Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier: cYZFk6gd82Irz6rRfKomKQewTaGS1dNFT+js9hEcAtI=
Subject key identifier: C4:83:11:60:DE:76:04:A6:42:DD:DD:C4:F2:C7:58:AF:BC:85:E5:00
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 01A137ED2B04442B41DF6A9440F55C302190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number: 1AA2
Signing time: Wed 14 Oct 2026 01:00:52 +0000
Manifest this update: Wed 14 Oct 2026 01:00:52 +0000
Manifest next update: Thu 15 Oct 2026 01:00:52 +0000
Files and hashes: 1: JBraeIgnuA6e6r7UQt_AjcfpK9E.roa (hash: tQM9C7OHo0XqPssxXUnuLcGysh5HiluPj8tqyjMnFVk=)
2: cpkKyNRNYgQk1lLBbtv-RlD-78g.roa (hash: MQvqAF25MaAWO4N+QWnNs3nNJuJQMOBlA9mFkaz0rn0=)
3: qQLv7uOVYz32Fa-HCYFsduryaUY.roa (hash: msrPJ+vS8iPsGg0xQfm9cnyh8JOxajlO3J5ownd6l7I=)
4: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: 9+VEKq9Yy7ijmV4SZ99twbYM5aXBzDyiXae0/8xu3fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:ed:2b:04:44:2b:41:df:6a:94:40:f5:5c:30:21:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: Oct 14 01:00:52 2026 GMT
Not After : Oct 15 01:00:52 2026 GMT
Subject: CN=c4831160de7604a642ddddc4f2c758afbc85e500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c2:d2:8a:39:06:5d:fe:7f:06:e2:57:23:a5:
98:4d:22:6a:0e:4f:88:02:5b:a2:7a:88:31:56:3b:
96:1e:c1:d6:b9:55:34:b0:09:5d:0f:52:2d:8f:25:
1f:70:d6:01:0d:3f:df:d5:61:5f:18:0d:83:75:d2:
a7:be:69:b5:67:6a:4d:16:bc:c6:b5:19:90:df:6a:
d6:eb:d2:ea:d4:bf:04:fd:75:14:bb:1a:2d:1a:f9:
ec:7f:71:81:45:98:99:e8:e9:93:ad:f0:1b:a9:d8:
33:81:88:73:7c:d8:b3:d7:6a:34:8b:24:1e:8a:97:
6c:0d:8a:12:e1:d5:f5:e6:01:7f:76:32:b7:ad:33:
54:f5:d5:4a:54:63:b2:aa:bb:fa:91:64:fa:21:54:
5f:aa:7a:fd:a0:67:4f:de:74:2b:83:22:7f:51:78:
f9:3a:e8:74:66:95:6b:ed:39:64:d1:8f:98:aa:1a:
6b:c6:65:21:4b:a1:3d:fb:a3:fc:65:b1:7c:16:d2:
2f:14:4c:39:bf:b0:44:26:2a:bb:5c:e0:b7:86:b4:
d0:f7:6f:9e:75:66:55:be:ec:06:00:56:2c:3c:b6:
a1:a5:da:e2:14:e8:4c:56:59:59:f2:b4:d4:e3:8a:
d8:1e:49:ab:35:80:64:6b:96:5c:d7:3b:7d:7d:b2:
e3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:83:11:60:DE:76:04:A6:42:DD:DD:C4:F2:C7:58:AF:BC:85:E5:00
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:da:95:03:5f:ce:86:94:cc:04:59:8c:6b:97:48:e8:c7:36:
b9:03:9a:f6:41:49:68:14:da:4d:0a:fe:af:cb:40:ac:fa:83:
39:f0:cf:53:15:05:4f:8c:45:80:57:98:93:f8:e2:a5:12:c6:
6c:0e:0b:3f:4e:77:a0:c3:e5:76:18:b4:b9:bc:5c:bf:98:8d:
57:17:c3:b1:88:8b:fe:13:f3:1e:e5:f8:ae:1c:1c:84:3f:59:
12:cb:0a:99:b4:00:4c:54:93:7a:d0:e2:84:4d:a0:97:d9:63:
fb:e7:cf:21:a9:2e:81:e5:c3:61:1b:1e:bf:59:b3:6f:83:a5:
3f:f4:ec:ee:e8:be:2b:ab:55:6c:1e:68:c4:a6:8b:55:f6:b5:
e6:3c:1d:60:41:66:b7:6b:54:05:20:ea:61:74:2a:0f:c6:50:
3c:15:04:35:0d:4d:e7:b2:bc:f4:5f:af:65:96:ed:af:4d:7b:
20:99:8d:0f:8b:96:19:79:19:87:e8:8a:83:92:14:ec:52:3f:
ba:11:ff:66:1d:69:0b:84:46:25:33:d0:59:52:70:94:3d:cc:
26:c0:72:1b:93:12:26:14:6e:d7:5e:59:41:da:b9:b7:3c:a7:
78:d2:df:3e:46:c1:43:e6:6b:b8:dd:5c:56:9e:18:f4:23:4f:
a3:2a:b6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:04:35 2026 by rpki-client