Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
File: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft (raw, json)
Hash identifier: SiXGAD5ntfw2FFkAFm2zgBrc9VDCnpJ8W0K1Vzl6BH0=
Subject key identifier: E3:F0:67:65:EF:E8:D7:68:D3:FA:3B:8B:A7:B5:98:CB:8E:B1:7A:A9
Authority key identifier: 62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
Certificate issuer: /CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Certificate serial: 01A137490B34B82C4A9CECC5C34C8648BC6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
Manifest number: 0291
Signing time: Tue 13 Oct 2026 22:01:36 +0000
Manifest this update: Tue 13 Oct 2026 22:01:36 +0000
Manifest next update: Wed 14 Oct 2026 22:01:36 +0000
Files and hashes: 1: V6kppHtIo247BBTH3uKp26adRoU.roa (hash: r9eyxABr1xQBoWx1fQ1XYssusw5T9eBOHoVdb80YKAw=)
2: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl (hash: HjZCGYHJuuBL6sDrMbCjeIUQF/8PptZ7LplvtqasxtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:49:0b:34:b8:2c:4a:9c:ec:c5:c3:4c:86:48:bc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Validity
Not Before: Oct 13 22:01:36 2026 GMT
Not After : Oct 14 22:01:36 2026 GMT
Subject: CN=e3f06765efe8d768d3fa3b8ba7b598cb8eb17aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fa:9e:73:87:83:6d:6e:9c:ed:23:d4:4d:98:
e3:3c:be:c4:9a:0c:2f:dd:30:96:1e:4e:02:86:66:
a0:04:e8:6a:73:d5:89:5c:a6:c9:32:50:76:c5:98:
4e:ee:b4:f5:4f:27:b8:29:8d:e2:ed:b1:0b:a6:b7:
4c:3b:0a:01:b9:df:b2:64:dd:64:68:40:ea:98:c0:
ac:17:7b:29:54:fc:d6:2f:5c:92:4f:7b:6d:2e:19:
4d:8c:68:e1:ac:f7:79:30:ce:a5:ec:53:6f:2d:6e:
e9:b8:b3:a3:28:a6:16:5e:57:2a:10:4f:2d:ea:c7:
84:4a:88:e2:9f:84:ec:93:70:0c:76:02:db:42:11:
ed:15:a4:5f:83:aa:6a:b6:7e:ba:ac:f8:45:0c:d8:
3d:f4:21:05:7e:35:1e:ea:92:7f:91:0e:44:0a:41:
85:39:19:11:48:26:6d:cf:af:0f:a9:7d:2f:e2:c4:
55:ba:23:d6:11:ed:1c:84:78:f9:6c:ec:f1:bb:b1:
18:0b:9a:18:c5:f7:ed:7e:ff:0a:bc:77:73:d5:be:
5a:ff:7e:89:09:c7:ba:b0:5e:cc:96:5f:22:2a:11:
ac:5e:51:99:c0:57:59:60:49:c9:16:cf:bc:3e:a1:
86:ff:57:45:01:22:74:a0:1a:d5:0e:c7:99:dd:75:
30:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F0:67:65:EF:E8:D7:68:D3:FA:3B:8B:A7:B5:98:CB:8E:B1:7A:A9
X509v3 Authority Key Identifier:
keyid:62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0a:05:1c:4f:bb:92:37:08:69:79:2f:bf:07:00:db:b2:96:
a0:47:4b:e8:68:45:fe:c0:b1:01:e1:05:7f:ae:ad:a3:1f:68:
45:43:c5:37:d6:67:31:36:af:74:dd:87:38:c3:cb:99:1e:9c:
fb:60:a5:e1:ee:fd:bb:db:fa:d8:83:a9:d2:ed:3c:25:cf:bc:
48:1b:5a:53:55:d6:6a:c4:41:09:3e:67:4e:0e:75:1e:fd:60:
e0:a8:f6:4d:0a:fd:54:6c:64:e7:a0:71:f7:81:d2:73:1b:b3:
55:f5:33:c6:a1:0a:ee:c0:52:f7:05:ef:f4:ba:eb:fb:71:cf:
df:f4:92:e6:90:99:fa:f9:8d:49:ca:38:bd:ae:c1:6e:02:be:
04:09:dd:12:f0:c4:3d:8d:fb:c8:5d:27:cc:82:6b:d8:db:36:
88:c1:92:40:83:68:ce:4c:0a:53:42:3c:a6:79:9e:31:ab:64:
ac:4d:81:2a:c1:06:98:d3:a8:00:6c:b2:2d:09:eb:82:17:ea:
74:86:25:82:81:22:57:86:f1:8b:08:2e:48:b1:c0:44:f5:59:
3a:52:70:24:3b:8d:bb:9e:fb:0d:ed:ec:80:a4:f5:30:66:e1:
73:68:c9:ee:31:17:7d:a7:85:0a:e6:6b:aa:85:20:e4:8e:ae:
26:2e:15:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:31:08 2026 by rpki-client