Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
File: YE1FsSrOCsIjA-08d5S4MGpqtbA.mft (raw, json)
Hash identifier: juJn88u9nC9N7Gd4XQMZD3dgP81EP34soXQsIfanzvc=
Subject key identifier: 8B:47:0B:0B:C8:B6:A3:83:4E:F2:C2:33:06:5F:92:78:A2:0E:94:C6
Authority key identifier: 60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
Certificate issuer: /CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Certificate serial: 01A12C20195C1B08ED8F52F1EB16ACFC33EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
Manifest number: 1A2B
Signing time: Sun 11 Oct 2026 18:01:03 +0000
Manifest this update: Sun 11 Oct 2026 18:01:03 +0000
Manifest next update: Mon 12 Oct 2026 18:01:03 +0000
Files and hashes: 1: 6yggvTE1BpMD_6DUp59i_E9q_ec.roa (hash: j6H31l8Cy0P+NhoECNSn3tX4DXbCQPFUlGEVGEcQnDk=)
2: YE1FsSrOCsIjA-08d5S4MGpqtbA.crl (hash: pXbv6iiCWd7ThNGWCRIPf261oyOp4OqaFe3/H+Oc3AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:20:19:5c:1b:08:ed:8f:52:f1:eb:16:ac:fc:33:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Validity
Not Before: Oct 11 18:01:03 2026 GMT
Not After : Oct 12 18:01:03 2026 GMT
Subject: CN=8b470b0bc8b6a3834ef2c233065f9278a20e94c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:ae:05:6c:d1:5d:3c:d3:07:d2:22:a1:aa:
f8:2e:39:f7:c8:ba:5e:32:76:c7:dc:70:a7:af:45:
72:82:e1:8f:76:80:72:55:11:b0:5c:78:e0:90:4a:
75:31:1e:7c:23:a9:64:a0:89:02:21:0f:a6:7c:e2:
e2:29:14:b6:58:b4:e7:29:45:c5:a0:97:84:9a:14:
61:90:a9:f0:99:f6:0f:57:04:78:4f:11:44:a0:1d:
04:54:95:31:36:b8:05:e4:4a:84:1c:84:24:e2:75:
e7:54:ab:60:a6:32:da:70:f2:2a:0a:6c:b5:09:58:
86:98:d2:bc:a4:e1:bc:6d:a2:3e:52:e3:52:82:14:
5b:a6:7a:3d:1b:88:0f:0c:17:bd:93:39:37:84:0b:
ed:5a:ab:75:36:06:9b:25:58:64:2e:35:c2:26:2d:
6e:fa:42:eb:ff:51:7d:9f:9a:d9:88:9c:4b:f8:4c:
df:38:5f:af:9f:cc:26:d9:3a:86:34:a9:52:0f:d9:
92:8a:c5:14:61:27:fc:4e:c7:6b:e9:e0:35:6c:35:
cd:ee:b9:b3:ac:29:2e:e3:ae:a6:09:ae:7a:90:73:
96:c4:6d:f2:60:ae:42:58:47:bf:77:cd:53:cc:f2:
38:75:01:78:0e:a3:69:8d:da:c4:83:cc:8d:ad:dc:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:47:0B:0B:C8:B6:A3:83:4E:F2:C2:33:06:5F:92:78:A2:0E:94:C6
X509v3 Authority Key Identifier:
keyid:60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1b:14:1b:0d:e9:ff:9b:54:55:71:1f:f9:dc:7d:d9:95:f8:
1b:2a:3b:24:ae:ea:3a:57:a5:75:54:32:5a:d5:e0:ed:69:9d:
a3:12:ba:44:73:c7:55:32:fc:a2:b9:68:d4:36:9c:0c:e4:69:
e2:d8:ad:64:e1:b8:87:19:bd:ec:c7:c5:5c:f1:17:3b:12:42:
c3:1a:05:eb:0d:e5:c3:45:62:a3:4f:6b:1f:9a:a0:ff:a3:72:
95:ca:e8:d3:42:14:a2:cc:32:4f:cf:46:64:6d:bc:5b:3f:b5:
be:0e:b1:d7:7a:4f:3e:bb:70:29:eb:e1:50:51:6c:05:73:e3:
df:ef:f3:73:22:52:5b:7c:67:b0:9b:e2:c9:9a:a4:fa:fb:eb:
6c:80:9e:c2:04:fd:3f:89:97:8b:94:3c:51:0d:7a:97:b5:14:
25:0f:b0:2f:57:98:92:1c:fc:49:53:1e:23:89:6d:c3:6b:c4:
31:c4:fb:20:9d:69:16:a2:3a:5a:cb:f6:09:3d:d9:ce:e5:5a:
2a:53:d2:78:2a:5f:e7:d3:d6:e2:6c:9e:34:cc:14:0d:1d:2d:
bf:c1:b5:b5:65:3f:84:9c:0c:08:ae:9f:49:bb:67:bc:81:26:
23:dd:d8:99:48:c5:d4:eb:54:bb:82:84:7c:2f:df:ca:06:bc:
95:76:9e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:57:46 2026 by rpki-client