Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
File: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft (raw, json)
Hash identifier: xxkWL+lodekG+Kgce7j6P2uafoxXl2fQytvoJHvJfWo=
Subject key identifier: E0:C4:84:CF:FA:97:EC:0C:BD:7C:F4:F2:25:DD:25:6D:5C:8A:46:8E
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 01A1DF153FCD7E9DE1B6EC12A025C6B09318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
Manifest number: 1B14
Signing time: Sun 15 Nov 2026 12:01:14 +0000
Manifest this update: Sun 15 Nov 2026 12:01:14 +0000
Manifest next update: Mon 16 Nov 2026 12:01:14 +0000
Files and hashes: 1: 5o6k6rNuid97Qh-4yx5_yoP0grk.roa (hash: fdMkIWOquD1CiccVguV8cwles53g42rbkdlJp+WKaT4=)
2: F6t7dXWGexiyzLX5kVZtDM5udZk.asa (hash: ko4uj/o7b8JpGfIUKzTEj20oKF5zgcG3rYZFJmMYz6c=)
3: FUZBk4RoMMAKOt4FuxEe4m54_Y0.roa (hash: 4AO2Rr40bs3bWeKfynW3DiZx1+Y9YCS4Bf+omFYvnyU=)
4: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl (hash: KF1ZZRDIUmGyckSqWwdj9ExuhqrTgRnz+VjjGnpvYYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:3f:cd:7e:9d:e1:b6:ec:12:a0:25:c6:b0:93:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Nov 15 12:01:14 2026 GMT
Not After : Nov 16 12:01:14 2026 GMT
Subject: CN=e0c484cffa97ec0cbd7cf4f225dd256d5c8a468e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:d1:1d:ba:01:c5:ec:3d:a0:76:67:95:e0:
71:bd:c9:7f:59:ff:59:91:d8:0e:dc:b6:97:06:cf:
5d:90:72:b2:b3:c1:15:76:7c:12:8b:a6:68:80:41:
6d:3e:40:95:6f:91:a7:10:15:c2:8a:f8:a8:ef:18:
39:cd:8b:1b:18:6f:14:16:f2:ef:b3:79:fe:82:58:
d5:cd:1b:cb:13:37:e3:a9:98:67:57:3e:fa:3e:39:
a1:57:c3:9d:eb:91:0a:fe:4c:2b:94:58:02:97:44:
92:93:f9:92:09:44:44:0c:56:d7:b0:60:8e:95:cb:
d8:10:1a:ba:29:7b:60:51:18:2b:15:db:1a:19:37:
95:26:55:55:f6:69:90:03:b9:86:29:2c:3a:17:65:
b4:33:1a:3d:6b:09:10:b2:c4:20:8a:bc:15:7f:81:
c3:43:60:3e:5e:c1:3b:ed:3e:9b:14:3d:5b:d5:f5:
38:17:ec:99:79:04:3f:61:81:a8:49:74:67:1e:82:
22:6b:61:11:8c:d4:bc:72:2f:16:7e:1a:49:ef:5a:
c0:6c:35:54:89:cd:5b:78:d4:35:7c:9b:28:07:60:
d3:2b:0a:16:b8:14:0e:40:65:06:2c:07:d6:45:3d:
f0:45:d9:c1:bb:fd:d5:6e:39:ad:c5:53:6d:d2:30:
9c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C4:84:CF:FA:97:EC:0C:BD:7C:F4:F2:25:DD:25:6D:5C:8A:46:8E
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c6:25:df:fd:f0:ae:d9:35:7a:45:fc:3f:6b:b8:af:0f:7c:
42:3a:4e:9c:bc:58:bc:28:a3:8c:85:78:af:f5:ef:59:7a:89:
94:fd:4a:e9:1f:e0:c5:4b:5c:47:fc:22:70:b8:ea:4e:e7:79:
3f:de:f9:d5:25:71:53:59:01:26:4e:f0:71:76:43:17:09:67:
18:04:d4:b4:a8:8c:3b:3e:bc:cd:67:e5:c2:f3:14:bc:6d:0f:
c1:3e:f2:ec:be:57:8a:da:58:ac:2f:65:a8:8b:31:86:a8:72:
3e:92:cb:fd:a4:be:1d:04:43:aa:c2:6c:9d:80:37:23:d6:88:
ce:15:f5:9a:3f:22:a3:75:ce:d6:ac:0d:48:e9:8a:b5:ea:a4:
52:5c:6c:c4:25:d7:1d:45:dd:c7:82:1f:4e:a4:30:9a:e5:0b:
9f:66:64:49:86:cc:fe:3b:03:21:3b:53:fa:f0:10:7c:0c:cf:
0d:ab:28:de:d8:13:7c:e2:84:5d:0e:34:fa:c3:54:f0:97:61:
2e:47:a0:c9:9d:20:27:04:cc:75:44:93:3d:8c:b6:d1:bd:a3:
45:b5:73:d0:e3:07:cf:c7:e6:18:5a:dc:8f:1e:6b:79:d9:9f:
46:03:c3:4f:52:e7:45:48:57:2f:84:71:d5:e5:99:6e:18:52:
7d:b4:8f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:06:37 2026 by rpki-client