Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
File: YET26nnk4qPgKos47QzTpAWROKw.mft (raw, json)
Hash identifier: JpmS55JgDh0MgWwP5rBeDkZW+vb+QBmxRCQEAQwNZis=
Subject key identifier: 00:EE:17:A2:EA:6D:3B:D1:A6:9D:23:2B:99:ED:EB:3A:C9:3A:F9:96
Authority key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
Certificate issuer: /CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Certificate serial: 019A04EC98764E9902F73FC43C57882B2847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
Manifest number: 16E8
Signing time: Tue 21 Oct 2025 04:00:05 +0000
Manifest this update: Tue 21 Oct 2025 04:00:05 +0000
Manifest next update: Wed 22 Oct 2025 04:00:05 +0000
Files and hashes: 1: FpSNZXq3Bs_lAOfoxnm2_1Ntexk.roa (hash: P0ueHi3T6HBQ/Yjh4YAxSote8hQe/slz/U1OtoX8X6M=)
2: YET26nnk4qPgKos47QzTpAWROKw.crl (hash: WUpGRdwWQp0lITB/fhJ0pgZaXIBuMetaeNXsVi7KKFo=)
3: iOzGDAy-qErjiYCUQPq5S2xsHRA.roa (hash: EO5Nyg7UrTNVSVoeALt1d3217TiALMgeZ+f/YmIuYh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 04:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:ec:98:76:4e:99:02:f7:3f:c4:3c:57:88:2b:28:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Validity
Not Before: Oct 21 04:00:05 2025 GMT
Not After : Oct 22 04:00:05 2025 GMT
Subject: CN=00ee17a2ea6d3bd1a69d232b99edeb3ac93af996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e7:df:92:b8:7a:ed:09:56:a6:92:75:0a:fd:
a8:ec:e2:16:b3:d8:d6:c9:46:8a:1a:67:19:ae:0a:
78:69:9b:ee:d9:28:d5:cc:9f:f6:2d:ff:c2:d1:28:
5e:8c:09:8f:3a:b9:1d:03:57:39:4c:29:c5:45:0c:
fc:53:1c:f1:eb:dd:26:73:fa:0a:6a:5e:97:70:5f:
ea:05:8d:cb:a1:fe:57:36:34:11:9f:02:c9:cb:3e:
d8:d7:c1:7e:10:65:69:df:27:fd:82:b4:00:03:dc:
f4:6a:3a:95:12:38:68:66:b9:35:b8:f0:b9:c6:7d:
73:7b:a1:ef:d9:4a:5d:3c:90:0d:36:cd:63:91:6f:
f6:96:bb:89:48:d6:07:60:c2:c9:86:8a:b5:31:d0:
04:5a:4d:68:f2:fa:5b:c2:a0:04:f3:de:fa:3d:4b:
4b:c4:97:79:d6:75:27:f4:be:b0:15:84:ea:d6:bd:
1c:d7:f9:ae:53:71:6e:b1:ee:84:78:3c:d6:32:5d:
64:e5:aa:7d:0f:1e:db:9f:b1:d4:fa:46:14:d1:da:
e3:ac:9a:19:36:e8:ed:8d:2b:5d:35:25:2a:01:53:
76:5d:3a:d6:c4:08:01:e8:54:99:22:d1:b7:c0:f9:
92:f1:28:ad:19:8c:ce:9a:d0:ae:1a:cf:bb:8a:8f:
25:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EE:17:A2:EA:6D:3B:D1:A6:9D:23:2B:99:ED:EB:3A:C9:3A:F9:96
X509v3 Authority Key Identifier:
keyid:60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a8:c9:6a:fc:00:67:d7:85:38:36:ac:6a:39:57:76:16:9b:
3e:2e:ea:86:93:ee:ef:cd:29:28:43:dc:09:a6:01:33:64:d5:
03:40:2e:2a:6e:9b:6d:e8:6a:05:eb:50:14:f6:32:e5:02:36:
eb:11:81:4c:2f:ce:cb:f7:ee:c8:86:20:96:a0:ad:13:0f:40:
96:39:1b:e3:80:bc:a2:07:c5:3d:7c:c9:6a:60:8b:a9:15:d4:
6d:2a:97:41:3a:43:26:6e:62:94:72:1b:a7:2d:f8:b1:ea:31:
2d:1e:4a:4a:5e:b3:db:68:38:51:d0:84:52:fb:1d:2a:f2:6c:
4d:5e:3d:76:74:c9:5f:78:84:79:f5:b3:93:1a:75:21:7c:2d:
77:47:4d:b0:ab:ad:2b:4f:3b:1b:1d:1c:9a:b9:60:34:76:b9:
1c:98:d2:49:56:45:76:62:51:ca:ee:c8:83:b6:2f:e0:02:84:
5a:e6:e8:91:05:eb:84:34:9b:4d:27:58:71:93:23:b0:3e:8b:
a6:15:6b:35:d5:69:79:ee:74:d5:0b:03:48:7f:b5:8a:d4:41:
af:31:e8:f4:b4:d8:18:bb:09:b9:5b:23:e2:08:4f:b6:8d:95:
c6:2a:68:95:3f:1f:e0:13:78:7e:ae:c7:59:31:1e:a5:a9:e9:
88:cf:e0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 14:20:37 2025 by rpki-client