Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
File: YET26nnk4qPgKos47QzTpAWROKw.mft (raw, json)
Hash identifier: 57ZaV6bGXDuzM/1ZvssfJ/CgaGvKw/PAF2TMjB+8dRI=
Subject key identifier: CE:7E:B9:83:3F:5A:F7:9A:74:B7:E8:CB:33:EC:A3:4D:85:E4:1F:EC
Authority key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
Certificate issuer: /CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Certificate serial: 0199FB4611C6026608A768B92EAB721C99AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 07:01:37 +0000
Manifest this update: Sun 19 Oct 2025 07:01:37 +0000
Manifest next update: Mon 20 Oct 2025 07:01:37 +0000
Files and hashes: 1: FpSNZXq3Bs_lAOfoxnm2_1Ntexk.roa (hash: P0ueHi3T6HBQ/Yjh4YAxSote8hQe/slz/U1OtoX8X6M=)
2: YET26nnk4qPgKos47QzTpAWROKw.crl (hash: /nx844NgjwRgJkds9+oRbQkxtFCOuCoKo97JeQX3TvQ=)
3: iOzGDAy-qErjiYCUQPq5S2xsHRA.roa (hash: EO5Nyg7UrTNVSVoeALt1d3217TiALMgeZ+f/YmIuYh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:11:c6:02:66:08:a7:68:b9:2e:ab:72:1c:99:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Validity
Not Before: Oct 19 07:01:37 2025 GMT
Not After : Oct 20 07:01:37 2025 GMT
Subject: CN=ce7eb9833f5af79a74b7e8cb33eca34d85e41fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a2:f0:67:a2:65:3e:bc:fa:4b:74:5c:e2:20:
2f:1a:05:ff:c0:19:fa:bd:c1:4d:a4:91:2b:b9:30:
61:48:6c:cd:d1:47:f4:9c:22:e5:1c:42:1d:07:5e:
59:56:78:be:75:f0:6e:ae:c2:a3:b0:66:c5:c1:80:
ca:87:98:c0:99:f5:0b:3e:0b:f0:66:74:79:2b:36:
82:82:23:9a:e3:16:3d:f2:39:c4:f6:2c:9e:70:67:
f8:e0:07:76:3d:8d:8a:fc:77:bc:73:c9:76:62:b6:
58:83:1c:64:79:f8:52:65:9a:04:6f:99:7b:5a:fe:
29:40:6d:31:c6:81:da:7b:b1:3b:fb:90:fd:29:72:
85:c9:73:38:e4:b3:f6:45:bc:ad:7a:8f:10:59:22:
3d:50:f4:d7:4b:1c:c6:cd:42:4b:db:9b:53:22:10:
3e:38:e9:e7:00:ac:c2:68:8e:56:85:4d:e4:3a:1e:
c5:bc:6d:23:e1:df:9f:39:ad:51:71:72:83:1d:b3:
ae:8a:67:9f:18:b1:25:80:56:a5:eb:3c:25:c2:12:
4f:5a:93:28:6f:82:7d:65:ed:6c:cf:73:48:c0:40:
4b:3b:f1:28:86:6a:ef:cb:ee:dc:c0:98:6e:8d:4e:
c0:10:32:31:09:2b:06:ef:76:81:b7:27:5d:31:17:
94:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7E:B9:83:3F:5A:F7:9A:74:B7:E8:CB:33:EC:A3:4D:85:E4:1F:EC
X509v3 Authority Key Identifier:
keyid:60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9a:1a:fb:22:00:ba:10:65:c6:e5:0d:36:02:8f:61:02:f2:
32:8f:ab:76:78:3c:9a:d3:15:4e:bb:56:d6:e4:d8:9f:43:fe:
82:8e:0d:eb:59:47:d7:73:9b:66:cd:26:72:2a:da:c9:99:f5:
ba:f0:85:f9:da:5f:c0:fe:82:33:8a:51:1d:57:c3:92:79:1e:
a3:14:47:23:69:70:b7:d2:30:73:42:fb:99:f1:80:c6:c2:ee:
42:aa:d5:b4:4d:df:96:95:12:05:ae:d3:fb:32:6f:2e:fc:79:
a0:7f:8f:d8:e3:1a:1b:86:f0:7c:da:40:4f:2b:6a:eb:9e:3e:
c2:de:ba:1f:ce:cb:f9:4e:20:65:03:af:65:fc:e9:a5:d9:c1:
84:15:99:67:29:08:f0:85:c1:65:43:f4:a9:ee:f2:8e:d1:f7:
4b:7f:96:6b:93:c2:91:33:06:d1:13:d7:3f:fd:a8:14:f3:73:
78:7b:66:b7:b3:04:7f:4f:10:1c:8a:43:a7:ff:4f:5c:4e:15:
77:c3:0c:a8:f1:3c:21:e7:d2:c9:2e:60:31:9e:47:97:65:4b:
db:f9:e4:49:16:7e:3d:f2:fd:f6:3c:b2:18:85:4a:ce:88:68:
06:a7:62:15:83:31:44:cc:53:ca:9d:37:46:a6:65:3e:be:09:
67:53:14:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:30 2025 by rpki-client