Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: QaQXwRpTbWRtYp+2apkxllc8UpYWz9Xj0f4f1DGRCKY=
Subject key identifier: 41:8C:B7:C2:44:FC:24:FC:35:02:80:E5:E2:4C:60:B1:16:F2:D5:F1
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 01A12CFB7358E3E85BC796BB49A474A6A9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 1937
Signing time: Sun 11 Oct 2026 22:00:38 +0000
Manifest this update: Sun 11 Oct 2026 22:00:38 +0000
Manifest next update: Mon 12 Oct 2026 22:00:38 +0000
Files and hashes: 1: 9Nl9UE6iQ8BzYdxl7G-kytsnGM0.roa (hash: DwCSayZkRcTecU+QYNWzkQO84K94CzpgnweIdh3T7XA=)
2: ENI7Z5yBr-3vmabr7x8Oqv2rU3k.roa (hash: SYbuwV9RF98H2wnwET3rqVG/OV1l8TgwPl32TdMZOp4=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: X1jVHCCxR0gPmsIGfmCH3K4/tfyKvj+1/J2ErSFGjsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:fb:73:58:e3:e8:5b:c7:96:bb:49:a4:74:a6:a9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Oct 11 22:00:38 2026 GMT
Not After : Oct 12 22:00:38 2026 GMT
Subject: CN=418cb7c244fc24fc350280e5e24c60b116f2d5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:ff:27:af:22:83:65:98:9c:c3:5e:39:23:
9e:ff:37:45:bb:48:7c:a9:e3:de:fe:74:a8:08:18:
e1:36:cd:e8:89:9d:0d:9f:9e:07:c0:f1:95:b5:77:
e3:40:56:2d:1c:3e:df:8e:0e:ec:73:f1:b1:0d:3c:
e5:65:ff:65:1e:95:f5:38:3d:4e:3a:9d:6d:1e:70:
9e:62:1b:e5:5a:3c:7e:90:26:79:25:54:eb:eb:82:
d9:8b:71:bf:0c:40:1c:0a:ff:e4:2c:db:bc:3a:4b:
ff:ed:48:4d:d9:23:c4:95:85:b7:81:53:08:68:f5:
30:ba:52:f6:00:0c:ba:7c:19:59:20:62:43:7b:4e:
f7:45:a7:2c:cc:b3:af:95:d0:e3:d2:42:a9:14:02:
34:5b:33:30:17:17:1d:f3:66:88:bf:48:d9:62:a6:
de:26:db:cd:a2:b6:a9:7a:29:1a:f2:9c:40:ef:ba:
eb:c7:89:94:69:60:a5:ad:94:cc:80:77:8f:cc:ed:
3d:86:e1:e2:48:72:21:1f:2f:f9:5e:5f:b5:cc:79:
82:68:67:53:54:f7:18:00:44:0d:7d:45:f1:be:0b:
ba:ac:ba:dc:ae:45:1f:76:85:24:da:de:60:7b:45:
27:3f:4c:f9:5c:84:29:84:28:b4:85:7e:76:87:e6:
28:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8C:B7:C2:44:FC:24:FC:35:02:80:E5:E2:4C:60:B1:16:F2:D5:F1
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f2:3d:97:34:fe:7b:52:3a:fb:a8:7c:fe:18:b9:60:17:87:
db:fc:14:53:d8:14:c7:6e:58:c8:90:0f:84:cb:d0:c4:26:b5:
c8:ee:b1:d4:e6:24:ff:98:43:f2:27:68:1c:a8:1b:d9:9f:5b:
76:2f:97:3b:6a:1b:eb:af:7a:3e:40:f2:af:4b:8b:bd:8e:0c:
1b:56:22:c6:29:84:c6:4b:98:57:ce:b5:ea:3a:45:de:39:30:
20:f8:50:34:ba:2c:e4:54:b9:a2:58:3d:7d:98:d5:b3:7e:8f:
64:cd:34:81:89:af:38:7f:31:3e:7e:10:b2:0d:70:0e:d1:ba:
43:87:71:14:3b:fe:58:a8:d3:88:18:ef:e2:10:b5:6b:6b:8c:
3b:f9:b7:f1:41:26:b0:6a:d7:f8:ba:f2:62:3f:3a:cf:ea:68:
d2:44:8f:5b:94:51:c3:65:17:e4:ed:85:b9:a2:97:f4:22:7e:
4a:7b:c6:98:5c:23:a1:f9:7c:e1:5d:23:e6:96:10:2c:9e:bd:
04:2c:33:6d:92:a3:78:f7:f5:dd:bd:b9:1a:4c:3a:f5:18:ba:
ba:07:74:08:b4:85:91:57:65:24:88:aa:1a:e2:36:fb:ba:d2:
12:55:c6:07:c8:48:75:fa:23:09:06:15:e6:f2:55:4d:af:33:
88:9f:fc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:59:49 2026 by rpki-client