Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: DdhdFt8FC2P8NeEDczlBacmULJ+I/WszmABRWkhSvXA=
Subject key identifier: 18:06:95:64:2C:EC:6B:84:2F:FB:59:10:F6:70:23:99:24:DD:F1:85
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 01A0E399593CCB6E22BC9526FC8F49BE7320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 1911
Signing time: Sun 27 Sep 2026 16:01:12 +0000
Manifest this update: Sun 27 Sep 2026 16:01:12 +0000
Manifest next update: Mon 28 Sep 2026 16:01:12 +0000
Files and hashes: 1: 9Nl9UE6iQ8BzYdxl7G-kytsnGM0.roa (hash: DwCSayZkRcTecU+QYNWzkQO84K94CzpgnweIdh3T7XA=)
2: ENI7Z5yBr-3vmabr7x8Oqv2rU3k.roa (hash: SYbuwV9RF98H2wnwET3rqVG/OV1l8TgwPl32TdMZOp4=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: VW4l3UqMEYzTx03HdpnmYJAMfVAAc4uGKYgA1fUoFNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:59:3c:cb:6e:22:bc:95:26:fc:8f:49:be:73:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Sep 27 16:01:12 2026 GMT
Not After : Sep 28 16:01:12 2026 GMT
Subject: CN=180695642cec6b842ffb5910f670239924ddf185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:32:d8:61:fd:01:88:89:fe:52:79:40:31:
1e:a0:85:dc:61:1f:9e:e9:57:b3:72:df:17:cb:c7:
19:d4:23:7a:dd:96:b6:50:c2:cf:d5:fb:7d:36:87:
b4:f8:67:a5:7c:ed:eb:1d:31:e0:76:be:e7:68:6d:
a7:a0:ef:7a:ea:44:57:87:e7:9d:35:ac:fc:f3:6e:
50:74:cd:78:08:de:f4:09:6f:86:af:3b:8e:23:0e:
51:26:22:bf:c7:1c:97:dd:eb:df:ee:58:0b:4c:18:
db:f2:6b:8f:1b:ef:22:57:2f:29:e1:4e:c2:88:40:
79:1e:00:91:a2:62:2e:37:cb:88:45:fa:62:37:9f:
57:43:b1:c0:a3:c2:0a:3f:f3:55:f1:b0:ac:fd:c2:
30:c5:07:c8:b2:7e:14:7a:f9:68:9f:5e:ff:a9:e6:
d2:99:2a:93:50:74:d2:d3:10:c0:3d:b5:32:58:ec:
5a:2a:ae:61:25:98:54:52:f1:68:18:0b:c2:f5:b0:
1c:89:91:aa:75:6e:ee:3d:2d:03:69:88:3f:1c:e4:
00:a9:50:f6:0b:ad:49:e9:06:4a:54:27:40:8e:21:
58:f3:6a:48:d2:da:9c:9e:e4:57:02:0f:03:c9:70:
36:1f:a6:64:a5:ef:ac:9d:1a:c6:3e:6b:c1:3c:98:
36:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:06:95:64:2C:EC:6B:84:2F:FB:59:10:F6:70:23:99:24:DD:F1:85
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:61:4b:9e:42:d3:16:62:22:0d:03:27:7c:e1:9e:e3:c1:fb:
18:c6:37:b3:52:97:aa:f9:de:eb:be:d0:13:6e:e8:d4:3a:98:
40:9c:ca:6a:07:ac:4e:9d:34:a0:14:9b:77:7f:28:96:42:61:
40:9f:b9:7a:93:fe:5b:db:e2:0c:b4:2d:9e:03:a4:75:40:16:
a6:51:73:dd:01:51:27:a7:05:bb:cb:10:94:6d:d9:27:93:53:
b5:c2:ac:3a:ee:f2:3a:19:52:3c:5e:09:ad:84:7e:8d:2f:97:
3b:6b:49:b1:1e:49:01:d7:7b:3a:30:08:f4:f0:68:46:e2:b2:
6f:1a:b7:4f:c7:89:75:3c:d8:7d:9e:08:1c:2d:3f:3a:fb:c3:
80:21:ee:1b:fc:71:8f:4c:34:ee:4d:ba:5d:5e:72:75:54:b5:
de:c1:3c:bf:b8:4d:fd:67:d7:c9:51:93:78:2f:5e:cd:21:f1:
f3:c8:ea:2c:e0:dc:70:d9:9a:f2:2a:18:3c:ed:c7:71:9c:fc:
43:80:48:da:cd:ac:46:47:f1:c8:71:36:bb:49:be:2f:90:6c:
5a:7c:de:9c:2b:7c:4a:28:14:57:b3:de:35:87:14:41:52:2d:
fc:5b:6e:eb:7b:c1:29:0c:b0:38:60:a7:05:14:ab:13:c3:52:
16:18:78:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 22:33:56 2026 by rpki-client