Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
File: yRdwDdwOcosHKtQaPR6LaoCqdRA.mft (raw, json)
Hash identifier: KW42EFDy8GSa2PE6hAA67kqVegOk2tpMwcn4FGCG+T4=
Subject key identifier: 4C:0F:6E:3C:2F:F9:8A:7C:93:53:8B:95:FA:36:C1:A6:74:B9:C4:EF
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 01A18450AAD57779C8E972D46558EF74C91E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
Manifest number: 1A5B
Signing time: Wed 28 Oct 2026 21:00:41 +0000
Manifest this update: Wed 28 Oct 2026 21:00:41 +0000
Manifest next update: Thu 29 Oct 2026 21:00:41 +0000
Files and hashes: 1: wbZC2ywn3MopqOZcK5wfTzngXuU.roa (hash: BKsSPZZN6H035QOhv5kmcLN6+1r7D6TcSZ6TgnVBHpE=)
2: yRdwDdwOcosHKtQaPR6LaoCqdRA.crl (hash: k7ZEIat8dxYxSXcQnMezStNVbFAy469SYKIO6x8S7go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:50:aa:d5:77:79:c8:e9:72:d4:65:58:ef:74:c9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: Oct 28 21:00:41 2026 GMT
Not After : Oct 29 21:00:41 2026 GMT
Subject: CN=4c0f6e3c2ff98a7c93538b95fa36c1a674b9c4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e3:30:20:0b:3b:f7:2f:80:a1:34:b5:86:00:
96:f0:cc:4d:e3:24:ab:16:37:58:a9:1f:84:39:82:
69:1c:eb:7a:57:f7:40:ce:52:ed:a9:8c:ab:86:09:
af:e3:cd:29:8c:8d:93:7e:04:30:d2:49:7e:96:b0:
15:3c:47:1e:2b:ad:35:13:a0:7f:17:20:60:2c:b7:
d2:62:11:4f:39:e1:03:a6:bd:ca:d8:9e:94:e6:f4:
ab:3e:4a:5a:19:cc:4f:98:71:48:78:17:75:65:fd:
7a:4e:8d:ee:7e:c8:75:f0:5d:0b:5c:87:43:67:21:
46:5e:75:48:64:70:1f:08:30:d6:d6:6f:68:90:26:
f8:1d:b5:b3:29:44:52:82:83:fd:3b:54:bc:c4:8d:
72:bc:10:f6:30:6f:3a:95:15:fa:18:59:f5:74:16:
9d:3b:ab:55:8f:31:f1:bf:8a:a7:8f:0c:87:0a:0f:
87:95:65:d1:e4:aa:58:73:89:d3:6f:3c:bc:68:3f:
d9:66:e9:a5:1d:63:a9:d0:88:44:9c:e5:cd:0a:4a:
cb:86:e7:b0:c1:c5:e6:8f:f6:97:d5:13:66:dc:a6:
6b:ac:04:65:77:87:a9:8c:96:30:ca:80:ff:6f:f8:
81:41:43:2e:2e:8e:b0:50:09:eb:a1:c6:b6:d6:74:
1c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0F:6E:3C:2F:F9:8A:7C:93:53:8B:95:FA:36:C1:A6:74:B9:C4:EF
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:15:dc:22:39:0a:eb:74:f4:f0:75:ef:f3:66:5c:94:68:4f:
f5:dd:7b:14:89:8a:7e:a1:7f:02:93:c7:79:a5:59:31:08:6f:
54:26:43:c5:35:8d:60:7a:91:65:1b:7b:00:c1:48:ef:a8:2c:
4f:cb:00:2f:bd:0d:e5:d1:7f:db:ab:81:12:97:18:89:82:5d:
2b:3e:8e:e1:69:82:2d:8a:f2:36:a0:7c:51:e1:35:20:a7:9f:
f9:d7:3d:be:a8:01:3f:16:ed:80:27:71:c3:53:75:37:c1:f5:
a8:44:d7:6b:b4:d5:bb:6e:67:53:3e:ab:8e:c0:55:8e:c2:87:
63:cd:8c:b7:5e:ef:ae:c3:95:ef:3c:b8:98:b0:5c:63:11:ef:
a2:bb:ca:9e:cf:d4:82:34:5e:6a:c6:08:cb:50:ea:1c:d9:c0:
6f:26:fe:f6:21:05:df:98:43:ef:3f:44:85:fb:55:8a:eb:19:
a9:e9:cf:04:e6:fb:07:3c:2e:bf:a6:aa:83:74:6e:a3:f6:e2:
48:81:45:f2:54:3b:5b:72:18:0d:5b:de:b8:80:1a:bc:4e:d1:
0d:65:d0:bd:d8:a9:5e:15:d4:7f:6a:01:a2:79:0a:c7:46:e7:
46:eb:f5:84:df:67:61:35:2e:03:a5:37:27:5e:24:63:df:98:
ee:25:ec:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:53:14 2026 by rpki-client