Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: edFDZHascGugqMvtB3WoWB3PUfTyXTeyNIRuIPgKS2c=
Subject key identifier: A4:31:3F:AB:AA:76:1B:7F:32:D5:00:DD:50:25:F2:B9:4B:D2:BE:A7
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 01A1DF4C5A07F3B796C0AA00295548C2923E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 0DD7
Signing time: Sun 15 Nov 2026 13:01:25 +0000
Manifest this update: Sun 15 Nov 2026 13:01:25 +0000
Manifest next update: Mon 16 Nov 2026 13:01:25 +0000
Files and hashes: 1: gLMBJkPbwcb-wlbRSTpyVXmPT60.roa (hash: /0bw3wAUn3OHzY+Itn4sRpP0s819h7VmmcBki8z1uGs=)
2: ivQFZHRMsvejyMfxqalTl6eZyTU.roa (hash: WA+GjW1Muidb5011AIHmuW7RcHYLCIXNLZLjL3+5V3I=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: XgAmvcMz68FPiFGWRlDvsIpyp4hVqhrO6D/rNQePXxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:5a:07:f3:b7:96:c0:aa:00:29:55:48:c2:92:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: Nov 15 13:01:25 2026 GMT
Not After : Nov 16 13:01:25 2026 GMT
Subject: CN=a4313fabaa761b7f32d500dd5025f2b94bd2bea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:81:2a:21:07:82:45:10:86:cb:45:c5:80:
c7:70:bd:c1:e5:e7:78:e0:98:f9:71:77:fa:19:11:
18:f4:ca:d1:f4:c7:dd:5f:d7:70:47:bc:12:45:25:
2f:0c:65:7d:73:e8:e7:c6:db:10:f8:d3:2d:f2:0b:
87:07:30:a2:e7:6b:91:40:f6:0f:e4:fc:b3:70:7d:
37:fa:89:be:f9:03:7b:2d:1b:ac:93:21:b7:ab:ee:
4e:c5:59:ce:e4:0b:64:97:17:15:98:dc:9b:0e:4c:
5c:97:4b:6d:d2:ac:0c:52:7d:78:67:60:88:01:dd:
99:33:f5:b8:f8:27:71:2f:0f:3f:ee:53:de:16:c5:
56:74:16:12:a0:d4:0f:9a:9f:ae:24:95:9b:da:79:
0e:86:ef:a0:a6:ae:eb:34:3b:89:6f:60:06:be:f3:
96:06:84:09:99:e0:d3:38:5e:26:1e:b1:d7:71:27:
b8:03:e4:42:92:0f:1d:5d:3c:ca:c4:9b:65:ea:f0:
f5:38:3c:42:20:b8:06:4d:e7:7f:49:61:3d:26:75:
a9:70:3b:82:dd:a2:52:11:ec:fe:43:f1:f4:b9:ed:
98:3c:dc:4e:87:17:47:be:39:b2:b6:9b:6e:08:00:
63:b7:44:e0:d7:ee:b8:04:e5:ac:a4:f4:35:cf:41:
20:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:31:3F:AB:AA:76:1B:7F:32:D5:00:DD:50:25:F2:B9:4B:D2:BE:A7
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6f:6a:19:e1:80:f3:73:6c:72:cd:6f:24:fc:38:0a:40:f0:
01:b4:21:72:f6:ac:37:d9:a3:83:9f:98:3b:08:2d:e5:5f:23:
87:dc:0c:67:e3:af:26:25:66:35:40:cc:90:aa:5f:e4:0a:2c:
e2:5f:54:3c:ff:e2:bb:5a:e3:3f:64:70:0c:a7:39:b7:d7:45:
75:e8:62:b0:fd:ce:45:68:7e:17:7f:1c:50:63:f4:fb:8a:d3:
63:8f:66:41:a8:79:04:a7:78:5c:aa:60:2b:c8:8f:b5:4f:20:
a7:c8:62:70:99:3e:42:93:f1:5b:29:58:28:2e:ca:97:5d:82:
55:45:5f:2b:a5:b3:44:32:17:43:1a:a2:24:e5:65:d9:d8:ab:
92:66:01:d6:36:31:da:f6:b2:96:ff:2d:8e:1f:c7:ef:7d:5a:
ea:60:f4:e7:0e:61:66:05:ff:f1:e8:99:7b:58:f8:d3:ce:26:
5d:4c:21:3e:62:29:cf:e1:09:37:67:a2:73:63:db:a2:91:47:
8b:30:2f:1d:b4:6e:51:7c:52:eb:6a:41:5d:bf:bd:bd:db:3a:
b6:64:fe:bf:90:eb:2f:07:63:10:1a:3b:d1:8d:29:fc:ab:ea:
a4:44:2d:bd:8d:64:f4:9f:6b:07:1d:91:d4:90:2e:fa:08:f3:
a0:5e:6d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:21:04 2026 by rpki-client