Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/Ye5EyAZBPUjE4kR6kRYK6lIvADA.mft
File: Ye5EyAZBPUjE4kR6kRYK6lIvADA.mft (raw, json)
Hash identifier: ZcWbng/rQ4TGkmF/scXQeJzPMZ/isqiftQ5LTO0XeQs=
Subject key identifier: B1:B0:64:12:D1:0E:C3:1B:DB:7A:FE:CE:97:C6:F9:11:DA:B9:30:B6
Authority key identifier: 61:EE:44:C8:06:41:3D:48:C4:E2:44:7A:91:16:0A:EA:52:2F:00:30
Certificate issuer: /CN=61ee44c806413d48c4e2447a91160aea522f0030
Certificate serial: 01A10249431498D2E7AA0FC30F7FBBEE44F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ye5EyAZBPUjE4kR6kRYK6lIvADA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/Ye5EyAZBPUjE4kR6kRYK6lIvADA.mft
Manifest number: FF
Signing time: Sat 03 Oct 2026 15:01:57 +0000
Manifest this update: Sat 03 Oct 2026 15:01:57 +0000
Manifest next update: Sun 04 Oct 2026 15:01:57 +0000
Files and hashes: 1: 6fU5iE_9HhMzleiywml5eVrADVU.roa (hash: YfRMgT7PrvzdGAN/VxPDhHH8ny59LXaq97JWdJrBKuw=)
2: Ye5EyAZBPUjE4kR6kRYK6lIvADA.crl (hash: RBfQbxg0GCm0F636J1vZKwfDNDHkULVPPL3s0PD/G4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/Ye5EyAZBPUjE4kR6kRYK6lIvADA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/Ye5EyAZBPUjE4kR6kRYK6lIvADA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ye5EyAZBPUjE4kR6kRYK6lIvADA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:49:43:14:98:d2:e7:aa:0f:c3:0f:7f:bb:ee:44:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ee44c806413d48c4e2447a91160aea522f0030
Validity
Not Before: Oct 3 15:01:57 2026 GMT
Not After : Oct 4 15:01:57 2026 GMT
Subject: CN=b1b06412d10ec31bdb7afece97c6f911dab930b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:5f:5b:3a:4e:bd:15:5c:31:ef:5a:5a:7f:
dc:ee:dd:76:d2:93:aa:4c:10:92:e6:2a:89:37:b1:
49:8a:01:a5:85:4b:ab:c1:71:b9:c5:fc:eb:4f:7b:
78:04:87:cf:c6:a8:89:52:e3:50:ff:de:ab:40:9d:
b5:44:ac:5b:a0:ee:8c:6b:2b:43:0c:f3:bd:f6:2a:
cc:ed:fa:25:c4:3f:45:4f:ce:69:29:68:ca:be:36:
43:29:12:60:ff:54:1a:77:0b:0f:70:83:bd:90:57:
3b:a1:7e:4d:a1:bc:6b:a7:f9:64:5b:95:73:5d:35:
22:ea:1d:72:d9:30:a5:e5:d9:0c:1e:9a:d7:41:43:
87:2a:33:04:a7:ae:e4:13:59:e6:fa:bc:76:71:fe:
52:c3:00:7d:f5:f6:f9:6a:36:e4:fb:1e:10:c0:02:
a3:79:67:06:db:81:19:ba:fa:d0:fe:ca:36:cb:0a:
2b:aa:dd:49:eb:20:8b:b8:5b:c7:f1:f6:c3:f7:f1:
cb:88:65:20:bf:9a:a1:4a:53:b7:6b:08:e7:53:92:
cb:e2:22:ac:b2:97:53:5e:c5:4b:c6:e3:14:57:1d:
2f:eb:12:83:b7:b7:a9:7b:06:b9:f1:e9:0d:17:67:
78:30:1d:8d:d4:88:dc:59:f0:6c:fd:25:b6:66:2e:
cb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B0:64:12:D1:0E:C3:1B:DB:7A:FE:CE:97:C6:F9:11:DA:B9:30:B6
X509v3 Authority Key Identifier:
keyid:61:EE:44:C8:06:41:3D:48:C4:E2:44:7A:91:16:0A:EA:52:2F:00:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ye5EyAZBPUjE4kR6kRYK6lIvADA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/Ye5EyAZBPUjE4kR6kRYK6lIvADA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/Ye5EyAZBPUjE4kR6kRYK6lIvADA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:01:aa:5e:9c:d6:49:38:b1:92:58:fb:d0:b8:d4:28:57:66:
ed:85:0e:32:b4:5b:78:3f:04:2a:a4:78:42:87:c1:6f:9e:d9:
4b:8c:c5:8d:7a:88:65:0d:97:08:ce:e7:23:bd:fa:31:ba:e5:
db:ef:77:81:16:ca:14:bf:f5:47:3b:a7:37:1e:45:a2:52:cb:
96:53:85:a9:12:59:b8:39:6f:9b:9c:0c:4c:7c:d1:d4:ee:b1:
b9:c6:02:d3:54:20:a0:3b:93:19:49:1e:39:e5:77:77:fc:e4:
99:56:ac:2f:95:3e:54:77:07:a4:02:14:2f:2f:0e:4b:c9:5c:
05:53:9c:b6:ea:27:40:f4:95:4c:80:83:95:e2:d2:c0:3f:40:
8a:39:de:18:ee:5a:2e:68:6e:04:35:80:57:ed:4c:07:fd:a4:
95:60:25:c2:20:97:52:1c:41:65:b4:92:2a:0a:d6:39:4d:4d:
7e:e8:38:08:85:54:ef:b6:da:2d:1a:33:93:b8:32:3d:0c:05:
15:aa:3e:02:13:44:85:24:53:ad:bf:84:95:f4:56:91:db:75:
12:b1:72:19:c8:6a:7a:24:8e:5d:19:41:a3:ab:a2:e3:66:7a:
66:00:97:09:91:7f:14:32:f1:0e:88:d6:d5:10:29:bd:dd:48:
25:9e:f2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:05:05 2026 by rpki-client