Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
File: YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft (raw, json)
Hash identifier: aiF5kGc/8i5uIHk58bAHzT2z+TelVhIY63yYE5UK0hg=
Subject key identifier: B3:8C:48:19:90:09:4E:99:D9:C2:D9:DF:9C:1B:79:CD:8D:DA:CE:5A
Authority key identifier: 60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
Certificate issuer: /CN=602be661e57c14659a608e9f6be605d6250047fc
Certificate serial: 01A121D38FFEACF7D1A4CB73CC29E8BEC404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
Manifest number: 1533
Signing time: Fri 09 Oct 2026 18:01:15 +0000
Manifest this update: Fri 09 Oct 2026 18:01:15 +0000
Manifest next update: Sat 10 Oct 2026 18:01:15 +0000
Files and hashes: 1: SInBdKPTOXk0wp91e_uLGwkZlPc.roa (hash: mCWjzW4jA5/GkCROqCsHaTMu9Y+gjKYJmIB2cmxywcA=)
2: WrTCSuQUvxPpAUF0e5vDgZhjo64.roa (hash: +oAgf/l41Uj9PIOaXoHSTwcfDAsCiAHjtNGVMj4O9AY=)
3: YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl (hash: 2hwb0P0E0Hs+xgbxlUoqTSkE4yiwN0+lqhNmSFGAe+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:d3:8f:fe:ac:f7:d1:a4:cb:73:cc:29:e8:be:c4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602be661e57c14659a608e9f6be605d6250047fc
Validity
Not Before: Oct 9 18:01:15 2026 GMT
Not After : Oct 10 18:01:15 2026 GMT
Subject: CN=b38c481990094e99d9c2d9df9c1b79cd8ddace5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:5f:eb:50:f6:69:79:d8:64:50:d3:be:cb:
de:79:62:29:85:ba:e8:35:24:d4:21:92:1a:28:69:
b7:df:6e:33:91:bf:a0:40:4d:d8:c6:a3:7a:8b:a2:
52:40:7e:21:63:57:d4:9a:a4:07:11:03:00:69:de:
85:24:fa:97:f5:a8:f6:8b:43:25:49:cf:25:b5:41:
b8:07:a8:49:e9:41:fa:8a:14:3a:65:82:5a:08:6f:
36:fd:d9:76:5a:34:2d:9f:bc:53:68:40:eb:2b:3b:
f9:f0:57:4e:42:78:00:3b:7a:f4:01:07:28:f0:5f:
f9:48:fe:71:08:c3:49:b5:22:b4:ed:68:0b:dc:2b:
ff:7c:f4:00:05:60:56:4b:09:61:82:49:99:39:44:
7b:19:c5:5d:33:fc:4a:6b:d7:65:93:40:48:75:84:
0e:89:bf:b9:4d:99:15:03:1b:d9:9e:72:88:1f:8d:
43:a4:0b:a5:38:a2:d2:9c:b3:7d:6d:18:e8:f5:b7:
3e:1b:02:b0:30:de:78:03:29:04:48:98:5f:80:01:
09:11:0f:e4:27:54:3d:68:67:d5:89:a0:d3:ce:88:
fd:be:cf:61:03:a8:77:cf:a6:f3:4c:fb:3e:14:6f:
18:a4:8e:c2:40:1d:5b:43:20:87:bc:0d:f5:c8:4e:
7d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8C:48:19:90:09:4E:99:D9:C2:D9:DF:9C:1B:79:CD:8D:DA:CE:5A
X509v3 Authority Key Identifier:
keyid:60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:65:a7:86:e9:3b:bf:66:5f:7d:7a:79:90:8b:36:f3:64:eb:
12:7e:da:e0:df:83:7c:4c:b2:f8:8b:c0:1d:35:1e:44:d4:95:
39:91:79:d6:ce:fc:90:87:02:45:8a:9a:a7:7d:57:f9:f0:3b:
a7:99:ba:c2:b9:1f:bb:5a:a2:d3:70:3c:35:bc:eb:8a:cd:ec:
ba:26:ab:d5:5e:de:01:72:dd:61:2c:62:fe:8c:35:c4:e8:25:
b2:dc:04:aa:26:51:06:44:95:89:5f:8c:9b:ff:2d:97:bd:bd:
9b:67:61:f5:4b:e0:90:ef:77:46:7c:b5:52:f6:17:5f:a9:bf:
b6:b1:45:22:7c:61:9c:81:2c:59:8a:ea:aa:f4:30:6d:1f:f3:
2c:25:3d:10:7d:d5:f6:e7:8f:63:98:4a:f8:e9:aa:1c:44:79:
ca:e8:b5:3b:43:09:ff:ae:ca:55:07:26:ae:0f:cd:00:43:57:
dc:d0:20:9b:c8:bc:7d:c7:43:06:44:10:88:f2:18:88:7d:8d:
8b:9d:2a:85:fa:8c:d0:b5:29:30:2b:31:96:9c:81:d2:eb:f6:
4b:ff:76:f6:06:e6:dd:39:6c:e6:be:b3:b7:e4:0f:32:6e:4a:
c9:1c:a4:f5:50:00:3b:06:c3:c6:f5:6e:e4:ba:25:dc:97:06:
79:ae:f3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:57:00 2026 by rpki-client