Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
File: YYcWngMONyXW60eKMn5r3za-jS8.mft (raw, json)
Hash identifier: 6ItRWDa8iBRNZK7Lam8q9apNiq0OypG9QjPDVMGt/R0=
Subject key identifier: E3:E8:55:28:8A:E2:00:8E:13:B9:3C:2F:47:12:54:5C:BC:FB:F1:AA
Authority key identifier: 61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
Certificate issuer: /CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Certificate serial: 01A1DE396E005BB42B78206A3BF2E2CF171F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
Manifest number: 04ED
Signing time: Sun 15 Nov 2026 08:01:07 +0000
Manifest this update: Sun 15 Nov 2026 08:01:07 +0000
Manifest next update: Mon 16 Nov 2026 08:01:07 +0000
Files and hashes: 1: Vx87YxHA-7meaIkhnN1x3tZeAC4.asa (hash: zZpxTKgALrpqRT44gkUfvltbIqTMiL/2H9KqVeHZxmM=)
2: YYcWngMONyXW60eKMn5r3za-jS8.crl (hash: zDAFvIk+pi7WA16Elt3bKHqQjghaxtHRgfoBNtNq3to=)
3: dlAKs2OGLWJirE63ZpdfiOJ1IDw.roa (hash: 1fH4y0wj0PpFc5LsMAZ3oXLqRp58JujDDG0+JToDmTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:6e:00:5b:b4:2b:78:20:6a:3b:f2:e2:cf:17:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Validity
Not Before: Nov 15 08:01:07 2026 GMT
Not After : Nov 16 08:01:07 2026 GMT
Subject: CN=e3e855288ae2008e13b93c2f4712545cbcfbf1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:07:c1:f2:bf:58:73:6a:da:2f:27:18:4a:
cb:d4:97:02:79:b7:b6:b2:d1:27:4e:2f:7b:4c:54:
05:25:74:04:4d:b3:fa:e8:66:1c:e9:f7:d5:37:9f:
fe:e5:b1:66:16:a2:8b:a7:2d:10:fe:17:bb:f3:7f:
08:0d:b3:d4:ed:0c:00:27:ce:db:ab:a4:88:61:ff:
f3:e5:9c:79:d3:c5:91:1f:fb:34:95:16:26:10:a4:
0f:19:90:cc:17:77:8f:a3:99:f7:79:fa:d9:3e:71:
64:4a:70:7e:14:61:d4:b9:a9:5b:bc:1f:b4:1d:d2:
5a:30:14:60:d0:62:61:3b:d0:d0:3b:83:3d:72:e6:
47:b9:f5:87:3b:55:7b:05:4e:bc:ad:95:7e:66:4b:
f3:1f:b8:3b:d7:d2:59:df:e4:ff:34:12:4d:6d:78:
d9:9c:e1:87:2e:62:25:d2:7f:f8:03:dd:00:90:30:
34:aa:69:53:91:d6:61:65:a5:65:42:bb:10:07:a5:
0b:ce:c7:29:53:bb:19:82:d0:a4:19:70:17:63:d4:
96:07:e1:2f:23:97:0d:50:9c:9f:3d:65:4c:ad:d6:
e4:e3:18:32:cf:d1:97:b5:89:ac:5b:bb:50:51:e3:
82:02:f3:8a:a0:b3:53:e4:31:26:ff:a2:fe:4b:d1:
37:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E8:55:28:8A:E2:00:8E:13:B9:3C:2F:47:12:54:5C:BC:FB:F1:AA
X509v3 Authority Key Identifier:
keyid:61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:fc:81:52:9b:6c:be:4e:33:c6:9f:9f:c7:04:90:ff:e5:18:
c5:32:e8:72:0f:91:ce:0b:af:b5:19:5d:d0:11:d5:2a:de:e0:
66:bd:80:00:95:23:8f:05:cb:54:7d:df:a9:4d:75:e0:55:5b:
49:35:1a:de:94:f8:5f:ed:e2:1c:9b:df:34:a7:b0:90:ec:db:
88:9c:70:32:fc:83:6d:17:b7:f3:6a:cd:a4:3e:9b:2e:52:91:
7f:b4:b2:29:f0:34:97:91:57:e4:b8:97:e3:41:ae:ba:c9:5d:
53:06:db:5a:fb:4f:46:ff:e3:c8:4e:a9:17:3e:8b:4e:2b:2e:
b5:1d:4d:69:8d:e3:72:c6:0f:7d:e9:16:34:e2:4b:4e:60:57:
aa:95:d6:09:e7:94:41:6b:e2:e0:1b:86:5e:bc:7e:ed:39:17:
d1:2b:ee:2e:e7:97:ad:10:21:cf:14:6b:08:d5:2d:ea:d0:90:
0e:d3:09:2f:c3:64:94:39:be:88:30:83:77:9d:57:d9:50:d3:
a4:eb:0e:2a:fe:e9:de:29:4a:62:bc:41:06:9f:1a:af:12:05:
20:03:f8:b8:2e:22:93:fb:b4:55:9d:2b:a7:7d:9f:e9:35:46:
2c:4f:f8:24:19:fc:18:53:2c:4d:02:75:d6:c9:9f:7b:87:88:
fc:6a:73:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:46:51 2026 by rpki-client