Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
File: YE1FsSrOCsIjA-08d5S4MGpqtbA.mft (raw, json)
Hash identifier: pccwJz4ICBrix2l4MA1lW0wL0Kq8isRVeLtFQB4lOMc=
Subject key identifier: 40:A8:D6:49:43:6F:6F:91:9D:58:E1:F8:30:6B:32:4C:C6:5C:14:8B
Authority key identifier: 60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
Certificate issuer: /CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Certificate serial: 01A14CF43B85C2B770566C72934D26212D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
Manifest number: 1A3C
Signing time: Sun 18 Oct 2026 03:00:36 +0000
Manifest this update: Sun 18 Oct 2026 03:00:36 +0000
Manifest next update: Mon 19 Oct 2026 03:00:36 +0000
Files and hashes: 1: 6yggvTE1BpMD_6DUp59i_E9q_ec.roa (hash: j6H31l8Cy0P+NhoECNSn3tX4DXbCQPFUlGEVGEcQnDk=)
2: YE1FsSrOCsIjA-08d5S4MGpqtbA.crl (hash: C4dQZhmwfdlEFeCapejNs9NVHbei7Z89djFc77pJPoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:f4:3b:85:c2:b7:70:56:6c:72:93:4d:26:21:2d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Validity
Not Before: Oct 18 03:00:36 2026 GMT
Not After : Oct 19 03:00:36 2026 GMT
Subject: CN=40a8d649436f6f919d58e1f8306b324cc65c148b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:c6:65:c5:d2:0e:9b:7b:9f:0f:93:47:0f:
3a:d1:9b:ff:f6:81:c2:4b:89:96:2f:95:fd:46:aa:
9d:b5:ff:ed:5c:93:05:15:31:5d:24:1f:1b:68:a5:
97:7b:a5:98:45:43:4e:68:90:0d:61:19:df:b1:41:
2e:fb:22:3b:10:78:72:e8:4d:63:b8:90:57:ca:2f:
5b:1b:12:c6:bc:1d:f8:64:33:e1:73:9a:53:0b:91:
61:b9:05:a1:4b:89:5d:4c:3a:14:49:6b:87:b5:c4:
b5:0b:15:8c:2a:c1:a4:9a:1d:26:1e:e3:27:67:bb:
6d:6e:71:07:1e:f5:52:09:b0:93:6a:d5:e2:4c:97:
9d:53:49:b5:54:93:5b:84:81:d3:df:6b:3d:39:1d:
e8:8c:03:fe:3d:01:42:62:3b:d8:ad:b1:34:ae:d3:
a0:a9:91:3e:c6:12:99:18:28:b9:17:6f:44:b3:af:
8c:57:8e:c1:b4:52:74:98:a6:45:1b:aa:55:19:0e:
89:42:53:b6:88:36:3c:f1:2c:17:d3:a5:8d:1f:12:
f7:c1:64:ae:48:8d:9a:d2:f5:58:d8:3a:a3:2d:4e:
38:4d:f9:cc:eb:10:c6:b3:88:1a:e0:c1:4c:6a:a5:
18:27:d9:fd:80:76:04:a0:52:ec:0e:7b:0c:e7:cb:
29:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A8:D6:49:43:6F:6F:91:9D:58:E1:F8:30:6B:32:4C:C6:5C:14:8B
X509v3 Authority Key Identifier:
keyid:60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:17:0b:06:c3:23:17:98:7c:c9:fd:63:03:f4:cb:00:e6:b2:
70:b7:6c:92:3e:d6:73:b7:15:de:6d:87:64:e3:84:e2:20:97:
87:06:fc:d2:c8:b3:42:65:88:64:ca:80:bd:c6:ea:83:23:fa:
6a:08:a3:f6:43:3d:f8:cc:ff:fe:97:c7:c2:0c:6b:68:b9:77:
db:46:39:0a:02:f5:72:83:e6:a8:51:8a:02:6c:ab:ec:6d:38:
89:aa:35:4d:b0:61:42:3d:20:15:7e:1b:7c:f8:67:be:35:bc:
1b:0d:35:9f:3e:1a:53:90:b3:38:74:3c:46:02:3c:41:20:61:
63:53:05:32:cb:df:09:1d:90:7f:6f:17:cb:88:df:bc:b9:d0:
7d:04:e7:2e:64:f5:fe:5b:35:76:a4:81:7c:7d:d4:89:e6:d4:
ed:01:5c:f8:fb:c0:f1:12:f0:97:b3:79:ce:5e:b9:21:9b:d7:
41:c7:a7:2b:99:41:ec:8d:3b:05:cb:84:ee:47:1c:64:e0:98:
8f:1b:13:66:b7:6e:df:c0:aa:65:f5:da:01:a8:2c:2e:a9:b2:
f4:de:55:2c:fd:22:de:69:d3:88:2f:fe:fe:fa:cd:46:64:2e:
5b:4a:5c:4c:66:98:9d:d7:99:17:50:34:78:69:ad:22:ba:fc:
97:3a:7c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 12:07:14 2026 by rpki-client