
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier: VGZDWXHrg9ndTFRADJJ0phmuTSMvqQO1p7sU78j/fFQ=
Subject key identifier: B1:E1:38:08:17:44:A6:A3:68:6A:46:19:41:84:FE:51:A7:6B:96:A2
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial: 01A1DD5DEDA91C47BE8254EF15CA4C74A9BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number: 122C
Signing time: Sun 15 Nov 2026 04:01:22 +0000
Manifest this update: Sun 15 Nov 2026 04:01:22 +0000
Manifest next update: Mon 16 Nov 2026 04:01:22 +0000
Files and hashes: 1: WZPWcS6HaU2HzVdr7DRxZ-pjOJE.roa (hash: F58q4gWz10PJi3pePWbZTjvTAbHmgaZfqkLlGVghmM0=)
2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: oP0h7picrLDlPqZ79EwcGI37/H3x5TAVy6CBXATCabs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5d:ed:a9:1c:47:be:82:54:ef:15:ca:4c:74:a9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
Validity
Not Before: Nov 15 04:01:22 2026 GMT
Not After : Nov 16 04:01:22 2026 GMT
Subject: CN=b1e138081744a6a3686a46194184fe51a76b96a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:03:c7:54:2c:26:20:28:7d:98:7f:9e:15:
31:de:a7:60:3f:b9:d3:e8:77:ac:5e:06:01:11:d0:
98:d3:21:31:e4:ad:44:a4:4f:04:c6:de:a9:bc:80:
19:32:2d:c7:aa:44:5c:59:ab:23:be:f1:80:a4:ef:
e2:e5:93:f8:fa:84:0b:96:2c:54:aa:52:cc:6d:9d:
0a:28:8c:e8:2e:d7:14:53:e0:92:23:10:07:d6:2a:
ab:aa:5c:87:03:df:d3:9e:af:e4:04:90:27:5a:5f:
fa:a9:a8:6d:d3:ed:36:ef:ec:20:44:cd:73:eb:1e:
d3:a3:46:dd:29:51:00:8c:55:1d:e7:5c:e8:46:b3:
09:02:32:6b:42:a0:a2:77:3e:c6:94:6f:eb:5a:e7:
88:60:f4:eb:80:5f:dc:29:b9:ec:e8:a6:fb:4e:a3:
74:18:4e:c9:03:e8:41:48:76:e0:fa:76:5f:9a:cb:
23:b2:86:60:72:6c:81:45:d7:b7:0a:77:84:6f:11:
f2:8b:fc:1d:bf:e3:bc:7a:dc:17:3b:bc:62:ae:bf:
af:91:69:8a:fb:fc:15:3c:f7:36:70:82:a6:e4:88:
10:62:c9:40:2d:e8:aa:5d:12:34:87:02:e1:5d:90:
39:6d:f5:3e:b6:bc:b1:da:cd:83:ef:ff:cd:d6:9e:
de:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E1:38:08:17:44:A6:A3:68:6A:46:19:41:84:FE:51:A7:6B:96:A2
X509v3 Authority Key Identifier:
keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:01:96:11:a8:5e:19:eb:9a:ed:af:03:d0:7a:ec:31:a2:f2:
66:14:83:42:94:77:51:39:72:ee:b8:ac:2f:11:58:88:0e:03:
3d:67:b7:5d:67:96:80:0e:29:4e:9b:11:0e:66:3c:7b:cb:93:
af:cb:d0:75:26:a2:8c:3b:f4:1d:c1:4c:8b:39:37:c4:37:8c:
80:22:57:23:44:9d:12:03:24:ba:d4:8e:88:64:57:3e:a0:e8:
de:76:69:df:f2:46:97:6e:4a:15:87:71:5b:44:2c:cf:00:e3:
81:53:d8:e0:70:ba:46:42:5d:ac:7f:96:3d:85:45:0b:e5:94:
c4:14:a8:c9:1d:45:96:ec:e5:43:a0:8f:4c:86:fb:26:ed:de:
cf:5b:cd:5a:56:89:a2:13:46:18:44:de:a9:8f:f0:be:ac:5d:
aa:e2:ae:a7:c6:f1:e2:96:f9:b9:f2:57:85:cb:20:f0:33:b8:
3d:95:e5:2f:4d:61:dc:2a:55:5b:58:78:49:7f:b4:f1:29:61:
42:2b:59:c5:f2:f9:61:26:23:f1:60:41:de:c1:10:79:c0:10:
f7:d0:a4:d8:b3:2d:87:73:a3:94:ba:e0:9f:d4:a6:a5:f8:ef:
c3:a7:fb:d3:da:4a:ec:9b:17:c0:86:ee:c4:a0:33:83:3b:f4:
37:31:69:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:28:48 2026 by rpki-client