Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
File: YjUmrZ--xXT6TsPZuttUM_2qyns.mft (raw, json)
Hash identifier: iA8csrilEUmP+kVmQ+2FPdf1Eq7nT7Zoq6ZHIySNp8o=
Subject key identifier: D6:96:F6:AA:43:9D:1B:C9:15:9E:DD:FF:22:F0:81:7B:5B:FA:B8:D9
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 01A1DF4C07EEA77FBFDCB7B44B41A322B1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
Manifest number: 1112
Signing time: Sun 15 Nov 2026 13:01:04 +0000
Manifest this update: Sun 15 Nov 2026 13:01:04 +0000
Manifest next update: Mon 16 Nov 2026 13:01:04 +0000
Files and hashes: 1: 4Mc33bIPqXNt0WBKTY6IWbhZhyI.roa (hash: 0CyjN4fDt2gePEzz6GNI+6v2hHdu94zd3doXA9mCmrY=)
2: E7S8kk0v-3rKEWlslioybHa5U2o.asa (hash: CrfGOpfT92BFeNnmG2NLzbIsZjJeDSaj2z6bEyCVnBE=)
3: P5w8UdbfAfDa1DxOi4VrhWTzLpM.roa (hash: +0DQfwomOYLD75ppkH2FpMEhDzxTGpHuszvhO6Ri7kw=)
4: YjUmrZ--xXT6TsPZuttUM_2qyns.crl (hash: 2iCxxfObTD16ratIJuv6JIVI3Biwk1DmaqhdfWNfLOw=)
5: YrZcQqizcm-6Ws7265yR5ro3QoE.asa (hash: MFAOo3Xix00XFxAQiqGQoGajsrjp1l0fhfv38HvzhSI=)
6: fAgTSS_ONStFnLvEGPMgmGZBmpo.asa (hash: TOVMYJAfL34na7IHXLihlNeKoxMB/uFVliwHd1D3Uzc=)
7: i2ZN82VS7VSqjYAHCBTpFBgLiEo.roa (hash: gw1xxGQ0BqeQr6XFI4+gKsjUN/m1I0WJsAj9BQrH0uA=)
8: uq7KjFfupPB_i8cccfycTh05AaQ.roa (hash: q7ZkYvBa6WisIOhSf12hByjNMV7uSrIgT5csQL8UbvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:07:ee:a7:7f:bf:dc:b7:b4:4b:41:a3:22:b1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Nov 15 13:01:04 2026 GMT
Not After : Nov 16 13:01:04 2026 GMT
Subject: CN=d696f6aa439d1bc9159eddff22f0817b5bfab8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1d:42:07:e3:e8:04:65:54:66:b9:da:cc:d0:
66:c1:9d:1b:5c:e2:a7:9f:3e:ed:c7:a4:92:3f:1b:
9b:2b:bb:1f:02:ad:85:05:01:9d:d9:00:45:89:6e:
d3:8a:79:cb:46:9a:28:71:a6:62:65:bd:b6:5d:71:
b5:ac:f4:26:5d:18:b0:d1:e4:8d:21:b0:1e:54:ac:
4a:30:05:ae:7a:99:ae:9b:4a:44:ff:93:ae:15:50:
f7:3a:1e:1e:34:ef:b3:49:c7:02:e4:43:61:99:68:
00:08:c9:e5:d4:48:16:c9:2a:b9:79:18:55:62:dc:
4d:72:10:28:cf:59:c5:78:92:17:4a:ef:dd:75:6e:
7e:b2:cf:cc:ac:d9:b2:2d:39:e9:2b:d4:fb:09:f1:
89:36:c8:e9:2a:51:76:1b:41:81:b0:b3:5d:87:2d:
06:29:62:83:01:3b:39:e2:e3:1d:24:03:a5:94:84:
ab:a4:86:44:0d:b4:54:2d:26:bb:71:4f:47:4d:62:
87:fc:8b:5f:d5:aa:f1:4b:8a:3c:06:63:57:d7:fa:
4f:f1:a8:8b:35:38:da:f4:6b:5c:e4:d0:d5:0a:5b:
c6:49:a8:77:e3:2e:e5:53:ca:6c:bf:b8:bb:8b:d7:
ff:ef:82:17:d9:67:88:1c:b2:e8:1e:a4:05:b9:89:
88:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:96:F6:AA:43:9D:1B:C9:15:9E:DD:FF:22:F0:81:7B:5B:FA:B8:D9
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b4:07:a0:78:91:e0:c9:52:b1:5d:31:06:cf:97:02:93:d2:
e0:b3:5f:1d:75:76:3a:98:69:04:4d:76:ec:55:02:b0:b5:df:
5e:81:61:e6:26:d1:4d:da:b4:45:e6:63:60:1f:a8:77:de:4b:
6b:f0:f8:41:f4:ba:1e:df:69:80:f6:0c:a2:08:d1:cb:db:6e:
cf:f9:b9:4c:59:78:85:d9:f7:c5:67:50:25:17:37:2e:1b:ee:
de:2b:30:86:5e:5a:fd:cc:93:42:07:ab:35:82:b9:e0:77:af:
7d:bf:56:eb:2c:b2:e9:f8:6b:04:a8:f6:f5:20:f7:b4:1a:84:
de:90:9f:62:83:33:33:73:16:91:68:4b:ff:c3:3f:5a:c7:f3:
34:5d:33:ab:f8:0f:89:69:90:da:80:25:66:29:a6:cb:72:56:
49:68:78:15:81:e5:d0:eb:0a:03:4f:0c:c0:dc:d2:04:a3:53:
05:b6:3c:c5:77:1f:58:41:62:9b:20:16:71:c3:e1:6b:48:73:
27:08:e3:a9:bf:87:83:ea:7a:98:b5:ca:e1:ba:ca:25:f8:e9:
97:2d:8f:20:29:49:6c:a8:82:33:a7:2e:96:89:18:07:f4:7f:
54:6d:99:3f:3b:2e:57:8a:fb:23:0e:eb:3b:be:92:90:fe:79:
24:d9:4d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:33:14 2026 by rpki-client