Oct 2026 05:01:18 +0000
Manifest next update: Wed 14 Oct 2026 05:01:18 +0000
Files and hashes: 1: 9GhuMXLHbzdiDAMfsJHbqzR-MEw.roa (hash: g5IZRl4BDdytGAyq101061DrAkIRTjvTwY1EdCTIxCM=)
2: Rp8M3_sBtWj-4HdES1f560Y8DPs.roa (hash: rFSCCyJpt9So4+e0Mp2UXJjY5UcE4mhKhZ9xQZADyiI=)
3: YUyVhYifmODHf5ts2ANhqgK91o4.crl (hash: SlSsPoBj61EVhkQM5GO72H1+elCfO9F8A7r+P+SXnNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:a2:f0:c6:62:dd:e9:fc:5d:39:49:4a:7f:68:17:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Validity
Not Before: Oct 13 05:01:18 2026 GMT
Not After : Oct 14 05:01:18 2026 GMT
Subject: CN=ae3317cdcc84ff0456caece109c6f2b00bdbd08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:76:16:d9:cd:29:6c:2f:37:65:20:65:20:
60:ec:28:bf:80:df:4f:8d:ea:f9:60:cc:20:c0:e6:
f2:fb:23:9b:0e:e9:c2:b1:83:d6:73:65:dc:b6:a3:
a7:b7:76:85:a0:93:06:e6:4a:af:42:f4:c0:0f:5e:
74:95:f6:8c:b8:73:40:b4:e6:9b:fb:8b:1b:41:c0:
92:28:04:de:3d:8d:9f:ea:6d:e5:8e:cd:e6:45:de:
e5:f8:cd:7c:da:f8:9b:12:1d:6a:8c:69:e3:8d:33:
c8:14:57:dc:ce:b2:ca:e6:6a:20:a3:f3:31:1c:5e:
22:45:d1:36:8f:0a:d1:64:97:8e:db:af:fe:5a:a9:
24:a2:97:fe:12:d9:21:7b:d9:1b:14:fd:56:c1:49:
a5:47:6f:ab:44:c2:aa:e1:4d:3f:8e:74:f8:65:b4:
3c:b4:85:d0:5d:04:a4:cf:01:01:10:a7:7b:67:5d:
f0:7e:0b:03:74:eb:a8:bf:fd:85:21:d2:c8:a2:41:
2a:c1:6c:89:da:2d:ad:d8:ee:af:72:14:37:32:31:
cf:0d:56:78:34:ad:a5:ec:21:63:1a:7c:d7:c3:26:
44:d7:66:ee:ac:2c:e5:b3:b5:ad:a5:59:9e:db:e1:
4b:f7:6a:dd:86:ee:82:13:70:44:cd:66:02:6d:64:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:33:17:CD:CC:84:FF:04:56:CA:EC:E1:09:C6:F2:B0:0B:DB:D0:8E
X509v3 Authority Key Identifier:
keyid:61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f8:1b:7e:26:6b:ef:cc:1b:9c:b6:05:db:37:ec:19:4f:7d:
30:a1:20:cf:c7:29:ec:9e:fc:99:a9:0f:7a:06:a3:e3:fb:98:
9c:68:91:22:d1:fb:c9:a2:d4:34:51:da:7d:1d:a6:db:a9:3f:
9a:55:77:88:20:33:ab:d5:f0:14:e8:f2:c1:7d:31:35:35:78:
8e:a3:cb:31:e0:4e:9f:fe:14:04:09:03:47:e4:4c:13:24:7a:
4c:23:d9:03:12:18:1b:c8:cf:6b:ab:f5:ed:32:74:19:39:ef:
87:63:0c:57:b6:58:20:54:fe:c9:51:51:6a:33:ec:83:b5:56:
75:99:67:c1:d6:ce:d2:1e:41:8b:96:c0:5f:bd:54:a4:47:8f:
c5:24:1e:04:ae:0c:ce:f7:c3:91:f3:e0:b7:72:70:8e:27:f0:
2f:73:1d:5a:d9:4f:7e:eb:cc:f6:40:24:07:f9:1a:56:69:19:
57:ab:d5:bd:94:48:11:29:22:ae:11:17:ec:df:95:df:5a:09:
63:c9:3d:ed:59:e9:17:b8:59:11:d7:8c:9a:66:41:d1:5e:4e:
09:42:12:d7:3a:43:f7:f0:10:4b:65:b6:20:26:94:75:3b:3d:
48:9c:45:71:30:67:ba:c7:32:6d:c9:b9:1c:27:11:4b:4c:8a:
e1:60:b3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:28:30 2026 by rpki-client