Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
File: YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft (raw, json)
Hash identifier: 3GpmCewo6njOZpuvHtTUFB1CeQuzjbcdxZUi+BZJFuU=
Subject key identifier: D5:EF:12:F2:03:17:76:95:B9:0B:A3:24:F5:96:78:C6:7A:95:C2:5A
Authority key identifier: 61:F5:FB:83:DA:45:58:46:EA:64:1A:A7:21:11:C5:FC:2C:7C:46:83
Certificate issuer: /CN=61f5fb83da455846ea641aa72111c5fc2c7c4683
Certificate serial: 01A1DD26FA624F5DBCAE1D1DEB0D396D64F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
Manifest number: 01BB
Signing time: Sun 15 Nov 2026 03:01:21 +0000
Manifest this update: Sun 15 Nov 2026 03:01:21 +0000
Manifest next update: Mon 16 Nov 2026 03:01:21 +0000
Files and hashes: 1: YfX7g9pFWEbqZBqnIRHF_Cx8RoM.crl (hash: xETLFr4SeouWaXTSwzBIUsqEFtwD/GBBSoYzYdbvAhg=)
2: r4vw3CV_1lGW-7JvXgWzIRjbm3U.roa (hash: 0TvJ5qpmjC4SexSyQHzjCW5fHWTpVt06kKMKKnnsoV0=)
3: w-zL9cm1eAuLHEkbGACu_Uty4Ws.roa (hash: 4C8sJjkhX9FkHPcP/da4C31h5T/IA24CkXSEegBHM68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:fa:62:4f:5d:bc:ae:1d:1d:eb:0d:39:6d:64:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f5fb83da455846ea641aa72111c5fc2c7c4683
Validity
Not Before: Nov 15 03:01:21 2026 GMT
Not After : Nov 16 03:01:21 2026 GMT
Subject: CN=d5ef12f203177695b90ba324f59678c67a95c25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:30:ed:fb:ef:fc:8a:89:23:08:9f:2c:cf:
1f:9b:9a:e9:3e:bb:46:6a:53:5b:66:1a:a4:93:d3:
13:ad:5e:7d:74:50:71:9b:c7:b4:b8:46:1b:df:38:
4b:74:f0:00:c7:a0:4a:3f:57:07:d4:10:b1:2e:cc:
08:c1:5e:b5:f7:7e:53:9b:a2:34:e6:90:d5:65:17:
34:99:91:1e:84:a8:c0:17:db:3c:0c:b1:af:fd:a7:
dd:33:77:1b:37:5c:8f:3e:ef:a2:98:ae:4d:5a:83:
71:d1:86:8f:04:3b:e3:82:43:87:07:01:02:a6:26:
18:cf:72:b1:ee:ff:3c:f8:17:bf:e0:11:f4:32:66:
53:7c:9d:33:33:5d:e3:10:6d:16:d5:e1:f7:84:47:
29:26:8f:3e:34:d1:b6:74:10:a4:db:c2:7a:2f:63:
80:7c:7e:3c:72:cf:71:93:a4:33:9d:ba:d2:ed:97:
ca:8f:33:55:d8:38:3f:1e:5b:53:4b:c6:94:89:51:
b1:f8:86:9d:c3:9a:39:da:95:dc:62:fe:e4:11:64:
08:57:fa:43:0d:54:72:49:a6:8c:c0:f4:00:23:8c:
d4:5f:54:88:df:21:a3:d3:14:0a:c1:b9:6d:98:9d:
92:f9:32:cb:57:79:5a:fd:24:2e:f7:5e:84:01:54:
60:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EF:12:F2:03:17:76:95:B9:0B:A3:24:F5:96:78:C6:7A:95:C2:5A
X509v3 Authority Key Identifier:
keyid:61:F5:FB:83:DA:45:58:46:EA:64:1A:A7:21:11:C5:FC:2C:7C:46:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3b:e1:be:d6:4b:39:c7:33:8e:51:37:cc:48:20:f9:b5:58:
57:92:5f:2e:28:b9:ac:15:58:24:76:0b:2a:ec:3f:48:11:5b:
8a:a8:2b:06:ef:f4:38:b7:d2:fe:d2:96:63:cb:66:3c:5a:00:
0e:82:79:02:0a:91:32:04:38:f9:d0:56:75:3e:ab:65:12:d9:
bf:f7:20:84:30:46:67:66:bb:3e:0c:a1:a7:9d:d0:93:68:1d:
87:6a:a8:2a:dc:08:15:af:ef:81:41:3b:bb:ad:e8:bf:34:b2:
23:c8:49:04:8f:a8:76:09:ff:82:93:06:1d:00:7e:78:e3:11:
5b:68:de:bd:d0:f1:a9:6b:5d:dd:b4:60:0e:38:04:c1:31:2a:
31:6b:29:07:5a:74:bb:0d:ad:6c:59:33:e2:2f:22:8a:c5:35:
02:cc:61:fc:66:8c:c0:ef:26:24:5b:a2:9f:1d:39:21:0f:25:
9f:be:05:5d:13:6d:74:5b:12:04:52:5b:57:5a:60:64:c9:95:
4b:34:0e:10:38:09:92:2c:3d:06:d0:ec:ba:cd:06:32:be:75:
f9:93:24:db:f2:82:1f:0d:fd:fb:f1:f2:1b:12:33:7b:77:c7:
ea:09:25:15:cb:a5:21:a9:82:57:81:69:a4:15:af:05:18:d1:
7c:3e:dd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:26:44 2026 by rpki-client