Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier: 72ABa/jCtAFpCehwWSLI9j57rZt1AM2Aadq4IET712g=
Subject key identifier: 66:E5:D8:C8:3D:DE:63:97:D4:E8:DD:68:D5:8D:C7:2F:9D:28:79:A7
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 01A1DE02B88D1111BFC8EE7FFEE6FF0DF8E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number: 0BA3
Signing time: Sun 15 Nov 2026 07:01:22 +0000
Manifest this update: Sun 15 Nov 2026 07:01:22 +0000
Manifest next update: Mon 16 Nov 2026 07:01:22 +0000
Files and hashes: 1: H1VE2ZkBqR8y9rnIA-ZTuzeFoCk.roa (hash: 3CEpvrN229vRpcqITP4Y01YD4936c1DOC0Lixuq0wEM=)
2: qRXAdJp0xbYo0FT6eucc0rsG8Yw.roa (hash: fUKa/Z+tq+35Z3GUfMU3rii79affOtxwZwlAfn3uJ6U=)
3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: /lRPYtVDgttVky3BngU8XxxU6DTl0lCUqjLS50NtOt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:b8:8d:11:11:bf:c8:ee:7f:fe:e6:ff:0d:f8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Nov 15 07:01:22 2026 GMT
Not After : Nov 16 07:01:22 2026 GMT
Subject: CN=66e5d8c83dde6397d4e8dd68d58dc72f9d2879a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:cc:1e:74:64:99:97:a6:92:6c:a8:94:23:
5c:11:a4:85:32:07:82:8c:e5:df:bd:83:bd:cd:ed:
14:1f:ee:b0:1a:df:b9:74:e9:03:b2:a7:f9:ee:62:
ea:e9:b3:3c:40:d4:9f:2c:1a:0b:5e:4d:4e:f9:f3:
14:52:62:f4:92:cf:ce:92:fd:97:25:8d:88:8b:de:
a6:f8:48:04:c2:72:1f:d1:8b:e9:5c:74:af:fa:08:
5d:86:3d:1a:f3:88:d7:32:c3:4f:43:35:bf:42:00:
9b:45:4a:e4:54:18:e6:b0:cc:ec:68:19:ce:de:78:
14:31:29:3b:af:09:f3:64:cc:72:d4:23:3c:89:17:
f7:5e:04:a0:fe:52:55:c2:b1:2b:e6:4a:f3:79:ed:
a0:91:4d:3e:45:1b:01:fb:01:33:c3:b5:82:da:57:
c8:ae:b9:cf:25:71:9c:ac:7c:4b:c8:ee:85:a7:6f:
3b:55:1b:61:6b:58:9c:af:df:e6:14:ed:b1:e9:15:
e9:cc:fd:0b:ad:2a:5c:a1:91:48:0c:ed:00:f3:79:
2e:4c:b3:95:ab:eb:e5:66:ca:5a:f4:1b:b3:3f:d3:
96:e2:12:08:64:0e:77:ce:a9:33:af:fe:b9:3e:62:
58:47:42:e5:6b:af:f1:b2:d3:e2:f9:b7:03:02:1f:
a2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E5:D8:C8:3D:DE:63:97:D4:E8:DD:68:D5:8D:C7:2F:9D:28:79:A7
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:25:8d:35:20:b9:10:b8:ed:c7:d6:dd:4d:03:89:9e:9c:15:
ff:6c:8a:5e:ac:2d:43:28:9e:10:85:c3:25:40:cf:46:44:58:
5e:09:92:a6:16:21:7d:67:2a:9b:94:a5:5e:14:58:0e:2c:46:
0a:e3:8e:f2:b6:40:c4:0a:38:15:71:10:43:bd:c8:97:d4:09:
0c:4f:19:35:52:65:2d:17:4b:19:df:2d:56:85:0a:57:ba:b4:
57:f9:35:b6:cb:9c:15:21:f6:6d:62:7f:af:be:e0:53:4e:fb:
a3:4f:29:dd:96:c7:2d:6c:46:5c:d8:94:69:f1:88:14:2c:15:
21:84:28:1c:60:7e:ed:30:3c:92:ff:d8:3b:3c:38:30:27:b9:
b3:9f:05:c4:b1:1e:0e:34:70:85:63:72:49:17:48:34:c2:23:
7e:ae:3d:11:cb:fd:0d:6a:4c:26:1b:e8:81:4b:d3:f5:2e:da:
5f:84:32:6c:81:71:f4:ab:6f:9b:ce:c8:f8:99:61:ce:84:30:
62:97:7f:a9:0e:6b:91:6c:dd:a5:ee:a0:87:a8:28:5c:dd:79:
8c:5c:24:0a:d7:a2:5f:a3:82:29:d4:bd:62:69:b3:33:f4:6f:
b0:f9:59:b2:20:bd:b0:d7:26:d6:34:1b:87:12:d8:47:98:b1:
07:fa:45:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:04:03 2026 by rpki-client