Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
File: yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft (raw, json)
Hash identifier: 6e7JwnsPQ6I91hy7dt8TPynxxYigcz7zBZtM6bWMi74=
Subject key identifier: BB:9A:11:3C:DB:84:F4:B0:C6:6D:15:EF:91:89:8F:B2:04:73:AE:D4
Authority key identifier: C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
Certificate issuer: /CN=c8df337cea56a083f46b799072e70da345cc2364
Certificate serial: 01A1DD94950B3171195312F489F0A779CF0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 05:01:04 +0000
Manifest this update: Sun 15 Nov 2026 05:01:04 +0000
Manifest next update: Mon 16 Nov 2026 05:01:04 +0000
Files and hashes: 1: hNF8tXFLZNTcaH0gIBkBAvcKbVY.asa (hash: iwvNN6FtVQiEqz8CUKwZlaVHqu5n7aizrJShOvIXCR4=)
2: k2ViBnovBSrJ6-QzUlh_SgfUQTc.roa (hash: 9Q1EqZG/a6iEl1F6uqJOmdn36R+djh5MF5HhvgX3ijc=)
3: yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl (hash: m0QetwCztPT8h97kGxtIpG+j3Hm41lD6cMLqzse566w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:95:0b:31:71:19:53:12:f4:89:f0:a7:79:cf:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8df337cea56a083f46b799072e70da345cc2364
Validity
Not Before: Nov 15 05:01:04 2026 GMT
Not After : Nov 16 05:01:04 2026 GMT
Subject: CN=bb9a113cdb84f4b0c66d15ef91898fb20473aed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:70:d7:7e:1b:ed:14:1f:72:f8:8e:76:0b:5b:
96:00:a0:14:d0:b3:66:69:21:d7:1c:41:6e:ae:fc:
13:77:ce:b8:d2:50:cb:56:9d:60:63:a0:e5:60:0c:
4f:6f:83:4e:5d:d9:bf:c6:82:15:66:78:2e:73:e1:
8c:92:25:11:70:28:aa:ac:79:b4:bc:a8:e6:5d:44:
90:58:7e:ba:ac:66:05:a9:a8:75:8c:56:5f:74:ca:
2c:92:46:b9:11:78:af:a6:33:c1:18:25:fa:de:65:
ff:62:4f:4c:cc:59:93:89:4f:2e:c1:2a:69:70:97:
d0:63:24:50:81:89:93:f4:fb:6d:04:16:dc:d6:7d:
d2:84:e3:77:35:05:b5:c8:0b:9e:b2:76:11:40:46:
16:d4:88:ee:c5:10:9f:3a:02:af:d9:fe:d3:29:bd:
41:44:b2:60:65:50:b2:fa:c3:02:31:39:b0:07:fd:
f7:f9:55:df:52:6d:84:40:a9:34:54:11:63:26:39:
b6:95:bd:95:f4:93:7f:81:44:56:0f:5b:49:8a:93:
2a:d2:94:54:26:7f:40:c8:34:06:51:1a:3b:49:5a:
0e:a5:3f:0b:eb:fa:f4:74:31:c4:4f:cd:11:14:25:
b0:c5:26:66:82:2f:9c:3f:7c:30:34:7e:19:16:59:
0f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9A:11:3C:DB:84:F4:B0:C6:6D:15:EF:91:89:8F:B2:04:73:AE:D4
X509v3 Authority Key Identifier:
keyid:C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:70:4a:66:c3:83:99:09:56:08:ea:97:5e:42:31:0c:88:73:
ec:a2:f8:c0:82:c5:50:b0:02:10:2f:28:8a:30:73:8a:08:47:
52:96:23:53:a7:9e:4b:f8:1a:9f:a1:ba:02:64:41:b0:3d:f4:
11:be:5c:69:ce:22:bf:23:6b:29:02:45:68:4d:9b:ce:8e:a3:
1f:54:2f:0e:35:74:cd:66:96:ca:34:0a:29:26:28:ee:60:92:
ab:b9:69:73:e6:67:54:56:86:0e:e8:61:fd:10:fa:b5:74:1d:
64:a1:b3:bc:ca:af:df:67:38:e6:f8:e4:4e:70:15:10:4a:04:
f1:97:ad:5a:c7:26:f7:4f:53:34:43:f0:a4:d9:fa:af:51:bb:
2c:28:8b:9b:d3:07:31:eb:dd:49:04:8f:87:53:84:ce:82:11:
41:5c:11:02:9b:c4:e6:2f:22:c2:77:4b:17:ec:36:c2:b4:cf:
f0:c9:27:69:4a:94:b3:a9:5f:84:6e:01:b8:d4:16:ee:13:03:
72:66:f0:f8:09:20:0d:47:8d:15:f1:fe:fe:6a:f9:e9:75:09:
70:90:97:e0:93:94:4d:b8:e2:68:41:92:dc:3a:75:a0:8e:7e:
a5:93:ba:2c:dc:43:11:82:f4:38:52:58:aa:65:e8:fe:78:d0:
92:81:bd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:08:10 2026 by rpki-client