Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
File: YET26nnk4qPgKos47QzTpAWROKw.mft (raw, json)
Hash identifier: UaqoY6FIfDdvDY5HiqVa8VPYiyngDNbJdgQVWTU/oAk=
Subject key identifier: CB:EF:C0:08:72:20:A9:6C:06:B1:5B:61:56:40:01:7B:AD:7B:A3:01
Authority key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
Certificate issuer: /CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Certificate serial: 019A4E4F59AAD4746E82A337788A36F3AACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 10:00:14 +0000
Manifest this update: Tue 04 Nov 2025 10:00:14 +0000
Manifest next update: Wed 05 Nov 2025 10:00:14 +0000
Files and hashes: 1: FpSNZXq3Bs_lAOfoxnm2_1Ntexk.roa (hash: P0ueHi3T6HBQ/Yjh4YAxSote8hQe/slz/U1OtoX8X6M=)
2: YET26nnk4qPgKos47QzTpAWROKw.crl (hash: git30mgMrOtCwJ+cKRnehz+7p1QEnZ8oQr2Lff09bOg=)
3: iOzGDAy-qErjiYCUQPq5S2xsHRA.roa (hash: EO5Nyg7UrTNVSVoeALt1d3217TiALMgeZ+f/YmIuYh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:59:aa:d4:74:6e:82:a3:37:78:8a:36:f3:aa:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Validity
Not Before: Nov 4 10:00:14 2025 GMT
Not After : Nov 5 10:00:14 2025 GMT
Subject: CN=cbefc0087220a96c06b15b615640017bad7ba301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:ce:e1:08:73:36:55:98:be:20:28:cd:13:
84:cb:2b:47:96:3e:9e:ff:cb:34:31:7e:d6:af:c8:
45:ee:55:cc:c1:66:6d:6c:d8:35:58:57:ba:9e:e6:
29:60:67:66:20:6c:69:be:22:0b:ac:f0:95:bb:02:
52:4c:f8:8d:50:a8:df:92:f7:06:ba:85:4a:8d:0f:
f1:8f:d8:af:7c:33:ae:df:a4:22:0a:ec:0c:7e:2b:
26:07:af:40:51:00:01:f0:ce:f3:0d:cf:d5:ed:a5:
36:54:dc:58:eb:a7:c4:9f:24:2b:1f:ea:8e:f5:25:
aa:bb:56:59:bd:4e:d1:63:bd:2f:f4:bf:c6:d1:5c:
cd:81:b7:78:ba:57:cd:81:c4:62:88:1e:b5:40:ad:
79:c2:a1:cf:46:ca:5b:e7:e0:c0:90:66:4e:66:4c:
e8:b4:6b:2c:8c:eb:0a:32:d2:3a:0b:db:e3:69:8c:
e3:f0:d6:36:ff:53:3d:de:51:87:34:73:3f:12:ac:
6f:35:a9:cd:a2:70:29:d9:37:89:e0:2c:53:ab:22:
fe:4c:0d:86:b7:ab:f8:0e:0b:16:6f:1b:a1:f8:55:
0a:d8:d6:e2:87:dc:b5:de:b8:8e:f8:f4:f9:91:b3:
48:52:a4:07:6f:30:d8:77:67:6c:74:8d:95:bb:71:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EF:C0:08:72:20:A9:6C:06:B1:5B:61:56:40:01:7B:AD:7B:A3:01
X509v3 Authority Key Identifier:
keyid:60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:83:e8:2f:0a:4c:58:47:9d:80:0c:52:ca:3e:37:18:52:52:
a6:cf:4b:b5:60:a4:70:bb:e6:6d:4a:3a:9a:6b:56:4e:bf:b2:
77:2c:84:a1:b7:77:62:e2:06:42:c8:a2:72:fc:7a:f3:40:f1:
7d:6a:e8:79:3c:1f:3e:70:ee:aa:c3:41:fb:a1:69:2c:e2:29:
85:35:f4:11:48:1f:63:d9:58:c1:6d:19:8e:9a:b1:8a:ec:a3:
5c:d1:c9:a0:b2:97:61:dc:f6:56:e0:e6:0e:58:26:23:5c:2c:
e8:29:63:f0:32:24:87:8c:f2:ba:b9:a1:04:5f:54:0e:e0:64:
ae:c3:e8:a1:fc:ee:86:09:c6:37:2e:4d:02:d6:11:f9:36:1b:
a2:f7:54:9f:51:de:f3:f5:5e:ce:b1:8f:d5:65:0a:49:12:c9:
d6:f0:72:ad:8e:43:c3:c5:9f:b7:94:8c:24:78:a4:7e:2b:2c:
82:0a:4a:b4:c4:a5:f0:f7:ee:c2:ac:89:58:87:c9:f9:18:3c:
28:03:9c:fe:70:26:a6:71:9c:73:32:03:4d:2a:fb:06:0c:e9:
24:50:78:50:e8:02:08:20:1d:a9:58:ee:d3:61:a8:6f:cb:1b:
b3:24:b2:06:0e:ed:f8:99:dd:f7:85:36:50:29:3d:ca:48:0a:
7b:11:3c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:20:21 2025 by rpki-client