Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
File: YE1FsSrOCsIjA-08d5S4MGpqtbA.mft (raw, json)
Hash identifier: t+jdDujCYI7dAA6iHxdK2juLrxA/49iDlV4Tfm5/fHg=
Subject key identifier: 66:17:97:FC:CC:36:6F:DC:5D:A8:22:9E:AA:82:B3:6A:56:6E:8B:7A
Authority key identifier: 60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
Certificate issuer: /CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Certificate serial: 01A131EB3C388E652C57C71A3863564BE524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
Manifest number: 1A2E
Signing time: Mon 12 Oct 2026 21:01:02 +0000
Manifest this update: Mon 12 Oct 2026 21:01:02 +0000
Manifest next update: Tue 13 Oct 2026 21:01:02 +0000
Files and hashes: 1: 6yggvTE1BpMD_6DUp59i_E9q_ec.roa (hash: j6H31l8Cy0P+NhoECNSn3tX4DXbCQPFUlGEVGEcQnDk=)
2: YE1FsSrOCsIjA-08d5S4MGpqtbA.crl (hash: X2PTpbF2Ezf++zkdbciwjybjrrYrPjJhoXaZu0Easy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:eb:3c:38:8e:65:2c:57:c7:1a:38:63:56:4b:e5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Validity
Not Before: Oct 12 21:01:02 2026 GMT
Not After : Oct 13 21:01:02 2026 GMT
Subject: CN=661797fccc366fdc5da8229eaa82b36a566e8b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:7b:3a:0e:bf:6c:f7:e1:00:69:c4:52:08:
e3:d8:fd:a9:9c:16:15:d4:30:82:c8:7f:2d:2b:22:
9e:a4:f5:8f:d2:c4:31:f4:2b:13:46:08:c1:b2:d0:
1b:75:57:01:9b:4f:ce:f2:36:13:fd:e2:e8:b5:f0:
dd:bd:47:b1:9c:4f:88:cc:3b:56:02:3b:be:59:a0:
95:d2:bf:46:a2:f4:47:a8:dc:a0:b0:df:25:b9:3c:
fb:08:f7:2e:f0:14:27:53:72:f4:37:de:57:b8:41:
cb:87:3c:44:14:8f:2c:a1:78:21:0a:c9:6b:20:30:
59:88:6c:ca:f1:8b:78:4f:03:23:0b:27:57:c2:51:
b7:41:8b:9e:d0:f1:f0:d6:80:a8:05:0c:b9:e4:97:
35:7b:91:f7:e4:bf:27:cf:1d:4b:c9:4e:77:1e:83:
27:cd:13:a6:9f:09:7f:5a:17:1e:2a:09:84:55:21:
e4:05:2d:cf:a7:00:03:7b:b6:ee:96:84:3e:5d:04:
54:3e:19:1b:16:74:2a:50:b5:90:ec:a8:4a:f2:14:
c1:e4:03:8e:dc:97:47:f4:c7:f2:ed:08:c3:d5:da:
d6:aa:a1:15:92:b8:cf:64:2c:c1:96:3b:af:ec:75:
61:4d:1c:89:08:71:85:1d:e1:b1:79:44:9b:92:34:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:17:97:FC:CC:36:6F:DC:5D:A8:22:9E:AA:82:B3:6A:56:6E:8B:7A
X509v3 Authority Key Identifier:
keyid:60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1a:52:ef:f2:43:7d:7b:a4:3a:c3:67:ac:63:7c:57:44:18:
84:8f:8a:73:ce:76:39:f0:e5:f7:16:03:92:6f:53:1f:fc:a0:
14:04:73:9f:52:77:d6:33:02:b9:d9:29:4c:a7:43:c8:ee:f5:
17:db:87:f8:6f:6e:e8:8f:bd:30:b3:5d:01:40:92:45:2e:10:
da:f1:84:c7:65:a7:5c:3d:c5:ca:a2:b6:6d:c0:ea:90:41:b4:
09:c5:1a:d0:95:0f:e0:cb:74:a3:a1:eb:11:2f:df:23:61:55:
48:0b:ef:ec:c2:a1:c1:51:7c:65:25:42:d8:4e:89:35:55:76:
8a:88:55:bc:5f:8d:75:27:7b:af:7a:fe:f2:95:ea:42:b2:97:
40:65:4f:f1:69:c5:69:26:a7:2a:dc:60:b5:75:0a:fa:a5:d7:
a7:84:e8:11:ee:ee:f0:20:61:ec:d2:21:73:64:2c:98:ff:ba:
82:bb:3e:cc:0b:66:16:ee:f8:75:df:c6:20:f5:7e:75:d9:9a:
3b:bb:72:52:98:d2:85:54:07:c2:e4:ea:30:a8:e4:62:8e:81:
59:62:51:25:49:03:ae:60:2e:23:dc:f2:04:f9:8b:05:2b:f8:
04:23:9d:df:39:5e:f7:13:57:f9:44:40:88:b8:d0:d8:38:76:
2e:ab:22:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:58:08 2026 by rpki-client