Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
File: yxyjwd2KVS42ekmgIZkGlyKUpnw.mft (raw, json)
Hash identifier: fc/Txt60jXyFuBDzFlRKoqi6rPQIbqMevqTHQBoNCkw=
Subject key identifier: B1:C7:0A:22:3E:9C:A0:F0:EC:64:42:E5:66:E3:7E:80:16:AF:84:A3
Authority key identifier: CB:1C:A3:C1:DD:8A:55:2E:36:7A:49:A0:21:99:06:97:22:94:A6:7C
Certificate issuer: /CN=cb1ca3c1dd8a552e367a49a0219906972294a67c
Certificate serial: 01A1250B893358B88C7F53C0A8983A93C2C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
Manifest number: 0111
Signing time: Sat 10 Oct 2026 09:01:15 +0000
Manifest this update: Sat 10 Oct 2026 09:01:15 +0000
Manifest next update: Sun 11 Oct 2026 09:01:15 +0000
Files and hashes: 1: QiN9rG_Ysuf7jDr6rlJvaZKS1SY.roa (hash: CVle1wefvKSXiK7/zejKSn/++K6IZllecq4TO7iTCZg=)
2: U2-pyUEFz_jV5xze95sKqmITK9E.roa (hash: qFKlY0WTggQuoTIdTFaI1jSEY0M+4i8LehCtLGlHHT0=)
3: yxyjwd2KVS42ekmgIZkGlyKUpnw.crl (hash: uwbFeVu2av2OcSKElTU0fUFP3ZEt266tT01HnogMpUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:89:33:58:b8:8c:7f:53:c0:a8:98:3a:93:c2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1ca3c1dd8a552e367a49a0219906972294a67c
Validity
Not Before: Oct 10 09:01:15 2026 GMT
Not After : Oct 11 09:01:15 2026 GMT
Subject: CN=b1c70a223e9ca0f0ec6442e566e37e8016af84a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b6:d3:51:89:b3:d1:b5:b1:48:37:ef:4b:10:
9a:57:2a:ff:43:b0:43:10:67:8f:23:ff:92:f7:bf:
0d:b9:b6:55:ec:b3:61:a1:77:c5:41:26:59:65:9c:
d7:37:ca:5a:ce:5b:a0:2d:f0:25:2d:51:fc:f3:65:
5b:0a:1a:98:10:61:3a:f7:b0:6a:0e:e6:10:9a:d4:
f6:b6:3a:77:07:05:bb:58:e2:e9:cd:d3:87:1a:08:
19:98:b0:eb:27:2e:f1:ad:15:da:14:f6:cc:82:08:
2a:a2:79:33:e2:4c:8c:83:ac:1e:d6:c1:89:34:9c:
69:ff:91:b7:fc:e1:fa:88:45:7a:c8:13:dc:ad:6b:
3b:23:e1:f0:6f:5d:28:4b:d2:37:27:8a:a9:ee:11:
10:f4:c2:31:84:d8:29:17:03:f9:96:b4:c9:3e:13:
fc:26:a7:68:d5:b4:2d:39:d2:40:6e:d6:39:19:4f:
1a:2e:31:2d:2c:0e:5c:2a:20:9c:cc:35:79:09:a5:
b2:dd:68:58:17:59:e1:d0:5e:8f:db:bb:2e:21:ed:
e6:26:3f:f0:2d:22:fd:fb:45:bb:a9:47:a7:25:20:
f7:e0:84:91:7f:db:ce:5a:5c:37:ea:c1:b6:99:ca:
a3:9a:57:1d:5a:17:3e:41:61:45:f3:59:15:b4:c0:
51:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C7:0A:22:3E:9C:A0:F0:EC:64:42:E5:66:E3:7E:80:16:AF:84:A3
X509v3 Authority Key Identifier:
keyid:CB:1C:A3:C1:DD:8A:55:2E:36:7A:49:A0:21:99:06:97:22:94:A6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5a:7d:be:82:89:20:63:94:50:5e:59:1e:55:01:3a:81:d2:
b5:b9:a6:23:a8:63:83:1d:9b:dc:0b:dc:ac:c0:1e:61:86:38:
25:0d:f6:1d:34:98:84:e8:bf:9e:d4:26:8c:08:7d:d4:25:c5:
09:34:0a:46:52:18:16:f8:a0:d7:f4:dd:73:bc:86:cf:bd:cc:
08:bb:67:e0:90:40:25:a5:5f:5e:b6:38:81:64:70:ab:e4:3f:
f0:fa:69:5e:bf:f3:67:23:52:6d:7c:c0:d1:41:33:d9:83:26:
b0:14:1b:83:ed:a5:93:7c:6c:d6:4c:46:1e:1a:dd:67:0e:72:
81:9f:1d:be:5a:25:8b:b9:8a:2b:b6:0a:60:e3:1a:68:87:a2:
38:28:a7:6a:3b:d1:6b:1b:a0:85:ae:12:13:33:eb:96:0e:4d:
e2:bc:60:e9:29:ca:7f:e2:b3:91:86:c1:1a:ad:64:e6:77:86:
c6:70:ea:05:14:63:eb:d4:93:cc:65:ff:c9:78:7c:77:65:6f:
b1:01:4e:02:89:58:84:bd:28:2d:b8:b3:2d:0f:c8:5c:e8:2b:
29:ad:9b:92:09:0f:8d:9e:7a:81:0d:88:f3:ff:d4:0a:3f:ab:
1a:ff:18:f2:6b:53:3d:9f:13:1c:3f:0e:4e:fa:bb:25:29:37:
6d:e2:42:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:10:07 2026 by rpki-client