Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier: 7LUtg79Ct/r/U69ew6/Byleajg5Lxpstgmrf78E1k30=
Subject key identifier: 84:A8:2A:D7:1E:6F:D7:54:01:D9:5B:85:C0:13:FE:0C:A5:A9:BF:6A
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial: 01A13A1272703282A58E01C259CD15F164B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number: 15C2
Signing time: Wed 14 Oct 2026 11:00:49 +0000
Manifest this update: Wed 14 Oct 2026 11:00:49 +0000
Manifest next update: Thu 15 Oct 2026 11:00:49 +0000
Files and hashes: 1: _V1LSsZtamsE4WXP60Yw8QNvv70.roa (hash: 86294W5FbZlicyPxaf1Bh5Vh3kJ1iu3Y1KxTGDfYWAk=)
2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: 1FVgcC8zpxQ9HvspLNfZLh+jRa0sxuLWY0x5vf28no4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:12:72:70:32:82:a5:8e:01:c2:59:cd:15:f1:64:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Validity
Not Before: Oct 14 11:00:49 2026 GMT
Not After : Oct 15 11:00:49 2026 GMT
Subject: CN=84a82ad71e6fd75401d95b85c013fe0ca5a9bf6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:c6:54:0d:b7:5b:ed:93:94:06:99:ec:95:
fa:83:79:e4:1a:df:f6:c5:6b:1e:ad:a1:3f:cf:ce:
63:59:96:02:eb:14:6e:73:eb:ff:13:86:78:73:34:
bd:d6:9e:b0:37:2f:46:94:24:d9:60:e2:29:12:ae:
a9:07:fa:cc:c6:38:d6:b1:05:60:55:bd:5b:57:69:
db:8e:74:8f:98:16:da:ec:cf:9d:e7:0c:c0:41:b9:
0e:76:96:14:97:e9:c8:67:6e:25:e9:20:2d:58:3c:
12:a2:30:1f:41:00:7e:1e:5f:13:e1:42:81:33:f8:
ba:32:91:41:47:42:ee:01:4e:c2:6c:a0:48:2a:f3:
ee:b8:4d:da:60:f1:42:83:7c:2f:11:cd:12:67:82:
57:1e:4f:be:df:98:4e:e7:93:25:3e:e0:7e:01:75:
44:63:74:19:3a:e4:68:05:1e:08:a6:16:aa:5d:ae:
82:56:38:6a:71:cd:c7:77:91:53:d0:44:b0:a3:20:
04:a6:f4:2e:4a:c1:c5:05:31:a9:69:0e:c2:a2:95:
be:f1:d5:07:57:8b:ca:95:71:09:d5:c0:59:12:e8:
32:3a:90:c6:62:3a:f5:8a:31:00:ac:00:e1:e4:02:
a9:6d:87:c0:2e:83:59:c8:de:fa:cf:ab:5b:13:ae:
50:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A8:2A:D7:1E:6F:D7:54:01:D9:5B:85:C0:13:FE:0C:A5:A9:BF:6A
X509v3 Authority Key Identifier:
keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:53:ae:52:a9:bb:12:c5:f6:0f:d2:6c:74:24:2c:e9:46:6e:
07:da:4b:67:e0:1f:1c:40:0a:a6:c1:fe:c5:b2:54:5f:d8:38:
61:d5:46:f9:2a:6c:b6:fb:29:d0:90:33:ac:10:b2:33:8b:f9:
cf:de:54:65:f8:10:29:ba:6c:b0:14:33:e0:dc:30:20:d1:0f:
24:e1:34:3a:56:b0:c4:9c:41:5e:5a:9b:f3:c8:f2:e3:8f:c9:
bf:89:d1:0b:fb:66:17:fd:48:88:49:5d:cc:e2:7a:fb:cd:34:
b9:22:30:d0:36:69:37:b1:01:53:25:ee:f9:9e:0c:f6:06:42:
8f:17:9f:3b:3b:d5:a1:10:4c:ef:9b:55:e8:a7:9e:79:6c:dd:
d2:a3:2a:28:37:d5:d7:65:83:7a:d8:6a:85:17:be:a3:5a:a7:
b8:b5:db:eb:5d:e9:6f:cd:99:06:a8:39:f4:8e:6e:55:cb:9d:
43:85:2d:ee:78:93:71:35:a2:82:52:75:8b:8f:b9:37:c9:26:
fd:9e:63:73:cd:72:7d:71:98:94:b8:ec:a2:d3:80:bd:0f:c6:
47:7b:f6:9c:f2:6b:b9:50:2e:89:fb:65:f3:eb:f9:c7:f1:ef:
15:5e:55:c6:7e:29:d2:3a:82:39:de:30:6b:6a:e9:b8:37:6b:
03:c1:8b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:23:58 2026 by rpki-client