Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
File: YET26nnk4qPgKos47QzTpAWROKw.mft (raw, json)
Hash identifier: 5DOJQKItD0ar5xvd2L+UcoR32BCDxxlzWCXihgqzQJk=
Subject key identifier: B7:F5:4A:64:AB:6E:97:EB:66:37:DD:74:08:CA:9B:4B:30:4D:C3:B7
Authority key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
Certificate issuer: /CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Certificate serial: 01A15AE6F1956831FD0E0DFEEF25CFCE5EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
Manifest number: 1AB5
Signing time: Tue 20 Oct 2026 20:00:46 +0000
Manifest this update: Tue 20 Oct 2026 20:00:46 +0000
Manifest next update: Wed 21 Oct 2026 20:00:46 +0000
Files and hashes: 1: IPSLN6U-mPgMx0jYi_ORZZDwgdQ.roa (hash: 9nBExfSnL3g+4CNDTe8481JrkpEVyvy2139EXebjOIs=)
2: YET26nnk4qPgKos47QzTpAWROKw.crl (hash: /lZMBwPiQ9Mwdec0nUO3ozlXM1Sn7nAtzu/q15VGTD4=)
3: vNHV1DYtOsfUinz5gwCFoBzKiIg.roa (hash: OIxUV31cdJf2l/w+qSDbXSkKEcQlTRfi/zGOENFvc+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:e6:f1:95:68:31:fd:0e:0d:fe:ef:25:cf:ce:5e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Validity
Not Before: Oct 20 20:00:46 2026 GMT
Not After : Oct 21 20:00:46 2026 GMT
Subject: CN=b7f54a64ab6e97eb6637dd7408ca9b4b304dc3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e0:f8:79:56:29:1a:e9:0e:56:46:07:06:29:
fa:fe:46:57:ce:11:62:a8:38:cd:3d:57:2f:e1:8f:
78:12:9a:b2:97:15:bc:b4:89:15:ea:a7:4b:1a:3d:
36:55:19:7e:cb:35:6e:8d:0b:57:19:ce:47:20:56:
66:77:cb:ec:33:bf:d2:d3:4f:d4:37:eb:b2:78:56:
db:47:0c:ac:c1:bf:fc:78:e9:ba:35:53:9e:56:17:
f3:d7:29:22:92:7b:37:0c:85:b2:c3:f2:23:84:b7:
8b:4b:d8:32:2b:34:06:bb:54:a5:48:9c:03:4b:92:
08:41:cc:b3:b4:95:8a:86:5b:c8:c5:b7:c6:68:d8:
4c:a8:5a:21:26:a4:66:37:35:6f:aa:05:a2:5d:7b:
47:8c:22:e3:10:df:ac:10:3c:2f:92:82:95:66:3d:
c9:da:e9:04:d7:09:e0:53:88:a2:83:75:9c:3b:44:
33:29:e2:30:3c:95:2b:42:79:e6:af:72:88:be:ec:
8f:96:51:a4:61:9c:94:f1:95:19:17:7d:d5:a7:1b:
9f:64:b5:53:b8:e0:f4:2d:d2:07:84:74:88:37:d4:
33:85:23:f8:65:06:7b:1e:c5:00:b8:88:94:0c:a9:
a2:d8:65:db:2d:01:63:4c:09:a0:c7:18:76:3a:88:
20:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F5:4A:64:AB:6E:97:EB:66:37:DD:74:08:CA:9B:4B:30:4D:C3:B7
X509v3 Authority Key Identifier:
keyid:60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f5:f1:d1:25:89:5f:34:08:a1:11:78:be:f5:74:67:99:a5:
33:23:6c:f3:09:c3:11:6c:85:66:af:df:e4:c4:55:72:4f:bd:
62:2c:80:34:b1:7a:08:2a:08:86:46:54:51:c9:79:3e:93:7a:
16:f5:89:28:9b:d4:97:8b:0c:ae:b0:72:c2:6a:8d:fd:33:0e:
b1:c9:15:b7:b4:f0:26:8a:cd:56:9a:bc:af:ef:91:3b:86:65:
da:6f:78:12:b9:8c:d3:40:e5:a4:5f:b6:7c:ac:08:fd:05:0f:
5d:5d:a9:1d:7a:f2:27:44:04:23:6b:fc:0e:c9:90:05:d9:5b:
d7:05:95:22:8f:fe:d2:8e:59:5b:ea:c2:01:17:d5:af:8c:d5:
ab:94:23:95:14:be:06:80:73:56:d6:09:37:5b:3b:a9:88:99:
6c:0a:64:56:59:58:36:60:4e:5b:61:aa:70:3e:3c:14:69:91:
f6:22:5f:a2:f5:26:85:57:3d:fb:8d:49:a6:28:16:72:2c:51:
d3:7c:cb:54:d0:92:fc:ea:7e:62:6f:7f:c7:e2:68:06:e8:9e:
a5:30:bf:a4:60:75:a9:6c:8d:6f:dc:88:29:64:99:a4:e4:b8:
47:06:92:9b:de:4f:8a:98:e7:78:8a:a5:23:34:76:78:0f:7a:
db:e4:dd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 02:06:30 2026 by rpki-client