Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
File: YaXSF3WehhaW_HftmqY7lO2zvn0.mft (raw, json)
Hash identifier: uelxDAQ8+/uHkIAIPsBzRtsklyGH1MlvUsFGknTFwpc=
Subject key identifier: 03:BC:9D:7D:17:F2:DD:0B:F6:93:64:03:81:AE:DA:79:85:78:7D:82
Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
Certificate issuer: /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Certificate serial: 01A1DF4CDCF89DEEF54FE681646E334A837D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
Manifest number: 1A88
Signing time: Sun 15 Nov 2026 13:01:58 +0000
Manifest this update: Sun 15 Nov 2026 13:01:58 +0000
Manifest next update: Mon 16 Nov 2026 13:01:58 +0000
Files and hashes: 1: 7nMDcW2MBzGpfpdKdPDTB0QB3hU.roa (hash: en70sYlojLOJhZvnO4mg1gQMw5JWdqgwDgeNhf3auMU=)
2: En1jde_TIQ7LiMKAfWOjQ8-vueQ.roa (hash: B07iauNs3fJKlZyy9+dMg1gGMxORKFzCKI2QAYo7MVI=)
3: QaLldwyWCNmsJuYxanxijJENiro.roa (hash: zZJuFSJ24SLOyuCH72+V4rIHBfJPcOF4kPyYmAT7g5s=)
4: YaXSF3WehhaW_HftmqY7lO2zvn0.crl (hash: qFyy9gdWz9qxxbwtMPDr/tsax+wb9VA7QNrdpbpjrdM=)
5: jdSwXFGYkX-QEBXIuasgwFC2D7c.roa (hash: 8ECDcLMvUhxjcLk2BpSduz0pbSgekU1Tj/Vgy8O0Vqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:dc:f8:9d:ee:f5:4f:e6:81:64:6e:33:4a:83:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Validity
Not Before: Nov 15 13:01:58 2026 GMT
Not After : Nov 16 13:01:58 2026 GMT
Subject: CN=03bc9d7d17f2dd0bf693640381aeda7985787d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b1:34:37:6d:47:c9:33:9b:45:ab:85:86:1b:
01:4f:c2:44:3b:53:37:dc:49:6a:c2:d5:a5:19:7f:
18:fe:e1:35:12:3e:fa:c6:0a:76:19:25:4d:f2:cb:
4a:29:a3:76:59:3b:c5:13:24:58:a3:b1:93:84:18:
bc:60:1b:1a:82:89:02:45:18:5b:67:21:f0:7d:b0:
3d:a8:de:e4:5e:b9:b9:2b:d3:04:e2:9b:50:de:e5:
c5:cb:17:79:2f:e0:1d:49:3e:5c:48:07:f7:54:ea:
35:f6:94:cc:5a:44:67:43:cc:ac:3b:52:ca:cb:39:
7d:d3:00:af:f1:92:fd:c8:44:e1:90:ae:3f:6e:05:
65:ac:b2:ff:c3:65:87:59:53:6b:a5:44:60:c8:c7:
b8:cc:fc:2b:c3:c0:ca:06:b3:b1:0a:fa:fc:26:60:
e9:5f:b3:04:ab:9e:b8:d8:8d:41:d1:82:f4:7e:95:
13:6e:16:ae:bb:e6:0e:e0:d2:2e:15:da:73:a5:7d:
27:79:bf:1d:38:f7:e9:eb:12:d3:bc:31:be:26:98:
dc:03:40:1e:2a:a9:3b:be:d2:00:3a:56:62:0b:cd:
71:b5:1f:57:0b:82:e5:05:fd:d8:34:1c:17:ea:94:
6e:03:21:b7:c4:c0:e3:82:fe:d5:08:ae:6a:9b:fc:
4e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BC:9D:7D:17:F2:DD:0B:F6:93:64:03:81:AE:DA:79:85:78:7D:82
X509v3 Authority Key Identifier:
keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ea:fd:01:8a:41:dd:86:03:f8:dd:08:db:ef:a8:f6:4c:3b:
39:d4:79:ba:38:57:6b:65:25:61:ed:0f:cd:a2:11:02:5a:1a:
57:a8:b2:f7:75:1a:56:2c:e4:44:bc:fa:19:e8:15:10:51:f1:
93:49:53:72:7c:6e:d4:b5:a5:8d:6d:69:ed:de:ba:c0:cf:6d:
93:d9:82:52:9d:31:d5:93:c6:88:ae:38:06:d0:ff:33:05:60:
46:68:54:fd:9b:ea:2e:9b:f6:e5:da:ee:6f:50:ef:79:39:9b:
47:26:aa:51:17:94:59:70:d6:44:96:6a:6c:e0:f7:c9:84:18:
b6:36:b8:a6:bd:f1:d0:4e:04:69:b0:96:b6:07:fe:24:4c:f4:
f2:f9:72:89:ab:f4:30:90:5d:ae:77:5e:35:cc:1c:8f:7a:c3:
be:a9:a2:45:54:2f:67:23:24:f5:9f:21:2d:b2:b6:ab:91:ef:
3c:18:64:f6:26:dc:64:01:4c:e9:e0:e6:8e:36:a7:1d:85:12:
d8:6b:89:ed:cc:ce:4b:42:97:09:fa:4b:f0:1b:09:91:8e:23:
93:74:44:62:5a:8d:40:3c:6b:9d:98:f0:a1:48:d0:73:bf:99:
7c:fe:c7:90:2a:24:b8:ae:4a:6d:3b:ae:18:7d:3e:98:e3:89:
5f:d2:c6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:55:28 2026 by rpki-client