Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
File: Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json)
Hash identifier: aMsDp+BQI0FWYeFG/V+yNBXOrmQjnnwA+9CiVMRWHdc=
Subject key identifier: 04:BE:AA:09:CD:1E:CB:5C:B6:FF:27:C3:EC:9F:3A:FB:F2:94:54:8F
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 01A1AB5ECC60BFEA01585F406F93DCB38FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
Manifest number: 0D0D
Signing time: Thu 05 Nov 2026 11:01:18 +0000
Manifest this update: Thu 05 Nov 2026 11:01:18 +0000
Manifest next update: Fri 06 Nov 2026 11:01:18 +0000
Files and hashes: 1: G5vOXOrwN65Z2knRIyhIi4ajxcg.roa (hash: f8yA2/LEOIBl9ojrViXKWuA2P7J9LHfkPPc+NV8fLDY=)
2: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: h2YOnGfszOGwBlBJX5tizts3OgjwiVgeq23HcbCbHjM=)
3: ihLYDwzgyn_m5m2Zd1wwF4HxD0U.roa (hash: 1v2ujIkHqtTKC3+oQr41I2IHkcs4Y9Lw5ExXmOCqLHI=)
4: mB45dvu5Htfn5d_oFn0R_Y2_KRM.roa (hash: EtvaMfR4fmUPI0A4y3DpkyLZRtcwYo14fBp9kPpZZx8=)
5: utuYkDSjgl6DW6FD4qnbkWDpESc.roa (hash: vNrbl/jL6h1nrgmuIRvfEjHF819EKSekUKjVB/Vl0ek=)
6: wBwxvniWkVLTU8lzjagdjNio7rA.roa (hash: yfU0N7Qa02bAFcmBB3AUh8U/RxL0CnGcM+0y2zDoS4M=)
7: x09fF6JOFSowUL2E9m359UlfoIE.roa (hash: XGbExiYXDOPNt9ooJ/4Wi9foh5gyJlLAYrRsSw6G7aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:5e:cc:60:bf:ea:01:58:5f:40:6f:93:dc:b3:8f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: Nov 5 11:01:18 2026 GMT
Not After : Nov 6 11:01:18 2026 GMT
Subject: CN=04beaa09cd1ecb5cb6ff27c3ec9f3afbf294548f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8d:1e:35:ae:c7:c6:25:1c:c8:77:d5:ab:5e:
88:09:c0:b9:58:94:20:07:ec:79:99:3f:a4:e7:68:
12:a0:fd:53:b9:96:ba:46:b8:52:70:19:04:f8:3f:
a5:3f:4c:5a:39:a8:f6:db:e6:ea:9f:70:7d:fc:67:
bb:e0:a9:20:fd:3f:69:e5:03:c3:1e:11:c8:b5:c2:
6c:e0:4f:87:26:e2:dd:9e:12:c7:67:b8:b3:f7:84:
f6:39:1b:e4:8d:3a:90:d3:c1:d6:7a:0e:5f:55:26:
a2:5f:c9:45:2a:d7:74:b8:15:32:b0:57:dd:5f:bf:
7a:13:75:f6:83:e9:b6:4f:e8:2d:05:5e:98:d7:f1:
37:65:c1:1e:16:0c:66:c8:af:19:b9:6b:2c:06:70:
6a:99:9d:d9:06:6a:99:4b:f3:81:7f:ba:22:c6:6b:
21:68:3b:15:13:fa:56:bb:fe:b7:7c:81:8c:c4:a7:
64:eb:b1:bf:d7:88:4c:ab:21:eb:10:41:78:dd:f8:
75:86:b3:8a:d5:a1:91:92:39:48:25:0f:da:06:33:
b4:f2:a8:ee:15:31:c3:df:16:96:6e:69:6c:b2:2c:
9e:d6:40:c2:a5:de:65:ca:b3:de:be:c3:dc:63:1f:
43:20:c4:3d:44:51:69:79:d2:58:d7:d3:7c:b6:eb:
cf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BE:AA:09:CD:1E:CB:5C:B6:FF:27:C3:EC:9F:3A:FB:F2:94:54:8F
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:68:12:5b:7c:5f:eb:31:4b:e2:f6:d4:41:9c:fe:21:84:8f:
5a:2c:81:6d:39:d0:d6:21:4e:d3:10:85:93:90:c0:85:65:49:
4b:78:8c:d4:0e:35:19:ad:f3:e3:ec:69:27:44:4c:37:06:37:
99:c6:31:13:97:18:7c:62:e3:f8:0e:72:0e:08:23:95:6f:a4:
29:4d:49:2d:23:75:e7:17:ad:53:68:fd:82:6d:d7:6b:c8:97:
08:cc:9c:ac:fd:c1:65:1c:f7:6b:4a:cb:96:d3:7e:37:b6:ea:
89:c1:e1:1f:6f:11:bf:65:b9:f3:b7:10:80:90:f0:63:d5:70:
17:ff:23:a6:44:b5:9e:25:bc:fa:e7:34:eb:92:98:f1:26:ff:
16:9e:8f:a8:58:59:fe:68:17:ae:22:2b:52:d5:49:69:b4:0e:
47:19:13:4a:c7:24:a3:09:4f:57:c8:86:10:4b:e1:36:79:f1:
02:43:2b:a8:87:c9:c3:65:38:00:da:19:88:62:53:12:33:71:
22:07:15:6e:49:25:b4:2b:cf:06:32:10:2d:9e:93:f6:65:61:
aa:16:a3:82:f7:7f:12:e5:b1:1e:99:f0:6c:df:d8:27:82:3f:
a2:f8:a6:b9:45:71:17:5b:09:57:68:12:59:f8:88:fc:53:0a:
73:68:6e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 13:59:41 2026 by rpki-client