Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier: A1LMlHF00YNLewHynsEm5m9rR3g9ju8DgPR6uVWO3eE=
Subject key identifier: CF:B8:31:8C:88:E2:55:E5:83:6A:9F:71:DA:66:3C:8E:91:38:11:E4
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial: 01A14270FC648C9D4C978458C5C7A6264F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number: 0EF5
Signing time: Fri 16 Oct 2026 02:01:03 +0000
Manifest this update: Fri 16 Oct 2026 02:01:03 +0000
Manifest next update: Sat 17 Oct 2026 02:01:03 +0000
Files and hashes: 1: wUbhJ1Q-nlV3uEvjLuk77UUB7Gc.roa (hash: R+RnalKmquQEDqC7KdcNQz1uImcCiR+mgzNPx6OERvI=)
2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: sT8DoTuYzXp+tuCurybS9iOTIWZOif/luLiyG0OSVOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:70:fc:64:8c:9d:4c:97:84:58:c5:c7:a6:26:4f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Validity
Not Before: Oct 16 02:01:03 2026 GMT
Not After : Oct 17 02:01:03 2026 GMT
Subject: CN=cfb8318c88e255e5836a9f71da663c8e913811e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:de:b7:45:0b:aa:4e:78:72:4b:64:c2:3a:b0:
cb:00:85:a9:3c:27:7a:05:11:53:80:12:ec:f7:d7:
3e:bb:e0:2f:7d:f8:6d:08:0a:85:c1:41:89:22:b3:
4a:44:31:0e:a5:94:de:82:1a:77:67:0f:34:f2:7a:
5f:0a:42:1d:47:29:30:26:72:6f:34:d5:58:66:3b:
f2:35:51:7c:a7:fe:86:5f:87:b7:6f:18:f3:ac:c1:
ea:b1:2f:9a:9e:db:2b:6a:9b:fe:6a:9d:67:8b:d9:
79:cf:81:22:48:09:c4:80:c3:c9:f8:68:ee:ab:dd:
17:6f:1f:30:f3:fe:be:92:4b:79:12:b3:f4:aa:53:
91:22:40:4f:79:dc:08:65:e9:f3:5f:dc:88:ec:11:
8f:f1:bc:58:50:96:dc:ff:37:52:ec:af:16:8b:23:
c0:8a:a3:18:01:b8:a9:67:41:1b:e9:07:ad:b5:20:
92:b3:69:f2:5f:ec:0e:ef:f6:8b:57:85:e7:fc:42:
ea:dc:2a:b2:cd:c6:d0:a7:d3:69:59:f1:db:35:c5:
f5:7c:dc:47:49:44:f6:8c:36:08:8b:31:f6:6a:c7:
fa:4a:9e:df:ac:48:ec:3e:69:df:b4:a1:fa:5c:72:
b9:09:bb:73:9c:5f:ce:01:36:f3:5b:40:03:be:f1:
c8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B8:31:8C:88:E2:55:E5:83:6A:9F:71:DA:66:3C:8E:91:38:11:E4
X509v3 Authority Key Identifier:
keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ed:2a:2c:7e:40:74:b0:c5:53:99:5c:81:88:c0:89:fe:35:
17:2b:91:59:4b:41:d2:d7:63:8c:81:ee:30:fc:e7:ec:b8:e5:
9a:05:ca:46:01:fb:c7:69:71:eb:b4:23:aa:7c:d0:fb:ea:9f:
5b:c7:1c:b0:88:31:16:99:dd:97:7b:a9:ef:06:c6:da:c8:df:
29:99:29:72:70:ad:db:2f:a6:1c:b5:2c:79:be:3b:20:7d:49:
a9:d9:1b:db:32:e0:a4:79:23:42:08:8b:c8:b8:0f:f6:22:3d:
12:3d:8a:2c:f6:e9:dd:12:12:ba:c8:d5:39:88:a6:50:8e:09:
d6:a9:3b:12:21:87:97:50:88:fd:08:f5:80:54:bc:fc:66:51:
ac:66:4e:d1:76:c9:6b:4a:1f:6e:5d:a8:86:d7:06:3d:f5:67:
7e:cc:cc:ac:d8:17:dc:54:c2:1d:82:d8:78:4b:19:87:19:7a:
20:eb:b4:e4:0e:dd:ca:b6:bf:c1:36:29:a8:5b:86:ac:cc:55:
ca:88:7b:76:52:ff:28:3e:80:6d:71:6d:39:03:17:de:75:fb:
75:79:24:40:94:f8:8d:c2:ef:f4:94:e7:c5:d0:f7:7e:79:eb:
6a:a1:c0:83:3f:95:66:b0:91:ad:0b:63:a4:5c:25:72:6a:74:
56:0c:7b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 14:56:55 2026 by rpki-client