Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
File: YWAUEB_7zmdROc1MAroAY0rYbgI.mft (raw, json)
Hash identifier: lcvQ6VMK6jhcPXNCz5M425sF7plRjmVvUv7HiyXWwgc=
Subject key identifier: 6D:BD:A8:2A:9F:DC:F3:7A:60:22:97:EC:F6:95:B8:52:6D:73:02:8F
Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Certificate issuer: /CN=616014101ffbce675139cd4c02ba00634ad86e02
Certificate serial: 01A1DEDE92A352FFCE54ACEDA815E7A5CEF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
Manifest number: 1A8B
Signing time: Sun 15 Nov 2026 11:01:30 +0000
Manifest this update: Sun 15 Nov 2026 11:01:30 +0000
Manifest next update: Mon 16 Nov 2026 11:01:30 +0000
Files and hashes: 1: RF-tJIO2NICablpWJ0rxXstB-5E.roa (hash: B2eozTRe5cg7SctioXDuhV7y1QMBLlq9hEQ1DOOBwlc=)
2: YWAUEB_7zmdROc1MAroAY0rYbgI.crl (hash: OGdDkdRmLMETPJzdP24QWT3rvdN0YVpxoegjqU2PCdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:92:a3:52:ff:ce:54:ac:ed:a8:15:e7:a5:ce:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02
Validity
Not Before: Nov 15 11:01:30 2026 GMT
Not After : Nov 16 11:01:30 2026 GMT
Subject: CN=6dbda82a9fdcf37a602297ecf695b8526d73028f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:64:d2:4d:27:f4:b3:6e:48:bc:29:cf:c7:85:
02:ee:5c:8a:20:29:a3:ca:ba:6c:38:34:fa:2e:e6:
bd:30:af:e5:5e:75:52:62:93:79:f3:ca:14:ac:ee:
da:e0:a9:f2:35:0e:10:17:aa:64:7a:50:f6:15:38:
db:54:0d:3e:5a:18:32:59:1d:db:71:24:c3:1d:a3:
c8:30:62:e1:15:6d:e3:8b:44:34:5a:b1:e9:f9:70:
60:3a:7a:45:a6:fd:25:b4:ac:a0:2d:00:38:8c:bc:
af:cd:7c:6b:b0:37:8a:4c:f0:30:37:da:58:f0:86:
3a:75:ed:8a:6e:fd:f5:43:b0:31:76:cf:e7:c8:92:
d9:f2:5e:c1:c3:43:64:3b:e1:b8:47:1a:fb:2d:f4:
51:01:bf:6d:27:b5:66:70:df:8c:fb:42:fd:86:1b:
be:f3:0c:e5:c5:c1:6d:f9:6b:89:76:fa:f3:4e:45:
98:b7:e4:d9:3c:bf:01:f7:ad:dc:a7:b7:51:e2:3c:
a1:1b:a4:6c:0c:57:26:04:64:6c:b9:76:63:a0:aa:
95:c4:ac:11:67:bf:0c:37:0d:db:df:75:5a:48:de:
65:7c:1a:9d:bd:ee:ca:80:fe:24:77:f7:e0:6c:d0:
29:52:a4:c8:76:cf:09:13:e5:16:d7:07:fb:0b:8d:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BD:A8:2A:9F:DC:F3:7A:60:22:97:EC:F6:95:B8:52:6D:73:02:8F
X509v3 Authority Key Identifier:
keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7e:98:15:19:1a:ce:aa:27:de:e7:cc:68:e8:84:1b:33:1e:
f2:84:b0:7b:78:2c:cf:0c:90:68:bd:ce:69:d5:93:d4:05:47:
55:6d:c1:3c:a5:0d:a7:76:62:61:42:47:92:a2:de:f7:b5:7e:
b3:c9:ef:4d:0e:6d:34:51:b0:fc:c0:68:e8:e6:4a:d0:fb:aa:
1d:a8:87:5d:96:1e:d4:9c:88:f2:15:3f:18:0e:7a:2c:20:d9:
3d:c9:2f:4c:16:c8:25:9b:2c:df:a9:24:5d:57:ba:33:b1:d1:
4b:97:34:fd:96:22:2e:31:f1:69:75:c4:a6:b2:22:93:70:8f:
2c:44:4d:aa:a5:7d:d0:32:9f:aa:a8:23:6d:19:c0:36:17:03:
eb:cf:5b:6b:32:8d:c7:f1:32:80:31:d9:4f:f4:35:7f:57:0b:
53:6f:90:bb:bb:44:be:ee:a5:2f:ad:86:f6:e1:2f:ae:bd:b5:
cb:1a:cb:84:d4:5f:85:5b:81:0d:77:25:a4:5a:5a:f9:c9:b4:
fe:52:30:ad:9a:72:46:ca:9d:52:52:0b:fc:4b:a4:b2:2f:d7:
26:71:14:07:98:58:0f:36:d3:c2:13:80:3f:3a:c1:eb:52:ec:
44:9f:53:d6:b5:23:00:9b:fb:05:1e:96:06:60:aa:c7:69:9e:
b5:11:b9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:10:23 2026 by rpki-client