Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
File: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft (raw, json)
Hash identifier: DB2W+4FdoPouwBNKNWCqwgMbQUHkX1AkvwvXsvOjkU4=
Subject key identifier: 42:29:E5:E1:0B:D5:D6:8B:CF:43:51:50:F5:02:78:C9:69:2F:C8:32
Authority key identifier: 61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
Certificate issuer: /CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Certificate serial: 01A1DCB8E99C56649395BF5B12F737749101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
Manifest number: 0D07
Signing time: Sun 15 Nov 2026 01:01:08 +0000
Manifest this update: Sun 15 Nov 2026 01:01:08 +0000
Manifest next update: Mon 16 Nov 2026 01:01:08 +0000
Files and hashes: 1: 2filITtLre0aS9h7s_J0lG8o9ac.roa (hash: tB33DYQNO/bXVdc5HAElPMFace/IjhKVV8TRM5FqCbw=)
2: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl (hash: rmIUvLbvsm4gEVeU5DziGWJsDG9rl2kCo8vw9LSUm2w=)
3: qebm1HnOnmQZcMHnLu3dqkHA5nQ.roa (hash: e345WxTWzVBJ85lJWbHPeY1YmwF+VFHc7cHG1I1//LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b8:e9:9c:56:64:93:95:bf:5b:12:f7:37:74:91:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Validity
Not Before: Nov 15 01:01:08 2026 GMT
Not After : Nov 16 01:01:08 2026 GMT
Subject: CN=4229e5e10bd5d68bcf435150f50278c9692fc832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9b:12:df:1b:b1:cc:9f:56:62:70:07:90:88:
52:07:d8:c4:a0:c8:ae:40:15:41:61:0b:96:19:e0:
5b:82:6a:1c:30:75:de:ea:42:3e:2d:e1:85:dd:42:
8c:eb:9f:19:d7:6b:a0:40:7a:ad:66:e2:20:c4:42:
6e:af:88:45:26:72:ed:3f:44:32:41:78:52:32:32:
30:5c:a0:a6:67:f6:43:9c:48:18:88:19:1e:36:c6:
ec:ba:14:9d:43:f4:6a:21:ce:63:71:31:0a:94:a5:
70:e9:9c:c4:01:16:a1:79:b5:a5:39:27:77:74:7e:
c8:77:39:b6:09:a2:ee:70:e1:8f:9a:4f:72:01:60:
6d:bf:92:da:8e:a1:da:24:19:da:5e:5a:0e:a4:e1:
89:87:59:37:92:80:15:f5:c4:b8:4d:3e:48:b2:e4:
a9:34:e7:45:45:69:10:39:f1:4a:43:3d:c5:de:41:
6f:e4:ba:3c:09:8a:43:88:ec:6d:74:56:f0:7a:77:
e6:1d:6b:0d:8c:34:79:d8:df:33:c1:07:aa:e0:b4:
24:39:69:c8:48:dc:dc:e9:c2:ad:42:17:e8:bd:55:
78:e6:47:f8:76:cd:98:df:93:de:f6:ff:15:3f:69:
d9:1f:ba:de:da:76:77:66:2c:97:2f:64:6c:da:b4:
90:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:29:E5:E1:0B:D5:D6:8B:CF:43:51:50:F5:02:78:C9:69:2F:C8:32
X509v3 Authority Key Identifier:
keyid:61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:83:f6:6e:da:ae:f0:24:da:8c:03:90:ce:ec:92:66:cb:9d:
95:e5:fb:0c:95:73:f6:20:75:81:d5:11:be:47:c9:3c:86:93:
ce:6a:17:7d:a5:2c:49:ed:04:53:08:dd:6c:cf:a8:74:87:91:
36:57:4d:85:5a:d4:7a:6f:4a:42:9b:b6:19:80:16:fd:e2:18:
5d:b6:60:4e:8f:5d:31:ac:3c:98:1b:04:49:53:30:ac:66:12:
84:01:00:a2:92:79:d8:8d:cc:6a:89:6c:7f:bd:79:f8:22:50:
91:db:ae:77:fd:be:80:10:52:f8:f7:80:cc:17:76:5f:aa:a6:
e4:95:24:c7:c0:a6:8b:ae:8e:bf:04:87:9c:20:65:8f:d5:67:
7b:c4:b7:f6:e1:8a:d0:6f:d5:9f:0c:e1:51:d0:1f:fd:41:ee:
ee:ec:b9:2a:d7:16:16:3d:0d:0f:b6:c8:2d:4a:d9:34:3f:c3:
0a:4d:bb:e7:2a:d0:9d:78:c6:69:70:b8:4f:ad:3c:98:c9:f3:
a7:4a:a4:d3:54:af:1e:57:8b:66:40:ca:69:84:c5:8c:6a:09:
b1:a4:d9:df:6f:71:bc:4a:d0:f5:9b:ac:53:71:ae:3d:bc:20:
05:cd:98:1f:53:47:fd:d8:51:42:0d:5d:f5:6d:5e:80:e9:44:
40:82:4f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:48:27 2026 by rpki-client