Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
File: YTXB97cUDIcufz_zRitO3GMddnQ.mft (raw, json)
Hash identifier: G9UvWLZqbmd8ByC38AoH+pBNhZJu4vUwjUTFws//nvg=
Subject key identifier: 9C:DF:D5:39:AB:6B:91:4D:D1:13:69:5A:AB:8B:3B:64:C9:30:F8:D8
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 01A1DE39A7CC724F80E07424426123F2DEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
Manifest number: 16CB
Signing time: Sun 15 Nov 2026 08:01:22 +0000
Manifest this update: Sun 15 Nov 2026 08:01:22 +0000
Manifest next update: Mon 16 Nov 2026 08:01:22 +0000
Files and hashes: 1: Ph_fyZXXEA_KZkq3dxSRm46f-KA.roa (hash: FQiPrpYnq25Fwdf/7qCgVXoo0TWP2gIi2ykHBjIvx7g=)
2: YTXB97cUDIcufz_zRitO3GMddnQ.crl (hash: a1mCWJfRoWb6ig1THHCAgdoogiEGpnuZXScBu6kKtXg=)
3: huBq3kw5bYGAXM6SwBHhdtrpnMg.roa (hash: 28JrvoF8mrFJs/+jg0TiRdcnBJBHzsFBj6k1ocqL4ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:a7:cc:72:4f:80:e0:74:24:42:61:23:f2:de:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: Nov 15 08:01:22 2026 GMT
Not After : Nov 16 08:01:22 2026 GMT
Subject: CN=9cdfd539ab6b914dd113695aab8b3b64c930f8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:6b:b9:69:a0:e1:67:bf:c4:0b:30:fa:7d:
8c:c3:da:3a:cc:0d:26:ff:3c:34:d3:2d:73:8d:92:
ce:72:48:7e:d1:cb:00:96:c8:1e:ed:e0:f0:4b:2d:
53:f6:ce:01:7c:2d:c8:88:88:ce:e3:dd:8c:10:60:
43:09:cc:11:84:88:25:b9:6d:d8:53:0c:f5:fa:74:
11:5b:9d:d4:f6:49:9d:22:cd:b8:f4:dd:4f:88:2e:
c8:d3:b0:d0:82:9c:fa:96:0f:a5:70:80:a1:d2:10:
d9:84:f9:2b:55:0c:9e:d7:1c:bc:8e:65:e1:7e:56:
8f:cc:27:c3:1e:76:8e:84:ec:dc:c5:ba:82:6c:f2:
32:5b:5a:ba:3b:dc:02:cf:41:1c:44:cd:31:7b:13:
f6:01:58:e1:9e:31:1a:28:c8:81:1a:f1:23:93:f4:
eb:7e:59:df:33:1c:1c:b2:1a:bb:f2:f6:f2:e9:f0:
52:c2:c8:1a:b6:9d:ea:15:83:30:3f:04:28:8a:7e:
11:d3:f2:5d:07:fa:e1:0b:0d:6c:4e:92:49:81:8a:
f7:ad:83:bd:32:b9:f1:eb:55:2d:80:b7:f0:8f:e2:
0b:1b:c0:ef:bb:38:72:f4:bd:6c:30:12:54:89:4c:
95:5e:a7:53:26:6a:fe:5e:d2:78:d5:10:0c:c5:ea:
58:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DF:D5:39:AB:6B:91:4D:D1:13:69:5A:AB:8B:3B:64:C9:30:F8:D8
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:2e:e7:11:a9:da:f4:e7:e1:2a:d8:92:a1:96:fd:fd:96:a7:
28:57:82:5a:e5:ce:5b:88:93:e5:5d:b0:f8:86:0a:a9:aa:9e:
90:97:05:e8:bb:bd:80:7c:c1:3b:82:64:a0:3b:41:be:ad:c0:
f3:df:38:69:29:43:b6:ba:56:f0:53:46:a1:84:f1:ee:2b:d2:
bf:1b:4d:a6:b2:03:3f:58:46:34:b4:b9:44:fe:11:da:5d:72:
c7:5c:c3:b4:2e:8a:14:c3:eb:ea:6f:41:07:54:40:37:4d:cf:
6c:11:e3:6e:cc:4e:e2:ad:71:60:8e:19:27:65:77:e8:40:94:
4b:bd:ef:a2:53:20:cf:71:07:c6:06:80:b5:de:9f:6d:ba:8d:
a3:35:d1:7f:cb:8e:ed:b3:eb:b6:e1:d5:ac:d9:c5:eb:1b:f4:
95:66:6e:16:70:eb:5d:30:4c:5f:93:a4:6b:1a:0b:a3:62:98:
84:16:0e:75:66:28:1b:05:be:7e:ff:30:e5:ba:93:bf:80:cc:
dc:a7:da:b2:32:95:7f:f2:ac:a5:67:dc:8f:ba:60:7e:a4:50:
7b:7d:18:e1:0b:23:84:a6:c8:b6:41:38:90:4b:44:23:e4:4e:
87:6c:06:43:a0:57:b9:e1:9b:e0:14:e4:36:38:dc:fc:bf:17:
64:64:05:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:07:23 2026 by rpki-client