Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: mt8Ol15wIwTVrLNxKhhuz1A36xdCrtGz0lNgKY1irKA=
Subject key identifier: 7B:DC:37:6D:7A:06:FF:41:9E:7D:61:CB:CB:AA:5C:DD:7D:3E:A0:08
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 01A113056CF87F1DD77F18B6604AFD5ACD7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 1A8F
Signing time: Tue 06 Oct 2026 21:01:24 +0000
Manifest this update: Tue 06 Oct 2026 21:01:24 +0000
Manifest next update: Wed 07 Oct 2026 21:01:24 +0000
Files and hashes: 1: Xz1YPhwlgcFJn9H6zKCHQE9OZMs.roa (hash: E23r1ViDJSDDunuaw4r4shrNSmLJDRKbQsrvll9ROpQ=)
2: Y6uXwuSAMDltrgK47G1JT4Ly1MU.roa (hash: kINCl8tG1shq70mte4iuRzZgEl60hKLBpRpKxfDa3dE=)
3: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: 1dE41Q0V0k5eG8s3CGn+/XYm2OMNmrT6y8FPkDAe00M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:05:6c:f8:7f:1d:d7:7f:18:b6:60:4a:fd:5a:cd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Oct 6 21:01:24 2026 GMT
Not After : Oct 7 21:01:24 2026 GMT
Subject: CN=7bdc376d7a06ff419e7d61cbcbaa5cdd7d3ea008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:cb:f1:d7:47:88:fd:ac:81:26:48:3a:e3:
7a:d8:f9:51:af:2c:aa:6b:f0:5f:e8:e1:23:80:97:
43:34:a2:71:22:0a:19:bb:d5:a5:f3:fe:98:91:3c:
3a:83:cc:5a:c9:09:d5:63:7c:c1:de:e6:46:53:5c:
a6:ab:07:91:ff:6a:49:e0:95:4e:e4:95:6b:17:fc:
88:2b:43:f5:2e:4c:5d:e4:eb:91:3d:2e:57:0e:8a:
3d:72:33:52:2e:b0:2d:0f:7e:f7:7d:1c:13:da:7d:
50:cc:93:ed:f4:58:17:f1:f8:68:bb:e7:b0:f6:72:
49:9a:ae:c0:85:7f:10:21:cc:b3:17:b6:9f:49:cf:
52:df:e6:e2:f0:cc:63:ac:c8:b0:06:3b:14:b6:bb:
31:11:5d:9c:7e:60:cf:8c:7e:01:04:f9:e8:68:23:
b9:cf:a9:bf:7a:65:8a:1b:06:ac:e0:ca:f4:a8:de:
ab:fb:e5:88:ab:74:22:b2:a1:e8:ba:db:8d:f5:33:
34:87:7b:77:6f:6b:33:ea:58:c5:2a:5b:19:b5:74:
a3:25:6b:ca:53:13:76:f3:31:08:ac:e9:73:cc:91:
6c:1e:39:12:2b:10:c6:de:00:18:2d:b6:2c:e8:15:
3e:87:3b:e6:84:65:79:51:92:b2:08:e6:01:74:21:
b2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DC:37:6D:7A:06:FF:41:9E:7D:61:CB:CB:AA:5C:DD:7D:3E:A0:08
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ec:0f:42:6d:ca:37:08:23:ec:07:f7:41:c8:8a:74:f0:8e:
fb:73:ea:0d:a2:b7:61:ec:e3:72:53:fe:86:96:f3:d3:0e:83:
1f:23:37:eb:40:5c:53:ce:6e:f9:dc:df:27:b9:54:4d:c0:03:
73:81:6f:0d:9b:85:4a:1a:9d:b1:d7:43:0e:16:b9:9a:4c:25:
86:0c:ae:bf:23:58:b5:53:5b:68:5e:54:89:e2:8c:cd:a6:30:
b5:b4:8c:43:43:18:0e:d3:4e:e7:7a:c1:b6:8f:f5:29:10:d0:
27:de:26:ce:94:0f:b6:09:c5:c6:2b:23:ea:f4:5c:31:fd:d3:
2e:58:93:66:0d:0c:fe:60:5e:69:5b:69:8d:50:d8:10:fb:bf:
3e:6b:22:e6:3e:52:78:1b:ab:2d:cf:56:bf:80:89:98:02:d7:
e7:d8:b9:ea:d2:6e:02:72:ab:3e:de:68:72:a7:f6:b7:b3:08:
f3:12:e6:72:6c:9e:7f:3d:61:43:d0:1d:2a:d9:c5:58:75:07:
fe:9e:af:3e:65:f2:d9:34:6b:db:b0:03:58:e7:59:2d:be:c1:
94:ca:2a:6d:b2:df:81:76:2c:3b:8a:1a:a2:8c:fe:47:cc:ad:
aa:0d:47:0a:89:03:dd:79:a8:3b:ff:2a:d9:ce:19:be:9c:91:
35:b1:3d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 00:50:29 2026 by rpki-client