Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier: OYmpfdaXTFiOP2CDXcWRvsJ75Ai4bOBzU9EAf8fTsOI=
Subject key identifier: D3:00:F4:93:8C:B0:3E:22:16:C3:97:06:01:93:00:97:78:1F:20:43
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial: 01A1DF830D7768B2E909EFD83EF3C80D600D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 14:01:10 +0000
Manifest this update: Sun 15 Nov 2026 14:01:10 +0000
Manifest next update: Mon 16 Nov 2026 14:01:10 +0000
Files and hashes: 1: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: taIbpt80z5BCv49F3WwHiAAUsG7kucbmd0DYMhaQMsA=)
2: zk24Xibi_69XM4miradQH_-zfVo.roa (hash: 8vWhGhRcVD9hGye0zCP9w/L6uhcw5ZBizDAK5O4GtQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:0d:77:68:b2:e9:09:ef:d8:3e:f3:c8:0d:60:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
Validity
Not Before: Nov 15 14:01:10 2026 GMT
Not After : Nov 16 14:01:10 2026 GMT
Subject: CN=d300f4938cb03e2216c3970601930097781f2043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:d2:81:c2:4a:4e:7a:a7:03:3f:dc:9a:24:
34:58:2a:76:c3:27:4f:f1:21:45:9f:d9:16:5e:c8:
b0:e3:d0:10:05:c8:8c:ef:2c:fb:c2:34:60:dd:f7:
e0:8d:dc:a0:35:22:66:d5:a1:16:02:b1:d6:11:f4:
a5:0a:fe:09:72:f6:74:ff:93:6d:a2:5d:b1:8a:8c:
bb:1d:61:01:7c:4b:4d:09:c4:33:ee:0c:bc:5c:d1:
dc:bc:3f:cc:30:a8:ba:11:68:be:ee:a8:3f:0a:53:
ee:91:0d:1e:0d:b8:98:e8:dd:ce:98:63:c7:2e:47:
76:82:06:b4:1b:6b:ef:f1:ba:45:69:7f:a8:86:6e:
15:3e:f8:ab:f3:51:e2:e7:1a:f5:dd:c2:a8:fa:7b:
cd:59:ae:ab:da:26:34:b0:ef:8d:5c:bf:0c:a2:8c:
1d:81:e6:b6:3c:59:6b:9e:94:c9:c5:86:cc:34:e3:
67:b1:d5:d1:6e:95:05:d1:1b:8f:f1:6c:16:2e:36:
8b:d6:4b:3f:74:5f:b9:7e:16:0c:de:da:84:c3:5a:
39:e7:77:3d:38:67:5e:7f:e1:ba:70:a6:78:99:b1:
3b:d9:de:34:b9:44:88:00:41:d2:79:f3:97:70:89:
e4:0f:79:ca:f3:8d:f9:b2:84:fe:f5:7e:a8:65:25:
60:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:00:F4:93:8C:B0:3E:22:16:C3:97:06:01:93:00:97:78:1F:20:43
X509v3 Authority Key Identifier:
keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:60:f4:4f:f7:4f:9f:19:b6:9b:ae:6f:b8:21:9e:e3:9d:1d:
78:c4:3c:b1:f4:b5:14:96:05:c9:11:5f:5b:f0:97:f6:bc:bf:
79:d9:0d:24:6f:51:5f:c1:03:32:b9:5a:86:6b:a2:30:7b:69:
a1:5b:08:aa:16:35:22:0f:7a:ac:1a:95:0e:01:c2:53:7d:70:
d7:7e:42:4f:94:01:3a:94:e4:99:23:36:e9:44:15:3a:71:fc:
03:72:d6:f9:3e:b8:b3:f5:e1:a8:cc:d7:e6:45:a5:f0:1e:8e:
e1:66:d8:76:da:19:83:4b:23:32:65:58:9d:30:62:be:23:6f:
94:17:fa:c3:4a:e5:8b:00:2b:65:b9:95:43:23:4f:ec:d9:dc:
80:9f:30:3b:e1:a3:35:b4:a2:93:74:78:a0:68:74:ae:e8:66:
9f:d4:7e:e9:3a:33:fa:05:2b:73:1f:f8:10:83:98:89:38:d6:
f5:8b:42:ad:d8:9b:30:e1:74:e1:52:44:dc:29:d1:ad:7a:c8:
3e:ef:d7:5e:7e:e1:4c:95:51:89:8b:ed:4c:a0:f5:d0:04:12:
6a:c7:a3:dc:cc:bb:67:80:1b:3d:ce:8f:d0:f1:8f:0a:e2:a3:
f4:05:63:93:5e:1c:34:1f:0c:44:8c:74:19:51:c4:4c:7f:81:
4b:d3:ce:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:53:24 2026 by rpki-client