Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
File: yiAvZExIQuX41ATgaJ-B9SwVS1E.mft (raw, json)
Hash identifier: eN+Uz662t/ZlDEMHg3WW/vUWBLBy+L/uc+c+jYZ39ic=
Subject key identifier: 9D:DC:4C:AD:35:ED:66:16:7F:05:0D:5A:30:08:67:9C:D7:8C:05:B6
Authority key identifier: CA:20:2F:64:4C:48:42:E5:F8:D4:04:E0:68:9F:81:F5:2C:15:4B:51
Certificate issuer: /CN=ca202f644c4842e5f8d404e0689f81f52c154b51
Certificate serial: 01A1DE7152E1B474AA64B2C52C812F277F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:02:10 +0000
Manifest this update: Sun 15 Nov 2026 09:02:10 +0000
Manifest next update: Mon 16 Nov 2026 09:02:10 +0000
Files and hashes: 1: RrGxYN2h_N_Vx45aQWWvFqoM3rA.roa (hash: NfGzv+ISe2v5iqjEcKNdZo4d+WrQJS0vL5wyjnXNlGQ=)
2: yiAvZExIQuX41ATgaJ-B9SwVS1E.crl (hash: GE3kghv0INTKZpkxODd1aNvb5y1tV6Ao1IBgnf+vUMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:52:e1:b4:74:aa:64:b2:c5:2c:81:2f:27:7f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca202f644c4842e5f8d404e0689f81f52c154b51
Validity
Not Before: Nov 15 09:02:10 2026 GMT
Not After : Nov 16 09:02:10 2026 GMT
Subject: CN=9ddc4cad35ed66167f050d5a3008679cd78c05b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1e:53:4a:98:dc:b2:be:25:ec:9c:d3:66:dc:
2a:d3:d3:cf:23:86:80:80:c6:02:a5:15:82:1e:d3:
b2:be:e1:46:17:ac:f1:d3:7f:5a:a1:4b:02:6b:21:
2c:1c:70:f0:27:29:60:04:7c:33:ca:e5:1c:ac:03:
c3:58:a2:6a:4f:26:cc:5b:b2:ea:46:61:ee:4d:db:
de:28:2a:1f:96:0e:74:cf:1f:7e:d8:dc:4a:61:1a:
0c:65:70:8f:e8:84:f5:65:39:f4:cc:07:26:35:d1:
7f:01:fb:6d:63:e9:54:67:be:c3:90:94:e3:2c:56:
16:43:27:68:9a:94:77:ea:f1:24:b1:42:17:67:c2:
39:cb:8e:b2:bd:c6:00:5c:87:d0:c8:fe:26:57:10:
41:2c:e0:df:86:92:6a:53:eb:b6:c1:7a:37:dc:3f:
07:94:e2:00:e5:57:cc:58:7e:34:b7:1e:e8:85:3e:
07:1b:6e:02:63:27:a8:31:89:91:09:fc:d7:3c:be:
41:83:85:3f:c1:f8:ff:ff:03:80:b6:7a:9c:d3:e1:
20:db:38:ac:cc:45:06:9c:bb:ba:32:21:d9:7f:1f:
06:27:c3:c5:a7:93:64:a6:ef:7a:55:dc:38:ed:73:
12:c2:a0:85:4a:36:7e:02:c8:db:67:b7:44:e5:fb:
0a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DC:4C:AD:35:ED:66:16:7F:05:0D:5A:30:08:67:9C:D7:8C:05:B6
X509v3 Authority Key Identifier:
keyid:CA:20:2F:64:4C:48:42:E5:F8:D4:04:E0:68:9F:81:F5:2C:15:4B:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:24:cb:14:c8:43:2b:c7:16:c2:51:53:4d:df:ed:67:1b:7f:
52:7a:5a:5e:52:58:43:42:f3:21:d9:5c:09:48:f9:98:c4:4b:
d2:1d:e5:11:29:ba:5e:f7:5b:9c:90:6a:d8:dd:96:87:79:43:
17:eb:3e:6c:a6:56:f8:62:e7:48:ae:7f:80:48:c3:7e:83:82:
a5:7f:2b:b6:e5:e5:58:4d:b0:16:91:74:a6:29:76:59:57:f0:
cd:0e:9b:3b:e4:2f:0c:fa:59:33:1d:82:b7:6d:11:2f:69:fa:
f1:f4:d8:d1:ab:7e:9c:e2:a1:e2:6c:a6:c5:8a:74:93:a1:51:
db:02:2d:5d:32:02:d2:3e:db:bb:e2:c6:89:2e:6d:db:4f:96:
9b:7d:7d:ec:8a:93:c6:c0:7f:0b:a8:33:8c:ca:0f:61:f6:4b:
db:c5:53:54:2a:2b:a6:08:12:72:41:43:c4:f6:b1:a2:b4:3c:
45:d3:1a:9c:15:71:02:16:d6:19:80:2c:77:e8:6c:3c:b0:ba:
5e:60:65:4b:f5:d6:fd:98:31:be:20:87:84:6b:1a:a5:58:73:
eb:ef:6f:ec:0e:36:c0:43:95:56:d0:33:1d:07:43:0e:d5:69:
60:61:a2:43:71:47:07:ed:8d:e1:c2:1f:d0:78:e5:ca:dc:cd:
c8:17:cf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:11 2026 by rpki-client