Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
File: _yXZxSk7p7_lIHSsJ_x9-aZJshs.mft (raw, json)
Hash identifier: 6bgEHP3dN6DXy4sAQr2Jb6I39HCahjjaSXUxgxAAvwg=
Subject key identifier: BC:AE:FC:71:28:21:D6:BC:E0:EB:CF:EF:87:63:7B:92:60:D5:DF:00
Authority key identifier: FF:25:D9:C5:29:3B:A7:BF:E5:20:74:AC:27:FC:7D:F9:A6:49:B2:1B
Certificate issuer: /CN=ff25d9c5293ba7bfe52074ac27fc7df9a649b21b
Certificate serial: 01A1385BE6C713F8335459E5E38C3ACD63BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_yXZxSk7p7_lIHSsJ_x9-aZJshs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
Manifest number: 011B
Signing time: Wed 14 Oct 2026 03:01:49 +0000
Manifest this update: Wed 14 Oct 2026 03:01:49 +0000
Manifest next update: Thu 15 Oct 2026 03:01:49 +0000
Files and hashes: 1: VoyMNhhHVQ4I5z9WjjUHws6hk2U.roa (hash: 07v8p+Qbq8NkDFnmR77Sitj/ACMVAdh3jZDXmBPQOXA=)
2: _yXZxSk7p7_lIHSsJ_x9-aZJshs.crl (hash: ypa89CsV4tVukUfAYrkzfjmiamLHSyqxD1PsdXBXF/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_yXZxSk7p7_lIHSsJ_x9-aZJshs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 03:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:5b:e6:c7:13:f8:33:54:59:e5:e3:8c:3a:cd:63:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff25d9c5293ba7bfe52074ac27fc7df9a649b21b
Validity
Not Before: Oct 14 03:01:49 2026 GMT
Not After : Oct 15 03:01:49 2026 GMT
Subject: CN=bcaefc712821d6bce0ebcfef87637b9260d5df00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:eb:50:69:03:66:3c:d9:3b:12:1e:67:ab:
3a:c2:bd:e0:95:77:23:11:5b:af:45:f3:9c:11:ef:
8a:09:85:3c:6e:60:c8:42:d0:17:28:9c:b6:de:cf:
d6:f8:f8:65:65:ec:f6:c1:60:b9:63:74:a6:6a:ed:
dd:7b:ba:c7:94:62:97:0d:be:58:14:8c:cb:2d:d7:
ab:e1:02:cc:b9:22:bb:e1:e9:0c:c5:d3:48:a2:41:
75:a5:da:0f:c0:0f:bb:5a:b1:59:0f:01:42:d6:5c:
bb:7c:ef:43:fe:87:f7:39:9e:50:f3:af:76:71:91:
46:a2:09:25:19:70:c6:f9:83:92:de:e0:c7:51:68:
70:41:2e:d6:a5:76:d4:28:38:d4:80:ff:97:7f:c4:
1a:cb:93:42:59:2b:ec:fe:ae:10:7f:00:30:be:98:
41:b1:cd:f8:d6:6c:e7:fe:7a:5d:1b:f5:1a:eb:e9:
79:25:bc:9f:ea:23:68:e6:20:e5:d7:44:2b:8f:e9:
e2:0a:c0:3d:e2:b1:86:03:3c:e7:5a:72:45:7b:c4:
48:8f:15:a1:05:20:56:e1:dc:11:96:cb:7b:4a:3e:
4e:78:14:12:5b:13:31:5e:67:5f:5a:6e:e5:be:e1:
7f:b5:71:07:fe:31:d3:fd:57:db:5d:a7:9e:86:ee:
a5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AE:FC:71:28:21:D6:BC:E0:EB:CF:EF:87:63:7B:92:60:D5:DF:00
X509v3 Authority Key Identifier:
keyid:FF:25:D9:C5:29:3B:A7:BF:E5:20:74:AC:27:FC:7D:F9:A6:49:B2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yXZxSk7p7_lIHSsJ_x9-aZJshs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e0:14:4c:54:55:8d:0c:51:38:54:d8:76:ab:71:39:28:3c:
fa:38:96:27:e1:cf:ae:79:27:de:6a:37:44:0b:e2:b3:04:8e:
5c:0a:5c:f3:51:d1:0a:ee:27:2d:b2:36:a8:36:5c:ea:e1:2c:
4f:03:55:a3:e5:7b:f7:fe:97:1a:a0:0f:bc:8f:df:bb:f8:a9:
b5:c2:d9:21:6a:62:c7:b2:62:77:2f:ab:0e:8f:e7:27:a1:03:
73:9c:a3:0d:67:4b:84:a2:7a:8b:ec:b2:bd:1c:fa:eb:c4:f1:
3d:bf:36:4d:fb:61:27:99:9d:bd:06:38:1b:5a:35:bd:d4:7f:
10:f3:d3:85:a9:aa:06:59:89:86:92:46:48:6a:3b:1b:b6:ee:
85:32:66:87:1e:a9:92:c0:7d:b7:79:5b:c9:39:16:3c:75:0a:
ee:d6:a9:7d:05:bc:cd:7b:8e:bd:64:c2:22:9f:07:f5:88:1e:
43:21:b0:00:94:3e:91:bd:f0:cc:01:c7:6e:2e:79:a3:5e:e5:
e0:00:70:91:bf:6b:d4:d2:4c:44:6c:0a:a4:2b:52:c9:bd:ee:
b5:68:5d:35:7b:99:19:e7:9b:ae:47:d9:1e:51:0f:b6:78:6b:
2b:63:8e:6d:ec:e8:fd:8f:e0:a3:77:6b:27:52:a4:28:51:8f:
e0:a3:81:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 12:11:12 2026 by rpki-client