Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
File: YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft (raw, json)
Hash identifier: fLFepW/tNrXZOm4lWm6Xx2io74oxFU5vZ8AEPvRR4FI=
Subject key identifier: A5:44:90:E7:A6:F6:AD:8D:36:53:34:9A:82:04:A5:E3:70:36:66:AD
Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
Certificate issuer: /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Certificate serial: 01A17927AEBD6296AE4846A60DBE93E2E88A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
Manifest number: 086B
Signing time: Mon 26 Oct 2026 17:00:06 +0000
Manifest this update: Mon 26 Oct 2026 17:00:06 +0000
Manifest next update: Tue 27 Oct 2026 17:00:06 +0000
Files and hashes: 1: 0thyuBS-7i3aOK5iDtW2SD_9l5g.roa (hash: QgjGWqiX1+npCmoWmYzY48kBirMLlhP0MOtvPBXoWXc=)
2: YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl (hash: k/e7dRHyoVZFYA5HaKPxFSMaLAQjgOtvZLG9l8KuPf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:27:ae:bd:62:96:ae:48:46:a6:0d:be:93:e2:e8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Validity
Not Before: Oct 26 17:00:06 2026 GMT
Not After : Oct 27 17:00:06 2026 GMT
Subject: CN=a54490e7a6f6ad8d3653349a8204a5e3703666ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:58:39:6f:72:c4:96:1b:ad:76:39:30:de:a0:
28:d4:8f:71:14:3d:74:67:d5:81:08:4f:49:86:e8:
b9:1e:dd:20:9b:5d:5e:0d:b5:e0:af:54:d0:df:7b:
ad:34:11:5f:6f:a8:b6:64:48:4c:14:54:c1:bf:00:
c5:9a:2c:66:22:2a:a8:0f:f5:a1:e3:ff:17:b2:93:
36:31:25:c2:dd:cc:08:72:ec:b9:a5:49:9b:6e:8a:
6b:2a:bf:1d:b0:ca:77:56:ee:14:93:c0:87:99:6d:
8f:b9:af:8d:5b:ea:80:77:53:77:ab:7a:21:b7:1a:
72:4b:90:14:6c:04:ea:78:82:3b:e7:b8:55:a9:ef:
f7:9f:0d:bc:41:3e:05:73:ff:8c:53:2e:a1:c8:e4:
6f:98:12:54:6d:a2:49:f0:05:d3:9b:90:f7:90:9b:
37:f9:3b:ba:3a:1e:c8:75:67:f0:fa:0a:31:d1:3c:
b8:33:af:be:5d:04:c2:ba:7e:ca:33:21:8d:7b:29:
59:9b:a4:8c:13:c0:e8:42:a0:a1:a4:89:b4:01:ca:
7b:12:47:d4:91:e5:79:bb:54:e5:cb:af:a0:ac:84:
b3:d9:20:7c:f6:5a:94:cc:d0:6b:b1:ec:41:a7:4a:
6c:ee:cd:8a:a9:41:0a:fd:0e:90:ec:7d:ce:e0:09:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:44:90:E7:A6:F6:AD:8D:36:53:34:9A:82:04:A5:E3:70:36:66:AD
X509v3 Authority Key Identifier:
keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:8e:a6:ba:af:07:92:6f:fb:12:e1:0b:fb:13:af:c6:45:5a:
d3:f1:c1:2e:ea:ce:76:8c:71:41:d1:a7:e6:27:7e:fc:3a:a9:
10:61:6b:a3:63:58:8e:a2:d1:1b:44:02:fb:af:67:65:fa:26:
67:f5:22:e1:3a:7f:42:c0:62:51:46:ab:58:63:67:14:58:fa:
ca:3a:c9:b0:93:3a:04:58:11:f2:18:66:0d:a2:a7:15:dd:cd:
2f:9d:c6:95:39:03:72:4f:2f:81:34:83:da:17:4c:89:47:95:
aa:9d:02:e7:94:9f:a8:f6:02:27:96:78:61:74:7a:d7:b7:f9:
ed:2e:57:4e:be:f7:51:0c:2b:29:5d:ea:a5:ba:2b:96:13:61:
2a:a1:67:6c:bc:3e:f6:cc:b0:80:6b:5b:76:bf:64:28:2e:21:
a3:ce:20:d4:e9:20:54:34:39:6d:c4:1d:6f:1b:cd:17:bb:c2:
04:73:fb:18:50:f0:f0:28:4e:22:f3:74:c4:f8:94:62:72:da:
ef:d2:dc:92:93:81:ce:65:5b:13:c5:02:c4:0c:db:f9:69:30:
cb:fd:40:8e:e2:3d:10:82:ce:11:e5:cb:50:06:b2:82:df:92:
cb:4c:2c:e1:7e:48:f0:39:95:d2:a1:a5:1e:51:81:be:58:74:
52:e5:3b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:07:07 2026 by rpki-client