Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
File: YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft (raw, json)
Hash identifier: 0BupAUyg9pPM97zXUbMYNU+p1MdQ9luyP2cdSgzKVs4=
Subject key identifier: 20:7D:D7:13:68:97:29:C0:C8:81:34:D1:38:D6:D1:20:78:B6:3E:A5
Authority key identifier: 62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
Certificate issuer: /CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Certificate serial: 01A1551C4F0ABB1CA5044DE4CDAC140BD92A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
Manifest number: 1ACF
Signing time: Mon 19 Oct 2026 17:01:20 +0000
Manifest this update: Mon 19 Oct 2026 17:01:20 +0000
Manifest next update: Tue 20 Oct 2026 17:01:20 +0000
Files and hashes: 1: YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl (hash: kyzhgaTWrZsumwcrZCWcggYb/y7WZ7fCSqyolnwLh2Y=)
2: rbSihGXODQuXmGdRnxTGjpysN_E.roa (hash: kNylbr0jppPNSO+4QDcJI79pqrUPxp86qMzkIb3LnQY=)
3: xSLEYc0lt1omC0_5S_IEJQG-sFo.asa (hash: XvuqcAAROcucGiTTqNKqYAdleeXb8tap+MKCtPl4Y5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:1c:4f:0a:bb:1c:a5:04:4d:e4:cd:ac:14:0b:d9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Validity
Not Before: Oct 19 17:01:20 2026 GMT
Not After : Oct 20 17:01:20 2026 GMT
Subject: CN=207dd713689729c0c88134d138d6d12078b63ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:e8:44:a7:06:85:b5:34:d9:ae:1c:e6:b5:
09:f6:0a:71:4a:04:72:5f:15:6d:49:ed:27:e3:fa:
09:b9:fa:ec:23:67:ab:6a:59:24:0a:91:d2:d0:92:
ec:28:c8:a4:b3:2c:ee:c8:2f:b2:ed:a0:1a:99:75:
94:69:37:c0:88:6f:bf:6c:0b:30:dc:56:36:87:13:
5a:88:cc:a8:92:7d:86:f9:71:5f:d8:cf:52:95:08:
45:03:10:dc:53:2d:29:9b:b6:53:36:2e:26:07:ef:
11:9b:b4:eb:c4:f2:7d:c8:2d:f4:d1:23:a5:38:08:
05:46:8c:9f:b8:37:c0:29:c9:70:4b:52:3c:16:da:
b1:57:bb:b4:03:ce:0c:3c:8c:54:ec:8c:9a:50:9e:
87:8f:a6:6d:75:ab:13:f6:8b:fc:30:89:86:b2:c6:
1e:b6:f6:a3:1b:a9:d6:a4:60:a7:ea:1e:57:5d:3d:
45:8e:94:99:07:e9:22:5e:cc:db:2c:59:51:b1:de:
fb:d3:d3:a0:dc:78:b0:66:f0:be:05:ea:34:48:a8:
b5:dc:8a:3d:4c:41:39:20:7d:5b:c4:da:ef:d9:de:
7d:39:c7:4f:c2:4a:0a:51:4d:f7:90:34:c8:8b:5b:
ae:5f:55:7d:87:9a:00:ef:5b:ea:ff:6d:53:19:44:
86:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7D:D7:13:68:97:29:C0:C8:81:34:D1:38:D6:D1:20:78:B6:3E:A5
X509v3 Authority Key Identifier:
keyid:62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f0:a7:3a:0b:b1:fc:ef:7c:44:44:ca:5c:25:b7:b6:86:99:
db:b7:ec:27:c4:f8:78:fe:5c:a5:41:4b:4a:db:ee:2e:0c:7d:
ae:85:e8:b0:73:b6:13:97:cc:75:3c:8e:ce:ca:c0:49:e5:34:
5d:9a:86:80:45:f1:da:fe:1a:7c:15:4f:88:49:bb:88:18:63:
a9:d6:3a:41:b1:b4:d3:4d:7e:bf:15:30:e1:be:87:85:79:30:
23:f4:f4:d9:07:a4:43:87:95:ad:f0:4b:c9:d3:cc:1b:62:c1:
46:00:06:e1:82:40:0c:3c:3c:7a:1e:94:da:ce:27:b3:75:ac:
a3:d8:bd:16:43:7d:12:ef:1c:b0:b7:1e:8d:80:cd:56:84:06:
0e:ac:c4:55:ce:2e:f3:43:6f:af:91:72:d0:4d:1c:b8:ea:32:
ed:96:ee:12:57:98:76:34:df:3d:ce:5d:44:e7:ad:ee:03:9b:
0f:d6:f3:49:0f:17:5a:2f:5f:dc:f2:b2:65:47:bc:f0:2f:8a:
91:6c:ae:10:e9:9a:f9:28:db:fc:4c:0b:b1:f4:36:b7:1d:3f:
bb:59:de:5c:45:78:1d:3c:86:fd:4e:30:16:ff:d4:5f:a3:5d:
a7:e2:41:3c:fc:7d:e2:09:ce:7c:a3:9e:a0:9d:0a:47:7a:af:
f4:87:78:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 23:50:54 2026 by rpki-client