Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: zjKDKyQoIaTJbMaHHf4GkvXQPy2iVX38DIOw50+2dks=
Subject key identifier: BE:1E:6B:F8:86:21:40:E2:74:D7:84:D3:75:24:8C:71:DF:12:C3:61
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 01A1046E04156231F8969498FBEA16CE8F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 1922
Signing time: Sun 04 Oct 2026 01:01:21 +0000
Manifest this update: Sun 04 Oct 2026 01:01:21 +0000
Manifest next update: Mon 05 Oct 2026 01:01:21 +0000
Files and hashes: 1: 9Nl9UE6iQ8BzYdxl7G-kytsnGM0.roa (hash: DwCSayZkRcTecU+QYNWzkQO84K94CzpgnweIdh3T7XA=)
2: ENI7Z5yBr-3vmabr7x8Oqv2rU3k.roa (hash: SYbuwV9RF98H2wnwET3rqVG/OV1l8TgwPl32TdMZOp4=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: cacna4nzN6UaduHcOAakO75DExXUISD8QNzH4YraCh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6e:04:15:62:31:f8:96:94:98:fb:ea:16:ce:8f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Oct 4 01:01:21 2026 GMT
Not After : Oct 5 01:01:21 2026 GMT
Subject: CN=be1e6bf8862140e274d784d375248c71df12c361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:4c:07:b5:d2:e2:e4:9c:25:01:bd:ad:49:
b0:8d:d2:f9:5a:c1:13:24:b6:fc:5c:b3:98:77:16:
e6:1b:72:93:d0:0b:d6:84:d0:1a:7c:86:2a:c9:95:
e7:2b:34:73:08:19:06:03:7f:7e:5e:d1:c3:d4:83:
d5:3c:34:aa:a7:d4:7e:ad:eb:19:1f:95:f4:58:4d:
4f:bf:6a:52:a9:4f:de:6a:e9:c5:d6:88:6e:16:55:
52:5c:f6:5b:0f:a5:37:f6:ac:49:71:15:b9:b7:da:
13:66:05:4b:56:5b:b0:37:47:f3:c8:12:9d:b0:96:
c2:2b:b3:af:c7:fa:90:c1:cd:28:9a:98:01:7a:83:
b6:67:36:b1:df:2f:ed:5f:f3:1a:70:cd:ee:f5:c1:
fd:c6:e0:2a:66:61:18:8b:eb:bb:96:c0:66:ed:52:
39:8e:cd:b4:e3:b9:9c:b9:ba:4e:28:a0:df:4a:e0:
bd:13:2b:c8:76:5c:f8:8a:ad:6f:4f:dd:79:36:3d:
a5:1a:6b:8c:7d:d0:f6:59:1e:34:9c:a7:64:54:8e:
2f:82:00:d1:2b:15:3f:30:af:e4:31:42:be:65:31:
5e:e4:03:29:86:09:52:1a:bb:da:55:9b:29:dc:94:
68:97:05:07:3f:ad:80:8f:2e:c6:df:60:4e:7f:03:
17:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1E:6B:F8:86:21:40:E2:74:D7:84:D3:75:24:8C:71:DF:12:C3:61
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:82:a6:35:82:6a:e2:ef:e1:46:25:14:fd:ed:aa:9a:31:fc:
47:b6:d6:60:08:e8:0d:2a:03:ff:b3:0c:15:1e:75:87:f4:05:
02:dc:66:f6:1f:ff:32:d6:0b:e0:dc:08:fb:0d:cb:ac:e1:f7:
58:bd:f4:de:0f:ed:8a:ab:94:b6:54:7e:16:29:ec:d2:70:e2:
4c:24:10:f2:99:48:01:37:7f:6e:ab:8f:9c:6f:42:40:08:cd:
8f:01:66:3c:21:e1:92:8d:cf:f6:bf:49:8a:cf:cf:f4:5d:af:
b7:c5:8d:8c:24:68:e1:3a:80:d1:aa:cc:7f:c6:59:1c:a3:df:
9b:2a:62:40:39:f4:d2:76:e6:a5:e6:34:6f:29:86:2e:d8:22:
a8:40:23:c3:32:bb:cf:32:b0:65:e7:7b:8e:b1:9b:27:1c:5b:
17:e0:ca:a8:f0:b5:a8:3c:01:85:34:af:76:28:85:d3:0d:6e:
fc:6d:5d:94:ad:35:ca:48:9e:43:8b:7d:25:8e:e9:47:d3:b7:
d6:ce:6e:aa:03:db:6f:3e:7b:5b:97:06:b9:b5:a7:06:7c:a4:
68:d3:c3:42:94:b8:a2:25:7b:f7:3f:9e:de:6f:cc:de:50:f1:
27:0d:2e:dd:e9:43:80:10:da:55:f6:19:5a:e9:74:e9:86:5f:
fc:a4:3a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:43:38 2026 by rpki-client