Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
File: yErFLitXLMKpmnQSV-VpqjceNWg.mft (raw, json)
Hash identifier: 3lDFC0SYE/KDh1XwhlE1qge0KQ32LVcV5hzNZ6xIiOU=
Subject key identifier: 65:70:98:10:E6:C3:3B:E5:CF:F8:59:88:CD:99:F7:4D:57:6A:5F:8E
Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Certificate serial: 01A1950DEF03807CA7861B1C79D2C2202E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
Manifest number: 135B
Signing time: Sun 01 Nov 2026 03:01:20 +0000
Manifest this update: Sun 01 Nov 2026 03:01:20 +0000
Manifest next update: Mon 02 Nov 2026 03:01:20 +0000
Files and hashes: 1: JqbX_PTUjq28Lqi1j_knCVS0A90.roa (hash: iCvt3eLQurCsmS7VrC6JLl3/RIGkqIASrCrA/w60LJs=)
2: yErFLitXLMKpmnQSV-VpqjceNWg.crl (hash: VTCqGX+u+Q00eh+HM12a5wDjEu6v/AyqA00gjNiz5ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:0d:ef:03:80:7c:a7:86:1b:1c:79:d2:c2:20:2e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Validity
Not Before: Nov 1 03:01:20 2026 GMT
Not After : Nov 2 03:01:20 2026 GMT
Subject: CN=65709810e6c33be5cff85988cd99f74d576a5f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:5f:f2:94:68:6d:36:67:55:83:43:08:63:
0f:c5:48:21:6d:29:22:0e:95:f9:92:83:69:81:e2:
6d:1b:38:29:2f:f0:d1:b7:f8:fe:17:c8:58:17:b9:
9b:84:a0:cb:2d:40:3b:d2:e5:e6:5d:7f:76:98:de:
d8:7f:85:60:6a:3f:02:f3:71:15:91:39:ba:88:f0:
59:ab:bd:2e:02:6a:14:1b:0e:b6:3e:20:32:1b:89:
5c:01:ad:bf:8d:36:bd:71:a0:01:71:59:5a:af:f1:
b7:34:68:d9:d9:18:3b:61:f0:97:65:f9:68:d0:75:
8b:4f:a9:ab:b7:3f:05:12:0d:af:a6:8f:16:2b:ee:
c7:13:36:11:84:16:57:28:32:01:84:81:47:46:fc:
70:d9:16:79:7f:ef:3b:44:a4:26:77:02:e2:6b:9e:
ef:bb:7b:d9:5b:8a:ec:6f:4a:be:59:f0:89:01:ba:
2e:84:70:e6:7b:14:ce:5b:6a:03:10:38:0e:46:f2:
96:12:68:7a:29:34:74:da:bf:49:37:4d:05:ac:65:
0e:ab:ba:83:56:d2:3d:79:3c:f5:6a:09:1f:38:f5:
4b:56:af:09:d6:39:85:47:8e:73:2b:d1:d9:a9:05:
19:b5:af:53:44:80:07:2f:86:cf:e8:bd:48:64:77:
48:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:70:98:10:E6:C3:3B:E5:CF:F8:59:88:CD:99:F7:4D:57:6A:5F:8E
X509v3 Authority Key Identifier:
keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:4b:11:e7:6d:a4:ea:39:7c:07:81:34:b2:c0:0a:04:e2:94:
70:75:3c:84:02:29:42:ed:6a:73:ee:d2:c9:0e:1b:22:0a:7e:
96:21:6c:ec:3b:cd:a3:ba:88:ba:f3:e9:c9:90:1b:40:fa:ac:
69:53:b7:b1:dd:1e:0d:cb:52:78:3b:ec:02:17:7a:48:02:af:
3e:8a:83:db:a0:94:d9:f3:43:e2:4d:8b:35:ec:5d:6d:17:07:
1d:b6:cc:1f:19:dd:65:98:b1:c5:a4:bc:fa:88:e3:46:ab:5c:
83:00:17:18:4e:65:b1:75:60:ce:c1:dd:ed:a5:74:d9:e0:17:
f7:94:96:3b:4b:d7:62:ef:fd:71:24:da:9e:d0:8b:75:0e:53:
ac:d3:f4:39:ba:b7:2b:54:3c:7e:df:18:a3:66:b2:7a:aa:bd:
31:bc:32:8e:5f:dd:c5:ff:b0:48:cb:d9:e2:21:df:66:8c:38:
f3:72:59:f7:3a:83:b5:ec:c3:1f:42:6b:19:d7:69:15:3f:58:
30:de:57:45:6e:ec:82:95:73:6a:f3:ba:55:60:44:95:73:62:
78:08:65:03:2c:b9:d4:a6:d2:6b:a1:c4:b0:04:0c:5a:b0:2f:
62:db:13:9e:f8:64:77:58:3b:03:17:22:0a:c0:2f:96:fc:49:
c9:5e:f7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 11:03:22 2026 by rpki-client