Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
File: YTdPxOqwDUHB7uR_37ABB4x0-oU.mft (raw, json)
Hash identifier: lu5QyuHVApwM9wjaLfrtfSfkYOw/noG5oRkGp9ORgAc=
Subject key identifier: B6:29:20:63:E8:09:8C:42:AB:A0:7E:A9:06:DD:E3:0E:A4:0C:25:E5
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Certificate issuer: /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial: 01A1DE707AD7E56C34F1B1A3901C748BB067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
Manifest number: 0A47
Signing time: Sun 15 Nov 2026 09:01:15 +0000
Manifest this update: Sun 15 Nov 2026 09:01:15 +0000
Manifest next update: Mon 16 Nov 2026 09:01:15 +0000
Files and hashes: 1: HT5OhOqJdYdBbXBwQ3VQ1GpVIFs.roa (hash: u6C6SIGOiLQCTdX2uMjNGg6NhfkwgvQOTMzRPzekqCs=)
2: YTdPxOqwDUHB7uR_37ABB4x0-oU.crl (hash: iKx1bM1ilpLzSHfn6kBF5W+iud+QibmkURbNYh6sDS4=)
3: fdeG7TbijoItYpXy1D7uc-AVK8Y.roa (hash: nS+LEhm0a6oObGQ8VDam0gU4Ac1dG0xV5Lvd6Flgfv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:7a:d7:e5:6c:34:f1:b1:a3:90:1c:74:8b:b0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Validity
Not Before: Nov 15 09:01:15 2026 GMT
Not After : Nov 16 09:01:15 2026 GMT
Subject: CN=b6292063e8098c42aba07ea906dde30ea40c25e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b0:ba:18:11:86:a5:73:16:a8:15:24:8e:f0:
aa:c6:e3:ee:5f:78:74:61:7b:45:68:a4:47:72:35:
35:b2:2f:8d:89:a5:96:47:f2:eb:c1:ae:a5:5b:48:
7c:fd:7c:0e:3c:e4:27:e3:da:1c:22:c5:39:6e:0d:
d9:da:87:99:0b:b1:b2:52:95:6e:31:6d:85:b4:58:
62:ae:95:27:8e:31:c9:9c:3e:9f:18:3d:b0:b1:89:
2a:c6:df:61:ad:65:bf:d3:1f:62:de:e7:c5:de:67:
dc:31:4a:b8:af:08:75:1d:f0:d5:8b:33:b1:d0:21:
f5:f7:2e:67:e5:1a:fa:bc:d5:01:fe:41:77:cd:c1:
c8:8d:03:07:8d:13:05:2d:53:45:87:e0:c7:16:d7:
25:ec:38:82:0b:b1:4d:61:29:f3:d7:8c:38:2b:70:
9e:e9:4d:e5:03:44:57:78:de:79:29:9a:b7:25:36:
aa:2d:28:e3:ca:47:4d:5d:87:48:cd:e9:18:49:5e:
a6:b1:b3:a7:90:1d:bb:c1:93:b5:42:ba:75:26:c5:
fe:9c:dd:49:09:e0:0f:ac:c4:6e:fa:d2:da:58:e4:
9e:20:48:94:5e:5c:d4:cd:13:7b:5c:b0:d5:b4:4b:
c9:3a:7d:d5:fd:17:97:86:a1:d8:79:fb:5c:94:1d:
d3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:29:20:63:E8:09:8C:42:AB:A0:7E:A9:06:DD:E3:0E:A4:0C:25:E5
X509v3 Authority Key Identifier:
keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:9c:f0:46:73:9a:87:bb:be:3c:20:b2:67:c7:5a:d0:92:88:
c7:29:bd:5a:ae:d0:05:76:e9:e1:65:c0:70:f3:cd:80:6e:91:
fe:f9:11:fb:98:74:90:d0:8a:45:3e:7c:a5:07:b0:3d:b8:c3:
6e:c1:06:5f:3a:02:b2:df:a2:ab:65:27:9b:45:49:48:e6:b4:
47:83:d5:ad:9f:a1:5b:cd:cc:29:94:65:95:bf:6c:77:d1:01:
2a:08:86:4d:70:89:a1:d8:0d:e6:98:95:05:02:ed:56:b2:57:
f1:c4:54:18:8f:ad:51:5f:c0:4a:24:25:53:f5:34:75:2d:96:
88:81:92:a2:73:21:ec:60:e1:9a:c9:95:ac:27:8e:75:b4:dd:
77:1f:fa:d6:aa:20:a1:f3:a4:24:98:4d:6e:6f:4c:2e:a8:a9:
80:36:8a:c8:31:d9:0e:fc:5d:68:4c:38:00:a1:13:b6:16:67:
cd:f2:ec:eb:d9:43:06:0e:22:2a:e8:04:90:ac:8b:97:31:1e:
6f:3f:bb:b4:bf:35:63:92:8a:c9:10:ff:28:a8:86:e9:49:01:
36:67:35:26:9d:7e:bc:02:c3:f7:41:0e:48:e6:96:5f:e7:57:
c8:3a:ef:eb:0c:1e:21:08:6c:c1:42:dc:a0:a4:fa:3a:af:0e:
da:45:96:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:56:17 2026 by rpki-client