Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
File: yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft (raw, json)
Hash identifier: eahakuW2KV4VjFRRm5Mfa30Cw+J+PRO6zmDBTkqW+yk=
Subject key identifier: 5D:E7:8D:B6:E5:80:76:64:EF:A0:04:A8:1C:09:0F:E7:86:EA:9A:36
Authority key identifier: C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
Certificate issuer: /CN=c8df337cea56a083f46b799072e70da345cc2364
Certificate serial: 01A1A9706340DD2721C2436131253E943E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
Manifest number: 1ADD
Signing time: Thu 05 Nov 2026 02:01:17 +0000
Manifest this update: Thu 05 Nov 2026 02:01:17 +0000
Manifest next update: Fri 06 Nov 2026 02:01:17 +0000
Files and hashes: 1: hNF8tXFLZNTcaH0gIBkBAvcKbVY.asa (hash: iwvNN6FtVQiEqz8CUKwZlaVHqu5n7aizrJShOvIXCR4=)
2: k2ViBnovBSrJ6-QzUlh_SgfUQTc.roa (hash: 9Q1EqZG/a6iEl1F6uqJOmdn36R+djh5MF5HhvgX3ijc=)
3: yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl (hash: /QBKlsvYWjInIPn3tV3w4zuspwPgnY2Abw3X/zULAgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:70:63:40:dd:27:21:c2:43:61:31:25:3e:94:3e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8df337cea56a083f46b799072e70da345cc2364
Validity
Not Before: Nov 5 02:01:17 2026 GMT
Not After : Nov 6 02:01:17 2026 GMT
Subject: CN=5de78db6e5807664efa004a81c090fe786ea9a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:39:24:5f:bc:3a:93:e1:b1:10:84:37:bf:24:
33:34:02:ce:81:58:cf:84:f4:ba:45:04:18:d1:1e:
28:7d:fa:c9:2b:39:51:3a:83:6e:0d:07:18:e2:c2:
27:bc:0c:38:73:8e:1a:c6:8a:c8:90:10:55:a4:1b:
f0:d9:58:5c:71:7b:f4:38:19:40:fb:63:5d:61:51:
1d:37:e1:94:ce:3e:42:c5:60:7d:f5:fb:0f:e2:6f:
7c:84:01:19:9f:bd:61:30:9f:53:37:6f:c7:01:ac:
b0:7c:aa:30:e2:1d:52:bc:4c:f5:4f:5f:cb:bf:71:
7d:6a:60:75:ed:96:d5:4e:8c:97:8c:ea:f1:6c:6c:
16:c0:ff:64:ab:70:84:63:c0:bb:6c:b6:1e:ba:76:
2d:63:24:b4:08:f1:cd:82:bf:5a:4a:48:b0:49:cd:
4b:f2:34:9f:64:f3:5b:b4:1e:e4:d6:7b:21:fb:4e:
44:00:77:ba:ed:25:b7:cd:58:3d:fd:d5:f9:e4:89:
1d:64:fd:55:98:4f:5d:0a:3c:74:49:e0:a6:28:44:
7f:b6:a6:87:8e:fb:a9:20:c9:1a:27:db:92:1a:8e:
99:fd:2c:5d:aa:e3:1d:f2:36:f6:b7:a3:d6:c4:f1:
8b:a8:45:9f:6b:11:0d:0e:ed:80:1e:0c:6f:fc:1e:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E7:8D:B6:E5:80:76:64:EF:A0:04:A8:1C:09:0F:E7:86:EA:9A:36
X509v3 Authority Key Identifier:
keyid:C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:58:0c:06:3a:d8:06:80:d9:c5:85:5b:f8:31:74:df:56:8e:
c1:c7:c4:9f:74:8f:59:e1:14:f6:ec:61:1c:eb:b6:92:97:af:
f1:08:07:74:8c:d5:46:57:80:b2:85:16:1c:21:7a:bd:13:0e:
eb:60:74:0a:4a:7b:61:b9:84:55:52:33:87:ce:ec:ea:0b:d0:
40:ba:87:76:0b:f7:18:3a:38:26:0c:1a:ce:60:7b:fd:d6:a0:
52:2c:e5:3e:49:5c:25:86:47:44:ab:c5:13:cc:3d:f6:52:47:
db:ef:ad:d4:13:c1:ad:e4:21:03:b2:f1:24:c6:70:95:28:eb:
1a:42:16:5f:b8:17:ad:01:a0:75:40:cc:9b:ee:bc:4b:ec:3a:
2a:f7:36:c3:1a:70:3e:7c:04:69:a5:46:9a:3e:66:e2:77:7c:
26:f1:aa:3e:7b:fa:cf:36:96:06:c8:48:32:15:ac:6b:f3:7c:
33:8d:cf:10:20:30:01:29:78:c8:21:32:ca:40:54:0b:6e:4f:
27:a0:da:9f:32:f8:c8:08:b3:3e:e6:df:db:35:7b:cc:21:cc:
65:82:13:c4:3d:4b:e4:07:b6:f5:61:a2:f6:eb:ad:b1:0f:e4:
0c:89:d5:7c:fc:11:73:85:a7:0f:bd:db:75:59:8f:e6:65:19:
5d:13:82:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:10:34 2026 by rpki-client