Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
File: YRs47qO8cHP29KpNIe1BNmXXyic.mft (raw, json)
Hash identifier: MGUvgSYb31CM3EGLPxyZbhPTidUDXllEV0L8smGYucQ=
Subject key identifier: EE:B8:CC:C4:79:B7:C0:2A:DD:6B:EC:B8:08:06:BD:B2:4F:A1:20:1A
Authority key identifier: 61:1B:38:EE:A3:BC:70:73:F6:F4:AA:4D:21:ED:41:36:65:D7:CA:27
Certificate issuer: /CN=611b38eea3bc7073f6f4aa4d21ed413665d7ca27
Certificate serial: 01A126FA2F518CC2311FF912C03DC9D82A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
Manifest number: 0103
Signing time: Sat 10 Oct 2026 18:01:32 +0000
Manifest this update: Sat 10 Oct 2026 18:01:32 +0000
Manifest next update: Sun 11 Oct 2026 18:01:32 +0000
Files and hashes: 1: TcaCPZlW9b7nUjd0B-e1yd0zAE8.asa (hash: Oy2UJlXOZ8xOLUsWDNeaDlW0wd+hjDN8NHEzf1/ZIt0=)
2: YRs47qO8cHP29KpNIe1BNmXXyic.crl (hash: 1VmxUKGp1M38B0+QVg8AEka+1de852SfAoN6C1S+LtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 18:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:fa:2f:51:8c:c2:31:1f:f9:12:c0:3d:c9:d8:2a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611b38eea3bc7073f6f4aa4d21ed413665d7ca27
Validity
Not Before: Oct 10 18:01:32 2026 GMT
Not After : Oct 11 18:01:32 2026 GMT
Subject: CN=eeb8ccc479b7c02add6becb80806bdb24fa1201a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:17:11:40:20:ab:8d:4a:21:d3:6a:c7:78:
6e:e0:a6:76:e3:0d:f3:c1:02:07:99:cd:f7:e7:4a:
f4:81:2c:fb:83:5c:26:a0:33:50:2a:e1:c0:05:d9:
29:b7:75:a0:be:52:2b:45:b2:b1:4c:51:d6:c8:2b:
6c:3a:d3:4c:e5:74:94:9e:21:28:e7:15:ad:c6:f2:
cc:d8:f3:be:39:77:cd:8e:4e:02:c5:55:36:45:dc:
fd:cc:8a:51:d1:da:f3:7a:e7:40:2b:b7:2d:c0:93:
83:32:01:2e:d9:72:10:cf:24:2d:0d:98:f6:d3:4f:
4c:7f:ff:17:ac:04:47:2e:7c:d4:1d:24:5d:02:65:
f0:79:17:50:76:53:6f:c6:e2:1d:b0:2e:6d:b5:68:
f0:96:ed:8d:91:81:ae:2a:ad:80:6c:88:f7:4c:af:
6e:96:c2:10:e9:3c:be:99:3b:dc:58:22:e0:74:79:
5a:bd:eb:ec:be:a5:82:63:7f:12:5d:8f:12:f5:64:
b4:05:11:01:1d:3a:5c:3e:8b:eb:7b:dc:d3:8a:c4:
58:a7:bf:e8:b7:d2:14:76:38:a1:96:4f:58:be:4b:
80:55:51:e3:89:65:09:d2:c0:c6:29:c3:ba:46:9b:
a1:4e:bb:3d:1e:0d:43:32:bf:cd:a6:de:c2:ed:f3:
26:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B8:CC:C4:79:B7:C0:2A:DD:6B:EC:B8:08:06:BD:B2:4F:A1:20:1A
X509v3 Authority Key Identifier:
keyid:61:1B:38:EE:A3:BC:70:73:F6:F4:AA:4D:21:ED:41:36:65:D7:CA:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:2f:4f:44:e2:d1:db:c3:a1:9c:91:ec:88:a7:8c:4a:32:d9:
00:06:85:37:a3:0e:27:c1:0d:70:63:cf:bd:66:64:87:7f:1f:
05:6b:c3:22:b6:04:0c:41:5b:26:00:cd:a9:d3:57:83:61:37:
f7:45:51:c1:a1:1b:6f:d0:1b:6c:98:1b:37:30:40:dc:10:ad:
56:5b:7d:fe:e9:c3:92:6f:83:75:37:b3:99:92:7e:94:a3:3e:
68:5f:bd:10:52:2c:0f:a7:98:05:25:d3:67:11:97:3b:62:30:
1f:aa:cc:90:82:06:ce:83:f2:f4:07:8b:09:42:24:dc:8a:18:
d4:94:0c:23:30:1e:73:45:82:91:f5:52:4a:6d:26:38:27:6a:
2a:0d:48:46:4a:ab:54:61:26:af:1c:03:ec:99:27:c0:5c:69:
7b:a5:82:a4:7a:72:13:39:36:32:b2:74:a0:3f:be:c2:76:a8:
c9:26:0e:fd:46:f3:16:7c:0b:79:dc:a1:f8:fe:c5:f7:1d:59:
a8:43:cd:d6:36:4e:75:50:4c:80:d2:6c:da:cd:a0:78:89:21:
ac:43:84:ab:b9:24:74:33:dd:ba:14:7b:ab:20:1c:41:a6:70:
6b:90:fc:4e:61:51:e4:85:2d:b6:08:90:d3:f2:ce:59:25:fd:
a5:fd:47:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 04:57:32 2026 by rpki-client