Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File: YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier: XPkQpz7xKAMEAZIl8jOIBwIX+1iz/Ac9p0ut22lVHfo=
Subject key identifier: E8:25:08:FE:8D:BF:86:97:D9:E9:75:36:23:E3:37:BE:41:B5:12:A6
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer: /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial: 01A1DBDD1198F9546F9032290CDDC7ECB06D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number: 1AF8
Signing time: Sat 14 Nov 2026 21:01:00 +0000
Manifest this update: Sat 14 Nov 2026 21:01:00 +0000
Manifest next update: Sun 15 Nov 2026 21:01:00 +0000
Files and hashes: 1: D8kmbrxGH990IEjHOfCChDR_0RI.roa (hash: av49JGDKCD6wMkJgxe4+rUguaf8/22rVV0DlSQeu/3g=)
2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: SkMnMa0CkTavj+T5++SvhwCBas7BqHyrJpIKkOhgkko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:dd:11:98:f9:54:6f:90:32:29:0c:dd:c7:ec:b0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
Validity
Not Before: Nov 14 21:01:00 2026 GMT
Not After : Nov 15 21:01:00 2026 GMT
Subject: CN=e82508fe8dbf8697d9e9753623e337be41b512a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:38:75:1f:d5:e3:1b:06:99:15:0e:53:24:
1b:90:04:20:3a:cc:7f:c1:02:7c:51:65:9e:66:08:
c7:1c:00:31:20:15:29:5c:dd:79:03:f2:18:09:a4:
79:7d:0d:b5:b2:b8:c1:99:03:65:0c:7c:4a:70:43:
68:61:e3:95:78:98:af:38:e9:2f:c9:22:5e:ec:92:
c0:5b:b8:81:6d:7c:61:39:24:f6:2a:5f:20:85:7b:
a1:95:78:f5:4e:a2:08:15:93:87:6a:6c:01:e6:c1:
c6:aa:e3:37:21:e2:49:65:7c:d8:94:6a:59:a2:d4:
c9:9c:a4:1b:04:5b:a5:7e:6d:b4:07:be:cb:b9:0c:
97:d4:51:ac:93:8e:66:ed:dd:04:f9:3f:d2:0e:1c:
5e:56:fa:ab:85:51:bf:f4:41:ad:b2:a3:6d:94:a8:
3a:7e:36:4b:2d:07:e8:6d:8b:7c:ce:22:c3:77:73:
87:83:3d:55:82:ea:91:4f:fd:48:c9:57:75:bd:5a:
f5:f3:1f:68:6c:a6:5e:89:bc:ce:e0:9d:5a:f1:75:
f7:df:5d:e3:a0:3e:2b:f3:e9:30:57:58:c3:7e:db:
d2:73:ea:f1:38:b8:18:32:7d:a1:88:83:6c:a9:84:
ad:2a:e2:7e:92:76:0f:a6:90:f1:ee:11:94:0b:47:
ab:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:25:08:FE:8D:BF:86:97:D9:E9:75:36:23:E3:37:BE:41:B5:12:A6
X509v3 Authority Key Identifier:
keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:56:d6:c3:a0:e9:ac:41:95:58:55:fa:86:35:b0:3e:9d:f6:
ed:9e:2f:26:23:ab:93:60:a6:f2:10:c0:c0:7a:9f:d3:9a:5b:
1a:2d:57:f6:a2:ee:d5:16:43:25:4e:85:91:b7:d8:d7:32:8e:
f7:30:d2:cf:9d:4e:e3:5e:98:48:65:59:9d:6e:58:26:0f:82:
4f:30:58:ed:72:9d:41:b0:d9:08:49:df:49:8e:b3:c7:4e:a0:
db:22:06:09:c5:cb:c2:e5:cb:65:7b:b8:86:df:a2:d9:8c:f7:
dc:75:93:b5:3f:8b:7c:86:9c:05:b0:ae:8b:11:f1:a0:42:b6:
1d:ec:a3:68:b7:c0:e1:08:0d:11:bd:76:a2:46:e1:f5:55:ca:
7f:00:b5:62:e5:ad:80:8e:61:b0:d1:f7:83:b5:17:b2:68:69:
5e:12:56:0c:be:58:b5:66:5b:67:13:ca:92:31:41:94:49:bb:
33:e6:37:51:20:de:46:b8:47:d7:ea:d1:07:82:23:fa:58:00:
e2:57:d6:f7:b4:ce:af:ee:05:bb:9b:79:62:5e:7a:f0:d5:db:
50:dd:01:ba:36:91:2f:a4:40:22:fc:b3:2d:12:ad:4f:87:fb:
90:7e:0f:ae:e0:72:a8:4b:fd:20:f3:f2:cc:c3:a9:51:19:fa:
57:80:10:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:55:30 2026 by rpki-client