Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
File: _yXZxSk7p7_lIHSsJ_x9-aZJshs.mft (raw, json)
Hash identifier: HRusP+Fb7s6hULbRgum8UEykjzZhFwPVPsD5eTuOXH4=
Subject key identifier: A5:89:DE:D2:E3:EC:EA:F5:8E:5B:0E:9F:BE:B2:94:6D:4D:CE:4A:25
Authority key identifier: FF:25:D9:C5:29:3B:A7:BF:E5:20:74:AC:27:FC:7D:F9:A6:49:B2:1B
Certificate issuer: /CN=ff25d9c5293ba7bfe52074ac27fc7df9a649b21b
Certificate serial: 01A13A49A30B7BD2770AB5920CEFC46F1D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_yXZxSk7p7_lIHSsJ_x9-aZJshs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
Manifest number: 011C
Signing time: Wed 14 Oct 2026 12:01:06 +0000
Manifest this update: Wed 14 Oct 2026 12:01:06 +0000
Manifest next update: Thu 15 Oct 2026 12:01:06 +0000
Files and hashes: 1: VoyMNhhHVQ4I5z9WjjUHws6hk2U.roa (hash: 07v8p+Qbq8NkDFnmR77Sitj/ACMVAdh3jZDXmBPQOXA=)
2: _yXZxSk7p7_lIHSsJ_x9-aZJshs.crl (hash: /OF1xMnvBgsAbGET4/IMvJbRtQgoj7VnJq19OvTwfw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_yXZxSk7p7_lIHSsJ_x9-aZJshs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:49:a3:0b:7b:d2:77:0a:b5:92:0c:ef:c4:6f:1d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff25d9c5293ba7bfe52074ac27fc7df9a649b21b
Validity
Not Before: Oct 14 12:01:06 2026 GMT
Not After : Oct 15 12:01:06 2026 GMT
Subject: CN=a589ded2e3eceaf58e5b0e9fbeb2946d4dce4a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:31:8f:05:6a:c7:95:6a:04:b5:61:98:a0:
f6:a0:bb:9b:fc:4d:f5:05:f4:29:d4:90:b8:77:a0:
73:57:d0:c5:73:c5:75:fd:fa:9f:e3:89:30:7a:32:
21:54:b0:84:f4:13:89:8f:b6:70:81:97:b6:fc:cf:
bf:ab:ad:51:5f:67:aa:16:08:a9:28:8c:e0:a6:b6:
11:40:70:aa:bb:db:ef:38:71:ad:bd:c9:c1:f9:05:
73:8a:22:fb:62:c3:40:3f:19:9d:d4:e6:c2:7c:c3:
42:d9:d5:42:71:65:23:97:8a:fa:22:ab:7a:96:0b:
91:f2:b9:b6:14:05:71:7c:ca:33:5d:d6:0f:82:f6:
0f:ea:2d:1d:3f:d5:4c:7b:b7:42:02:af:3c:bf:a7:
be:65:be:8c:ed:a6:44:40:8e:96:2e:3c:5b:24:06:
80:61:94:06:00:c1:2e:e5:45:8e:2d:d8:83:08:c3:
b2:b7:cb:58:05:16:01:90:10:c8:8f:45:af:94:c4:
ed:05:ef:28:4f:0a:fb:e9:5b:4f:41:74:8c:c4:10:
59:08:b1:99:e9:d4:9d:bd:78:94:b8:50:18:38:71:
0f:37:33:7c:18:ee:7e:46:27:7f:13:02:95:c7:41:
8b:7f:93:95:e4:1a:c9:17:ab:14:dd:36:54:bc:e7:
e1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:89:DE:D2:E3:EC:EA:F5:8E:5B:0E:9F:BE:B2:94:6D:4D:CE:4A:25
X509v3 Authority Key Identifier:
keyid:FF:25:D9:C5:29:3B:A7:BF:E5:20:74:AC:27:FC:7D:F9:A6:49:B2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yXZxSk7p7_lIHSsJ_x9-aZJshs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c3:92:6b:72:19:b2:99:7f:24:01:47:3b:50:ce:31:1e:ff:
22:cb:b7:dc:b1:92:aa:ba:92:fc:95:52:2c:d8:70:29:43:3c:
01:6d:ff:5e:40:30:25:43:7f:e8:f8:46:d5:19:1c:7e:64:5c:
4a:61:2e:e8:f0:d9:db:b1:cb:bc:1e:5e:15:a9:7a:d1:62:66:
a5:eb:56:5f:2f:b7:c2:32:48:23:de:3d:32:a5:47:f8:39:e9:
96:b1:2d:99:ee:b8:00:b9:2e:04:73:d1:b5:ee:15:10:c3:eb:
16:b8:1d:7c:c6:e8:e9:1b:68:b4:13:d7:ff:2e:05:06:40:b6:
19:d5:a3:3a:9f:4f:d8:40:9a:1f:35:1d:78:77:81:fe:9b:b6:
51:65:3a:53:ab:a1:26:61:e1:bd:3d:cd:54:ab:c0:d5:56:f1:
9f:c9:47:a2:18:01:55:67:88:72:3c:ce:c9:0e:ce:78:e5:29:
62:56:a4:c6:b1:d4:31:58:76:c1:35:ea:bd:5c:1e:fb:63:11:
e0:66:e8:5b:8d:25:fd:a9:cc:11:b5:86:90:28:6e:2e:f2:fe:
ef:57:62:af:ea:38:77:73:e6:ca:6e:ef:2c:18:b6:ae:65:07:
90:3b:26:34:3c:7c:ec:8c:98:ca:0d:02:c3:f1:91:c8:37:9f:
cc:c9:75:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:04:56 2026 by rpki-client