Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
File: YtA4iKQF5huH0XBvkzs2aob7QpU.mft (raw, json)
Hash identifier: yKy3bx1Yf4DohMOQUmdRGGKfEHx4gAB+wYP0JlJ2nK0=
Subject key identifier: 06:74:D8:FB:78:01:6C:3A:E2:9E:44:E9:34:40:7B:6A:5B:36:30:C1
Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
Certificate issuer: /CN=62d03888a405e61b87d1706f933b366a86fb4295
Certificate serial: 01A12A68F6D8C5475EDEE623B30C9F88AEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
Manifest number: 0A83
Signing time: Sun 11 Oct 2026 10:01:24 +0000
Manifest this update: Sun 11 Oct 2026 10:01:24 +0000
Manifest next update: Mon 12 Oct 2026 10:01:24 +0000
Files and hashes: 1: ByyzWxM12G0BPucLG6JiwdJtgEE.roa (hash: 4G2lH2XdNKPJSfTS1f9mdoy30Er7U9NNS0wrRk3c+sc=)
2: YtA4iKQF5huH0XBvkzs2aob7QpU.crl (hash: 4+bZaq6t74SY5dU7Uo0+YrymDlERqHJ1a0UGwW5oj5w=)
3: lH39RLJn2Hz8-UQkPP2o_JvX24I.roa (hash: iB4qVFkaq5F/oZHjDXHDMbbQUo5Vscic17RgZki9i5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:68:f6:d8:c5:47:5e:de:e6:23:b3:0c:9f:88:ae:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295
Validity
Not Before: Oct 11 10:01:24 2026 GMT
Not After : Oct 12 10:01:24 2026 GMT
Subject: CN=0674d8fb78016c3ae29e44e934407b6a5b3630c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:1e:b6:d6:ff:1f:85:03:2c:6e:94:a7:50:
6d:87:73:5f:63:f3:a7:8b:a2:0c:ac:bb:76:83:12:
7f:c6:aa:26:64:f7:7a:b9:18:13:3f:7e:e8:af:07:
fa:33:73:c3:9a:bc:15:67:85:43:4a:74:a2:b8:e8:
82:55:ec:a5:25:da:3c:a3:c0:dc:28:0a:c1:a1:70:
f1:f0:8a:c3:57:00:ef:38:94:99:31:a1:31:d2:21:
37:87:d0:9b:aa:f5:df:c4:dc:fc:14:98:3d:c1:a9:
af:28:14:0d:94:b5:db:c4:db:29:34:60:b1:61:e3:
ed:32:83:b1:7e:aa:6f:01:fa:f8:1d:0c:a5:09:49:
6a:36:38:10:ba:f5:51:f9:a6:de:fd:9b:7a:6d:23:
14:3d:4a:13:c6:2e:48:49:c0:b4:f3:fd:91:3a:42:
ce:3f:99:9a:09:71:f0:a9:70:98:f4:65:2a:dc:f2:
54:37:ae:c2:1d:8e:9d:90:85:4d:e2:35:f4:e0:4f:
91:8e:62:f2:49:f1:12:1e:f7:4b:73:59:cd:2e:bf:
36:fe:7a:fb:06:02:87:83:bd:43:a4:2d:b0:ac:69:
d6:45:86:e6:ca:b4:14:55:56:c7:a9:61:df:d1:85:
28:c6:74:02:a7:a3:02:ca:3c:9a:b3:0e:58:ec:51:
a2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:74:D8:FB:78:01:6C:3A:E2:9E:44:E9:34:40:7B:6A:5B:36:30:C1
X509v3 Authority Key Identifier:
keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e6:2c:c7:1a:b2:f4:88:bb:9a:27:b0:23:32:d9:55:6b:e3:
d9:6c:86:de:20:a7:58:e1:f8:28:a0:49:8a:ed:85:57:8c:68:
8b:fb:7f:16:bc:cf:e9:5d:22:8f:a4:e4:87:c6:0b:fb:24:c0:
0e:17:53:4c:12:a0:1b:48:e4:7b:28:6f:7a:3a:22:c1:b3:9c:
0b:14:77:c7:f8:88:eb:ba:ff:c1:05:8a:ef:a2:c7:b4:c6:8a:
3c:be:1e:88:40:6a:99:35:1f:9d:d2:73:fc:ec:c4:78:a5:9d:
cc:29:19:4d:18:f0:37:8e:fd:89:a0:74:53:05:7a:74:dc:f8:
71:85:48:eb:62:17:75:c1:de:83:24:72:b8:f3:c7:ef:70:5c:
b1:9e:11:5d:6b:d5:94:c6:d4:40:fc:96:79:8f:b2:a2:9f:8b:
cc:ce:ca:72:50:bc:fd:cd:0e:ab:bb:c4:50:39:b0:2f:7e:dc:
19:18:ba:f0:4d:e0:83:22:1d:6b:60:88:98:72:ed:0d:39:22:
a2:68:fd:b6:8a:48:70:98:bb:d5:93:62:89:b2:73:a3:1e:2f:
94:9c:8a:a4:f4:31:64:c4:80:bf:8a:43:69:35:d9:17:98:2f:
08:46:38:8e:47:4a:1f:bf:b2:d8:99:46:d0:51:dd:0f:13:a6:
1a:2d:ff:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:43:07 2026 by rpki-client