Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: VuVCxMWkakUni9yhC3pvmIaM1oejXhpgyFVkljN2vUc=
Subject key identifier: F7:36:46:C7:D6:5C:70:C7:0D:D1:5F:C3:B3:7A:24:36:2A:DB:8D:86
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 01A17394A69BD8037621009102A98C856896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 1AC2
Signing time: Sun 25 Oct 2026 15:01:24 +0000
Manifest this update: Sun 25 Oct 2026 15:01:24 +0000
Manifest next update: Mon 26 Oct 2026 15:01:24 +0000
Files and hashes: 1: 7duJmg6XBu7Dkr56DQUbxqUTtGI.roa (hash: vRnmShBspjKGY8+2c67XY2q1Q6Ro3wJjFJL27Iuvolk=)
2: XNV9wPAqysMBIC2XJGUuQeljvGQ.roa (hash: flffQRMNH+W2jDu27k/I1V7GhHYoHbxfArajhLjcHkc=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: JLF5Sjg2Vy4OQ9rX/yKmLthDxPRDN4fhnFdnzDk80hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:94:a6:9b:d8:03:76:21:00:91:02:a9:8c:85:68:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Oct 25 15:01:24 2026 GMT
Not After : Oct 26 15:01:24 2026 GMT
Subject: CN=f73646c7d65c70c70dd15fc3b37a24362adb8d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c7:60:6a:3f:78:f6:82:9b:ef:ac:b8:60:ba:
fe:ec:a6:21:a5:3b:37:f2:6e:77:a3:9f:8a:8f:59:
aa:c9:74:4d:ea:26:66:cd:80:61:da:3f:80:e9:13:
b4:d3:bb:e6:3d:fd:84:b0:8d:12:ff:39:c9:f0:86:
7b:f0:d3:04:e9:bf:db:e5:8a:df:20:ef:e1:ac:16:
2a:d8:b1:0f:f4:5a:f2:b1:7f:71:fd:7d:13:b6:16:
af:c1:7e:a0:37:1d:27:55:68:94:20:b3:83:68:d4:
ac:07:a3:7c:71:dd:eb:0d:e0:f5:29:7d:d4:c0:87:
4f:5f:e0:d7:ab:16:14:fa:5e:f8:23:64:63:a8:a3:
19:19:94:8a:99:11:cf:0f:de:32:65:20:d4:17:c2:
7e:6b:10:6a:90:69:2f:8c:d9:a2:a1:2e:29:4b:ab:
bd:92:b5:77:ab:6b:ff:10:36:ac:d3:91:41:de:3b:
53:3f:7f:69:43:19:bc:c9:dc:ed:34:5d:4d:7e:7f:
6f:5d:58:87:a6:3c:37:e3:c0:70:da:50:bb:5b:31:
8e:6d:e1:b5:74:bf:0a:5f:0a:f6:9c:fd:c1:87:00:
45:f4:af:eb:47:19:e5:60:d2:22:9b:11:64:1e:66:
d3:51:e8:ec:86:de:f4:6a:0f:84:af:66:cd:e3:18:
11:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:36:46:C7:D6:5C:70:C7:0D:D1:5F:C3:B3:7A:24:36:2A:DB:8D:86
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6f:3d:d1:13:e4:fd:bf:47:b9:85:1a:68:99:ab:b4:fb:22:
d7:26:ad:75:65:fa:e4:04:3e:1d:92:75:8e:f6:8d:fa:c1:03:
d3:61:aa:cd:42:d7:34:52:3d:54:9a:6f:37:34:3f:b2:cf:e2:
b8:d7:4d:78:ec:52:b7:ea:ee:70:37:34:24:53:3b:d0:fa:a8:
47:1b:67:3d:f5:1b:90:58:2c:1e:94:93:ab:54:b9:cb:11:7b:
1b:3e:54:fe:22:26:18:48:36:39:e9:bf:d7:f1:b0:ed:47:62:
67:ad:44:3a:39:c4:6d:bb:87:cd:95:af:0f:65:ec:84:4d:89:
02:b0:c4:ca:9f:1d:1d:f7:f1:13:e5:e1:fe:34:7e:f9:b5:a4:
cf:05:9b:48:f5:63:d2:0d:73:38:2c:e3:ec:ec:34:f6:d1:77:
4b:60:01:e9:98:93:dc:48:9b:11:aa:5a:7b:e7:1d:bf:2f:f6:
b2:f3:1b:1f:1d:f6:af:ba:54:81:e0:2c:1c:d8:c1:10:cd:e4:
43:a3:65:82:1c:2b:a9:70:51:02:1b:e2:dc:3e:c4:06:ce:e2:
ce:b1:ac:47:59:cc:b1:28:53:21:d9:f7:c6:a2:c8:fd:d1:25:
2b:47:64:a7:ec:6e:3f:4b:5f:bb:2d:8a:ba:97:31:7b:6e:cf:
88:97:d8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:56:09 2026 by rpki-client