Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
File: yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft (raw, json)
Hash identifier: JXCN4Bb4NqUUQkJb2vMIgCQcWRFWvwDpXx8MK+PHtUM=
Subject key identifier: D5:DE:E4:CA:D6:14:66:9C:6C:C2:77:0F:DC:26:5B:C5:E4:07:09:20
Authority key identifier: CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
Certificate issuer: /CN=cb36180ab4542d6eee66d9f99030df71236ce264
Certificate serial: 01A138FFDC11E4E853E41407DEF6E2A5B3D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
Manifest number: 18E9
Signing time: Wed 14 Oct 2026 06:00:54 +0000
Manifest this update: Wed 14 Oct 2026 06:00:54 +0000
Manifest next update: Thu 15 Oct 2026 06:00:54 +0000
Files and hashes: 1: HNYjnMa8XonNqZQ0AY5BlHwMzX8.roa (hash: 93bbzx6/nbiayVdplAT1nOdB7pkJO7+NMwUpbbLpb2Y=)
2: yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl (hash: TUZ9ohRbPDBPskH6zzMYyE11kgthRvIN5qVdzdh5auw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:ff:dc:11:e4:e8:53:e4:14:07:de:f6:e2:a5:b3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb36180ab4542d6eee66d9f99030df71236ce264
Validity
Not Before: Oct 14 06:00:54 2026 GMT
Not After : Oct 15 06:00:54 2026 GMT
Subject: CN=d5dee4cad614669c6cc2770fdc265bc5e4070920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:93:f3:b1:a8:7a:bd:1e:5d:3e:71:9c:a4:
fd:2e:71:5b:73:4c:8c:47:69:8f:bc:28:e8:69:6a:
55:9d:90:c2:c0:b8:63:ca:27:f8:cf:d4:84:62:e5:
ed:0e:ce:fc:29:13:4d:2b:b8:fd:34:92:b6:7b:2d:
0c:17:3f:0d:62:9d:54:8e:dd:3a:34:14:9b:82:e1:
59:cb:de:3e:13:56:d9:42:07:fe:c9:17:5d:c5:2f:
4c:8e:34:dc:d3:73:2b:a8:3c:d0:3f:c4:08:27:a0:
12:2c:65:c2:c6:81:82:ea:70:4f:18:ad:b6:db:2a:
56:1f:0a:ca:e4:52:7c:1e:f8:a4:6f:ad:93:75:d3:
d6:df:fa:b3:1e:87:56:1b:c3:a4:21:19:47:39:69:
e0:26:d2:34:56:dc:19:73:43:d8:81:eb:cb:40:f3:
28:0d:b7:01:0d:0e:79:71:bd:87:2e:c1:b5:39:7e:
2a:98:53:2a:bd:c4:1a:59:4b:29:9e:c0:a8:43:c7:
77:2e:4a:27:76:16:db:c5:0f:80:44:ed:fd:1d:db:
f8:93:ce:e0:ca:7b:20:94:e0:27:49:02:6e:7e:56:
9a:cf:f7:28:4c:c3:a0:47:9f:05:5e:5f:3f:9b:6d:
43:be:38:2b:82:b3:e8:2f:d0:c2:60:75:fb:b0:48:
6e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DE:E4:CA:D6:14:66:9C:6C:C2:77:0F:DC:26:5B:C5:E4:07:09:20
X509v3 Authority Key Identifier:
keyid:CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:11:a4:99:19:45:59:24:7c:cf:af:ae:67:8e:54:06:47:a4:
96:a9:26:bd:05:ef:4c:bb:46:34:64:35:9d:f7:75:60:b4:41:
87:0e:d3:17:37:43:1c:bf:e7:64:8f:d8:a5:62:bb:43:ad:b6:
55:06:fb:da:00:49:13:b8:f0:fb:9c:dc:2c:4c:7b:91:02:5a:
f1:63:34:86:9b:17:2b:31:bb:59:23:f1:12:b2:6e:fa:9e:cf:
bb:46:36:ab:81:2d:17:24:6b:61:46:e2:8b:3f:ac:8a:50:52:
7f:0f:24:2d:36:04:f8:a3:53:f4:6e:0e:72:7c:a7:a3:08:4c:
6f:d2:42:85:d8:17:55:d7:b6:90:b8:b0:94:f3:3f:2a:c0:56:
71:4b:38:6d:a7:bf:de:f2:8b:67:30:42:94:6e:4a:89:cb:dd:
ae:8a:52:25:27:44:a2:c4:e9:11:05:49:f6:27:2b:63:bb:18:
25:e3:b7:86:7c:cd:58:38:23:72:cf:f1:97:e6:ae:40:b4:40:
e0:8b:b9:73:5f:c9:fa:23:fb:49:22:d4:85:c9:5d:ef:c8:3d:
cd:c8:a8:27:b6:03:d0:40:a8:dc:e5:67:93:5d:0d:45:ef:7f:
51:39:11:0d:12:15:6d:28:ed:d0:6d:2e:c8:10:8d:f6:9d:b7:
be:61:44:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:47:37 2026 by rpki-client