Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File: YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier: T1CfRRbrOFoNvzQsXjRB+pSN5VyWCBN9lnpszMWpmCk=
Subject key identifier: FF:85:0F:12:06:53:A8:56:0D:66:B3:85:5F:A9:D6:72:92:AB:18:F3
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial: 01A15E5617B4883379785E829FE3534F4785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number: 1579
Signing time: Wed 21 Oct 2026 12:01:02 +0000
Manifest this update: Wed 21 Oct 2026 12:01:02 +0000
Manifest next update: Thu 22 Oct 2026 12:01:02 +0000
Files and hashes: 1: OVXT6gUHNs92I_TpJokrvNCUI_k.roa (hash: GunbA4sCmSgthfWeCRgymGCKQHjNQ++TdcqNZ9NqpfA=)
2: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: svQSBzrlW781mV1YkBRHU2vbql+6oJvTV19cmQQ/zAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:56:17:b4:88:33:79:78:5e:82:9f:e3:53:4f:47:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
Validity
Not Before: Oct 21 12:01:02 2026 GMT
Not After : Oct 22 12:01:02 2026 GMT
Subject: CN=ff850f120653a8560d66b3855fa9d67292ab18f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:ba:05:59:ad:fd:2f:61:91:ba:ce:cb:66:
c1:34:44:41:dd:60:42:eb:46:93:2c:1f:2f:e5:46:
e3:0b:e4:ad:74:e8:35:17:ca:2f:5d:b2:cc:50:76:
83:f8:eb:a6:f9:88:3d:9a:7f:06:12:2b:b6:b7:cf:
48:10:a8:63:ba:05:70:84:82:f8:f8:33:cc:7e:ef:
67:f2:a1:68:e4:71:e0:9b:f1:19:50:c8:c7:17:27:
7b:df:ea:92:0c:6e:da:76:0a:da:33:ec:bf:9d:47:
13:b3:ab:25:ec:dc:0b:4c:cd:26:97:83:07:8c:67:
a0:ab:86:a0:96:93:9d:67:d0:70:01:ee:22:0a:0a:
98:f7:5a:6d:05:06:d6:ca:cc:39:1d:bf:a5:e4:4e:
63:df:b3:4b:b0:20:b6:93:82:8b:03:fe:fe:77:a9:
7e:61:d3:b8:c9:8a:8a:eb:c5:52:90:d7:4e:b4:80:
de:8d:5f:e1:28:f7:65:2d:88:78:55:0a:f6:6c:e7:
ea:d4:75:d6:54:d7:4d:66:8f:ac:d3:4e:77:0c:03:
da:29:e3:c1:bb:6c:e6:ab:f4:21:a7:29:13:5a:67:
e1:c0:73:61:b6:4d:73:d5:ca:a3:dc:1a:90:49:4a:
8c:b9:32:87:f7:54:5b:99:88:e1:f3:1a:c6:67:a4:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:85:0F:12:06:53:A8:56:0D:66:B3:85:5F:A9:D6:72:92:AB:18:F3
X509v3 Authority Key Identifier:
keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0a:7e:2e:55:4d:9a:7b:bc:e5:34:66:a1:1b:89:51:6f:c2:
7a:a8:8b:62:38:f4:99:1b:5e:a2:75:2e:d3:d0:98:22:96:16:
af:be:59:7e:a7:6e:04:6e:af:f4:a7:88:15:71:09:b9:77:d9:
37:bd:9b:b4:be:d1:9e:ab:ab:b3:69:fa:3a:30:50:e3:a2:c0:
75:43:eb:96:5d:74:6a:ce:58:e0:d0:fb:6a:75:7e:3a:7f:48:
c8:a0:59:d5:ff:74:c4:8c:99:2e:71:83:4a:89:ea:92:e1:7f:
0d:ef:e8:30:b2:db:e7:a4:1e:f4:77:ab:7a:b1:6e:d9:f4:27:
a6:4a:2e:05:e7:0f:51:94:94:42:4d:ec:44:41:62:98:3f:02:
15:7f:de:31:cb:b0:a5:c3:a0:98:7b:9e:dd:49:74:31:3c:8f:
70:00:44:0a:5d:21:b4:4d:97:3f:02:0a:86:82:c9:be:cb:07:
16:7f:93:e9:dd:80:06:b7:da:6b:f3:04:14:26:3c:58:c1:f4:
cc:db:dc:8f:09:37:2a:c0:10:85:f7:fe:9c:7b:c7:cd:94:a8:
c0:8d:cd:27:80:ef:16:35:6e:b4:9d:57:08:e0:d9:d6:ed:67:
9d:91:17:4f:c2:27:a8:81:11:e5:3a:85:9d:a3:ae:63:49:b1:
86:4e:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 16:58:37 2026 by rpki-client