Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: BMMyT3etl+7t9QBO0zMZ1265jaWhXHn7xjR67EekQBc=
Subject key identifier: D9:6D:4A:81:7A:75:BB:9B:50:F0:01:6D:1D:61:66:76:7F:BD:44:07
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 01A17D05223B32C6A783850A55A67953973C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 17F1
Signing time: Tue 27 Oct 2026 11:00:50 +0000
Manifest this update: Tue 27 Oct 2026 11:00:50 +0000
Manifest next update: Wed 28 Oct 2026 11:00:50 +0000
Files and hashes: 1: KZ9eOKIw4W5LW26KdHo3OovWYuw.roa (hash: Y2tbBI1UfKdGsIyb2y0U5Hi5QBIcE7c7eceJ/lWWnkM=)
2: XaIcpqpb27hhGRIZ8h_xuzKRev4.roa (hash: pQLbKPAj3ndWd5qjjlikkIwvz29S32Fkmehgv5Ouuf0=)
3: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: sHZCWRp1AhB0xiZJaqLB7LKJ52ZY52M2yTNi4zFCKeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:22:3b:32:c6:a7:83:85:0a:55:a6:79:53:97:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Oct 27 11:00:50 2026 GMT
Not After : Oct 28 11:00:50 2026 GMT
Subject: CN=d96d4a817a75bb9b50f0016d1d6166767fbd4407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:d6:54:cf:0d:9a:9f:3d:72:ab:b4:46:ff:
39:1d:d0:9e:1f:03:7a:69:1f:97:12:40:94:48:c4:
e3:80:1c:66:f9:8d:5f:50:c6:37:65:3d:81:d2:26:
ae:73:36:37:8a:0d:4b:27:fd:af:c4:93:3d:c8:4e:
15:ba:ca:65:8e:eb:9b:75:dd:ae:3d:d1:54:31:2b:
92:8b:c7:c6:ab:b1:c5:56:07:91:79:69:20:25:fc:
c1:0a:19:89:75:e9:62:ed:1a:f9:7b:e1:59:c6:28:
9e:fd:82:da:8e:41:04:e1:9e:5b:86:24:e6:73:f5:
aa:15:c5:f3:85:a2:d5:ff:10:cd:f6:75:92:92:b6:
9a:8f:d9:e6:43:e9:0c:db:ae:0e:f9:bc:1f:da:75:
e2:31:8e:8f:8a:7b:92:66:d7:ff:87:dd:f8:bb:82:
52:26:ed:f9:cc:8e:ec:ae:2c:e1:25:78:51:f3:76:
4d:d3:9a:f7:7c:e0:a7:7f:45:a5:49:18:e1:98:b4:
17:0a:a6:df:90:18:71:62:6e:1a:52:b2:04:85:bd:
68:cc:c9:88:78:93:7b:44:e9:33:d1:3c:34:af:20:
d4:a4:f4:fc:8b:60:e4:59:49:b7:f5:2d:5f:48:96:
aa:64:df:14:fe:c3:76:39:eb:95:f3:e5:5e:ee:ac:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6D:4A:81:7A:75:BB:9B:50:F0:01:6D:1D:61:66:76:7F:BD:44:07
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ec:96:e6:9f:c3:c5:99:28:7c:b5:e1:f8:6f:04:f2:82:58:
1a:a9:1e:d1:83:d3:31:78:97:0a:36:b0:06:b0:c9:5a:97:77:
ed:66:38:5f:06:a7:a9:09:b9:f1:8a:fc:86:b1:f6:a5:89:27:
e4:62:ff:68:38:a9:b9:1a:db:ce:be:07:41:d4:16:a0:9a:21:
35:7c:90:b7:70:e2:0d:a9:aa:2e:d7:72:b4:50:8f:7a:d8:23:
f4:31:7a:25:94:08:f4:50:72:c4:e3:ca:d6:db:ee:70:06:e5:
b4:98:dc:32:9a:c9:bb:3a:b4:c8:58:f4:bc:d2:26:22:34:38:
0a:35:3a:80:82:97:3d:29:67:49:42:68:ba:72:ac:62:28:6b:
35:bd:6b:14:f8:22:f5:07:38:2a:18:c3:a8:8e:24:13:df:b6:
91:07:3b:85:f3:fa:d4:1f:c8:4a:c7:b3:35:a4:91:42:76:ef:
b3:1f:df:22:84:f6:4c:e2:1e:ff:dc:83:4f:4b:20:e7:7a:91:
31:e1:16:73:09:26:f5:34:9e:81:c3:e7:94:d5:76:31:f8:fe:
fc:4a:f9:85:16:d9:40:61:59:60:3e:2a:cb:92:43:dd:49:73:
fe:f2:73:e1:d7:6d:62:be:59:98:8a:ed:8c:7c:7c:12:f4:bc:
a4:d5:fd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:42:23 2026 by rpki-client