Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
File: YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json)
Hash identifier: EQ/L3PL38pDSWbpBk+4UHtqbabPZzcNEDfi1W74TIhc=
Subject key identifier: 4A:20:11:FD:1A:DF:CA:43:2A:58:D2:BE:8E:6D:F8:80:F9:91:B1:D3
Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Certificate serial: 01A151761DFE59D2B1EA1F66D75FAE147F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
Manifest number: 1191
Signing time: Mon 19 Oct 2026 00:00:57 +0000
Manifest this update: Mon 19 Oct 2026 00:00:57 +0000
Manifest next update: Tue 20 Oct 2026 00:00:57 +0000
Files and hashes: 1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: 6uPNUZTi3BeCnp7qvJ05tcs1Gi9VoNBYx+X0tiFam30=)
2: nd54JNe4vIZ_-Gecq7CuS7z9ouE.roa (hash: uDzn2UrQJ/gWE6VmVbdTq4BSTBqexLqsyHgtdAqNXeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:76:1d:fe:59:d2:b1:ea:1f:66:d7:5f:ae:14:7f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Validity
Not Before: Oct 19 00:00:57 2026 GMT
Not After : Oct 20 00:00:57 2026 GMT
Subject: CN=4a2011fd1adfca432a58d2be8e6df880f991b1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:79:a7:08:31:c3:ad:fc:9f:ad:45:e9:f4:
b6:cc:5e:b2:30:64:02:b7:2f:89:96:e5:37:7f:0b:
28:4c:bd:23:1e:0b:cc:f6:cb:8a:10:e5:67:86:1d:
b6:f7:e4:10:9d:d6:10:02:8c:9a:db:ff:8c:91:9b:
4b:4a:cd:5e:a0:5e:c7:bf:31:95:42:11:94:6f:99:
36:96:16:8f:ca:34:8a:ff:b2:45:91:bb:c6:e6:64:
30:ef:69:3b:e8:b5:61:08:6d:63:32:16:11:a4:75:
c2:af:da:f9:ec:eb:42:84:06:0b:c3:d3:31:87:04:
a5:8c:1c:8f:35:ee:65:52:73:a5:5c:3e:0d:b2:09:
29:66:b7:c2:16:7f:17:0c:c6:8f:3e:f5:07:59:27:
d2:d3:6b:f1:1f:89:31:a7:89:b6:5e:05:e6:00:1b:
b2:20:21:42:ef:5a:c2:b9:2a:37:04:86:49:76:e7:
31:49:8f:06:c2:7b:5e:de:ce:8d:9e:d7:a9:0a:9e:
a5:87:f5:91:ab:f2:d4:6b:bc:f8:26:9e:04:82:09:
c5:e4:39:85:e8:18:2a:65:d5:8a:dd:35:7b:c7:57:
ee:8c:6d:20:e8:96:f3:49:d7:bb:56:14:45:a4:9b:
9f:79:f1:ff:ed:e9:dd:ba:f6:99:ff:c1:e1:c4:de:
22:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:20:11:FD:1A:DF:CA:43:2A:58:D2:BE:8E:6D:F8:80:F9:91:B1:D3
X509v3 Authority Key Identifier:
keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:89:bf:13:8f:48:30:98:71:c6:90:79:65:f4:da:b2:87:a8:
67:49:f9:8a:bb:42:b6:e7:16:51:66:83:cd:99:4c:5f:fe:76:
9e:a9:21:44:50:32:e4:28:61:10:db:5e:53:ce:b0:df:96:69:
8d:83:cb:8e:7c:80:e1:cb:e6:af:eb:ba:b8:28:b7:b8:7d:bf:
54:98:7e:21:d2:15:eb:39:04:ce:3a:33:ff:d4:40:72:0e:47:
1c:d9:70:5d:5c:f4:62:fa:d6:a0:82:e3:d3:17:a3:1e:a6:4c:
17:6e:bc:e6:20:f9:57:f5:ae:cd:94:3e:e9:1e:5c:33:4e:f7:
46:02:70:c7:5e:a3:6e:8d:5c:73:ca:54:f7:25:50:20:60:21:
95:e3:3e:e8:f5:06:3e:95:ce:cb:c9:97:3a:de:d6:4d:9c:4b:
85:d1:52:10:cd:89:44:f4:54:8f:c4:40:4b:dc:a0:b6:a4:d4:
7f:fd:b1:3b:3c:5d:57:a1:e2:69:19:07:25:47:c3:10:85:28:
63:eb:fc:6d:dc:4d:07:00:90:fe:b5:a1:b1:70:cf:b9:e9:44:
ef:e9:0d:72:56:49:52:8f:25:66:38:72:88:3b:3e:e5:a6:e2:
40:bc:4e:27:43:7b:99:25:91:ca:14:b2:aa:c7:7c:bc:fd:2f:
95:f9:17:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:03:04 2026 by rpki-client