Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
File: YWFHDTm-S6LdXfj6R7FjlieOZwo.mft (raw, json)
Hash identifier: MHSf3zFfUbD/9qLjykmwyG8Zw4nkkGG6bABdz8hFwDE=
Subject key identifier: 3F:59:B3:29:6E:89:95:E9:3D:2B:34:A8:7D:A8:96:68:E6:EF:B7:EB
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 01A1DF832A49E69A7C6C29403E56F9FEB5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
Manifest number: 16B3
Signing time: Sun 15 Nov 2026 14:01:17 +0000
Manifest this update: Sun 15 Nov 2026 14:01:17 +0000
Manifest next update: Mon 16 Nov 2026 14:01:17 +0000
Files and hashes: 1: A2edUifbSShzdJ1Gis-SqBKDNH4.roa (hash: Vy37s5YBxFgEPmxrlCq+GM34iA4Ip0Oc6gKZuBhegNc=)
2: BPuWk6CfIovuR0hN4ab9_Vg8fpM.roa (hash: Io/zg3oPjnrBQRK8TUjjHMBbPc/oa9KH3Wg0gDqsd6M=)
3: CMj-58s7HjFJfPYnqyY_H8iMras.roa (hash: l/VgtwLP67EeRyfmCVyIdNqgvDzJvQY/H0EIMqQ+RF0=)
4: LYaVyURA1Hqer0FhBdoqEAlltug.roa (hash: NWGVsZzZidWUl0MNChqOvov8kyqJB0zTJQ1HSXjGZw4=)
5: MFBUVUGoLTFb6mMUZK00McW_7z0.roa (hash: F53ezXG/M5tdcqiYCNPbO7yVUwgcKU5OMRV7nr04e3o=)
6: YWFHDTm-S6LdXfj6R7FjlieOZwo.crl (hash: Dp9hrBqWBgtmSYBs1/saHBekvkE42klIGRykH1sZx8c=)
7: kjQiljeUwEx-0O3qxw80JEcNHTk.roa (hash: Nj75u7cki0A+yVZeLl5QIeG1w+agzNtRDNjOCJHZFpc=)
8: m4DpurF7pXpEMEv3x379sHsIzI0.roa (hash: AQ+Y/OhWDwIEf3fur9MU0/7BD96QO4hZo7G0csSPbMo=)
9: qaLHn37xtjw3qy4avBKJZx30pG8.roa (hash: 37z1vS8oU1I2E/gSNbcyl0yQyKdvAVXffCULUq/vHIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:2a:49:e6:9a:7c:6c:29:40:3e:56:f9:fe:b5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: Nov 15 14:01:17 2026 GMT
Not After : Nov 16 14:01:17 2026 GMT
Subject: CN=3f59b3296e8995e93d2b34a87da89668e6efb7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:51:d7:b8:9d:9f:5a:86:2f:24:b7:1a:d9:4d:
dd:66:68:58:77:72:3c:86:85:87:31:c2:cf:a8:e0:
da:4c:7e:9c:21:a8:7d:6f:74:58:dd:1a:40:9f:e3:
0c:77:ee:83:39:07:96:76:4f:eb:c5:0c:ca:57:62:
4c:66:4e:aa:f3:71:d5:26:85:a6:df:73:2a:f2:f2:
31:d8:72:b5:61:63:28:78:ac:29:27:f1:e8:43:1d:
1d:95:65:98:83:53:ea:dd:8a:7d:81:cd:64:ef:31:
1e:b4:60:b1:5e:66:54:a6:1d:ef:eb:38:fe:fc:05:
3a:37:ac:85:cc:51:1f:52:74:a2:e9:18:b3:1b:d5:
b4:0e:c0:0f:c8:47:45:6f:33:77:15:87:21:e5:bc:
1f:90:1b:0c:7e:fd:c0:8d:8f:bc:fe:5f:6f:6f:63:
62:c0:35:d9:d2:0b:8d:24:fb:b3:06:63:10:7e:d6:
61:31:b0:88:83:57:9a:08:a8:57:1a:7b:b8:f6:c9:
69:33:1b:4a:36:83:1f:ff:6e:51:2c:b9:74:3f:ed:
18:4f:d0:5e:76:22:25:f9:57:92:93:1a:62:35:29:
26:40:13:68:4b:d6:79:c4:ff:96:ce:b2:87:a6:50:
59:b5:d8:5e:b1:ea:7a:a0:6a:16:b5:32:4f:b1:07:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:59:B3:29:6E:89:95:E9:3D:2B:34:A8:7D:A8:96:68:E6:EF:B7:EB
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d5:46:5d:26:57:d4:ae:da:e3:e0:c4:70:f7:b0:c9:6b:44:
8d:1e:d4:58:46:80:de:d8:b3:b3:27:ef:52:fd:c5:16:36:d8:
74:3b:e6:79:6d:db:68:d5:e3:4b:95:e0:ad:48:a8:9e:a8:90:
63:63:20:75:da:75:78:d8:ef:bb:b1:59:6f:98:87:52:65:f4:
c6:1f:73:d2:a3:85:0a:10:34:e6:63:c6:eb:17:d2:89:13:cb:
fc:02:4d:5a:bd:f9:f0:bc:5a:a5:72:49:76:5e:ce:57:14:22:
ed:18:48:2b:2e:42:1c:47:17:32:7c:fe:ce:62:cb:3d:db:27:
29:48:59:c9:86:78:08:fe:b3:50:65:6f:62:4b:a1:94:2a:3b:
c4:0d:8c:91:46:d0:ec:3d:ca:4c:90:59:30:35:bf:18:54:f5:
ba:26:0c:90:81:b1:e1:2d:9b:2d:24:6e:2b:3d:df:ec:c2:d1:
5a:88:6e:6f:c7:ea:92:ce:09:91:9c:e7:5c:c8:93:c8:f6:d1:
bc:3b:f7:6c:ac:c6:20:c6:14:9d:26:46:29:15:5b:26:eb:bc:
c8:38:ba:ce:9d:b4:2f:b9:f1:82:55:12:52:2d:e0:00:3a:f5:
5f:60:1e:44:22:d5:e2:99:23:1d:bb:14:b3:1e:a2:b0:80:f2:
8d:84:06:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:59:53 2026 by rpki-client