Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: KmByRZAOf3sFawjqWKa9GZdS6oHIq0UmSPzrjQ0j4JQ=
Subject key identifier: ED:79:5C:6E:D6:6E:31:62:88:FB:03:19:CE:BF:49:D5:13:41:13:2F
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 01A1219D197AD8B1FBAFBDFE57939B39B996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 1A94
Signing time: Fri 09 Oct 2026 17:01:46 +0000
Manifest this update: Fri 09 Oct 2026 17:01:46 +0000
Manifest next update: Sat 10 Oct 2026 17:01:46 +0000
Files and hashes: 1: Yo0ULWlGFniFl0kRIQzZJN8mg9o.roa (hash: j8hGB111jdt0RcgrUrjkuMAFRhv/pdlUdsj0AvFMkmM=)
2: jioszf8WkcygR-sUCmeQ22hRJBQ.roa (hash: GlPRmHwlYfAxgr1RqMrlQqRp2B9t9+qwJKez8uOIIxI=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: /WiRPWElSehmuV4dzrUouLOT4ulZkEN14YuNFQksBBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:9d:19:7a:d8:b1:fb:af:bd:fe:57:93:9b:39:b9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Oct 9 17:01:46 2026 GMT
Not After : Oct 10 17:01:46 2026 GMT
Subject: CN=ed795c6ed66e316288fb0319cebf49d51341132f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:91:a4:7c:d4:80:a5:af:b4:42:be:40:16:
84:bc:0c:7d:52:2a:aa:f8:e5:4f:6b:dc:89:d5:f6:
88:81:3c:27:b4:a1:e5:aa:dd:30:a9:96:14:96:77:
d2:c4:33:d4:82:7a:a1:36:ad:e7:83:69:82:80:a8:
0f:95:45:6d:fe:f7:72:62:0a:fb:1b:e7:3e:52:18:
02:29:6f:6d:be:ef:18:3b:92:87:0d:27:65:6f:eb:
e0:41:95:ff:ea:cb:83:51:c8:20:7c:97:ad:48:f0:
fc:79:5e:6a:7a:bf:ed:38:b7:dd:7e:18:0f:13:4e:
39:5d:df:59:b4:20:d9:17:68:53:42:da:97:a7:9d:
10:85:b9:bf:ed:9a:8d:b9:a2:6a:f8:c4:e1:5f:f9:
54:6c:29:7c:a4:66:03:3a:bf:67:0c:8e:54:51:f7:
23:cb:d1:a0:95:32:23:59:b6:65:19:ee:f6:e6:e7:
c1:f7:6c:dc:c0:c5:b8:09:04:1c:cf:86:1b:48:d2:
10:7e:b1:4d:d6:24:96:0d:28:51:f3:88:33:f5:b1:
d8:42:ab:ad:7c:6c:92:61:ef:46:33:1f:33:38:e7:
02:1f:6c:a2:e9:18:b1:d7:86:30:7e:88:4e:5d:6d:
64:13:67:e6:02:e2:61:d8:ef:4f:2d:a6:84:34:9c:
69:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:79:5C:6E:D6:6E:31:62:88:FB:03:19:CE:BF:49:D5:13:41:13:2F
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:53:8d:d5:7c:c8:a8:83:70:f8:43:33:2c:da:9e:d2:cc:7f:
1d:5e:22:0e:36:f9:80:59:25:96:d4:b4:7d:78:04:86:c1:07:
6e:0f:7c:5f:bb:d1:2b:f5:df:15:ae:f7:53:81:c6:57:e2:66:
69:3f:da:d8:e9:06:22:a3:af:fc:f0:df:10:e6:2c:39:64:43:
92:db:fb:9a:be:88:d2:be:7d:d6:45:47:95:ca:58:52:af:7e:
61:d5:ce:45:a4:4f:32:d0:bc:ed:ba:25:25:20:05:d5:c3:0b:
c6:62:69:81:2f:3c:2c:4a:5c:39:af:29:29:a7:e8:fa:e1:fc:
c3:c4:98:97:d0:36:ae:ae:ab:00:32:c9:c5:51:0f:26:4d:8e:
e3:9e:ce:1d:c9:ba:d1:11:1e:eb:99:a3:0b:ea:5d:15:81:69:
47:b9:17:34:af:ca:7f:1a:26:3b:c9:ea:39:18:12:d4:cc:c1:
fd:ce:ff:2f:92:a9:7c:34:3c:ba:68:b3:f1:03:5f:6d:10:4a:
26:76:e9:dd:01:63:af:9d:00:8f:e5:08:db:79:87:76:45:ec:
35:8d:17:02:ef:61:1e:2f:72:9c:61:7c:2c:fd:10:aa:68:c7:
e1:d3:d6:74:1e:5b:ec:ac:1b:63:c8:30:4a:d8:2f:40:eb:7c:
14:9a:30:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:25:32 2026 by rpki-client