Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: Nt7rv4eONTp/Xx+vfyFiLrCcIvNjFxJkVhFqmCmMbQA=
Subject key identifier: 12:24:61:AF:34:91:94:A4:F1:EC:11:1A:11:19:5E:22:3F:5C:94:68
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 01A02A343AE2DBB43BE4ADDB22E28B8D7E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 18B1
Signing time: Sat 22 Aug 2026 16:01:00 +0000
Manifest this update: Sat 22 Aug 2026 16:01:00 +0000
Manifest next update: Sun 23 Aug 2026 16:01:00 +0000
Files and hashes: 1: 9Nl9UE6iQ8BzYdxl7G-kytsnGM0.roa (hash: DwCSayZkRcTecU+QYNWzkQO84K94CzpgnweIdh3T7XA=)
2: ENI7Z5yBr-3vmabr7x8Oqv2rU3k.roa (hash: SYbuwV9RF98H2wnwET3rqVG/OV1l8TgwPl32TdMZOp4=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: 3aOsu3qj5a3kfZFQV4tRPqOTPGQFdrc2nQb2Lt49DFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2a:34:3a:e2:db:b4:3b:e4:ad:db:22:e2:8b:8d:7e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Aug 22 16:01:00 2026 GMT
Not After : Aug 23 16:01:00 2026 GMT
Subject: CN=122461af349194a4f1ec111a11195e223f5c9468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:67:7b:41:c7:ca:13:c0:18:cb:b8:e7:56:
94:d7:6a:9e:3b:14:1a:b7:79:e9:6a:27:12:5a:cd:
e9:5e:41:ad:b3:94:42:57:ae:68:80:0d:29:57:20:
89:7f:5d:83:80:87:ce:fb:17:2c:5c:5e:9a:9c:a7:
b5:0c:32:3b:66:2a:19:24:8a:af:54:12:79:e3:60:
4f:d9:ef:e1:15:75:02:e8:6c:3b:f2:f4:b4:fc:c1:
98:a3:33:77:d7:aa:96:07:ff:70:0a:c8:23:d3:e4:
24:65:a3:6f:15:76:2d:71:df:50:a3:4d:a9:b7:ac:
8e:29:7a:14:e8:98:ef:9c:fd:b4:80:ec:d5:c7:81:
14:02:d4:10:9a:29:71:48:f5:3e:fc:33:eb:57:74:
60:bb:a4:74:a8:02:e4:ce:73:3f:71:41:ee:22:c5:
23:5c:7a:e0:0a:bb:90:98:8b:49:92:e3:d1:1a:9c:
df:18:38:18:15:fc:ac:e9:bd:76:5b:aa:1e:92:e8:
b8:db:f1:35:e5:10:6a:8e:da:3a:f7:4c:90:e8:de:
0e:a2:ff:2c:b7:9c:6f:f8:15:01:cc:1a:68:50:50:
47:3d:dd:ce:65:cb:0f:3d:73:ed:44:95:d4:d4:3b:
a5:ae:aa:1b:e8:d3:c1:98:2f:5c:12:f7:c7:28:0f:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:24:61:AF:34:91:94:A4:F1:EC:11:1A:11:19:5E:22:3F:5C:94:68
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a3:ec:e5:36:4a:64:4a:af:49:b5:ea:e0:39:ed:6c:17:6e:
46:aa:4a:1f:51:a1:45:d9:ac:f9:57:a1:9c:20:ec:5a:33:0b:
b7:74:56:12:60:2c:71:4c:50:de:5c:23:65:c3:79:57:89:b5:
18:0f:cf:49:b3:56:db:1a:bc:08:68:13:36:e3:fe:1f:48:b7:
92:13:7a:90:f8:fb:99:10:0a:c5:9c:4f:4f:0f:7e:aa:4b:10:
0b:b4:b0:bd:5d:dd:93:86:ee:5c:ba:c4:a9:db:ed:c5:ce:77:
d2:17:bc:b2:23:22:25:7a:6a:34:46:ef:78:86:d3:19:d8:af:
b0:19:1a:10:8f:97:9d:ef:bb:28:00:ac:a4:29:53:9b:83:f3:
23:2b:33:10:d5:71:a8:5b:27:bc:a7:7c:e9:78:a3:58:ac:0e:
12:b8:67:db:08:50:bf:29:d2:d2:aa:aa:08:19:dc:07:6d:0f:
ac:71:3d:bb:9a:ea:7f:33:79:3a:87:1c:a0:75:d4:14:b0:75:
95:5c:bf:b3:7c:e8:59:7d:6e:9e:12:b8:60:23:48:0e:6e:2b:
05:c8:96:de:7c:cf:8f:05:30:e7:f6:3b:55:0b:6d:57:86:3a:
07:17:a5:ac:cc:dd:73:38:ee:6a:fd:86:1c:f2:55:d3:14:7e:
cf:8d:91:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:10:51 2026 by rpki-client