Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
File: yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json)
Hash identifier: 4fa5KgLN0EWQScEqES1G4HET7OQLNnf4Utwz0+wO0xs=
Subject key identifier: A1:25:D3:56:78:C8:D5:1D:97:C7:7E:B2:65:5C:3E:35:87:88:8C:45
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Certificate issuer: /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial: 01A1DDCBB584D7685BF724C571CE0459B96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
Manifest number: 10B1
Signing time: Sun 15 Nov 2026 06:01:17 +0000
Manifest this update: Sun 15 Nov 2026 06:01:17 +0000
Manifest next update: Mon 16 Nov 2026 06:01:17 +0000
Files and hashes: 1: cN4RDtGLM5l2DvX_T4i1shDStCU.roa (hash: yvuehCFR0SYwl9RZeEUmpN0/FZZPNS0ZYV+AhmYhkto=)
2: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: N2V36UNNIjuYVGST3GdACxJ0yDoxrM8S6hnXuvF6UZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:b5:84:d7:68:5b:f7:24:c5:71:ce:04:59:b9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Validity
Not Before: Nov 15 06:01:17 2026 GMT
Not After : Nov 16 06:01:17 2026 GMT
Subject: CN=a125d35678c8d51d97c77eb2655c3e3587888c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:fd:0c:76:34:4b:57:7f:04:a1:ed:3b:40:
c9:bf:2e:4d:fa:bf:c5:e3:8f:a2:96:20:8a:09:ed:
f9:09:9e:84:85:da:86:c0:ef:92:cb:93:af:3f:cf:
bd:47:c0:a9:67:9e:0a:10:c5:7b:0c:81:d5:de:ab:
41:44:f1:b2:2f:b8:b9:de:65:73:d6:91:a5:5e:51:
84:b1:c9:09:e8:60:65:bf:ad:65:bd:90:af:12:99:
a0:68:58:85:0f:0e:96:5d:f4:3c:32:d3:49:25:fc:
b3:9a:58:3f:36:62:7f:a5:a5:8b:e2:76:2b:c5:6e:
96:17:f9:1a:0f:76:58:af:cb:59:b3:f4:ac:3c:dd:
24:93:92:bc:de:31:d8:2b:18:51:35:c8:a6:60:17:
1d:e2:42:84:2b:ad:c8:04:0b:83:43:2a:e2:82:42:
4f:7f:a6:2a:d8:dd:67:91:83:19:2e:2b:d6:ab:aa:
71:ff:60:f2:94:e6:fa:b3:9a:bb:44:8d:b0:2d:ee:
f8:35:08:92:c8:de:b4:82:3f:52:77:d0:a9:73:03:
24:94:2e:58:be:d5:d9:10:44:aa:74:48:2a:cd:51:
cd:9b:8e:7e:89:f0:f1:41:53:8f:11:3b:60:dd:f1:
85:b5:46:e6:ce:57:92:0b:fd:1a:ea:8c:9c:33:fe:
e4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:25:D3:56:78:C8:D5:1D:97:C7:7E:B2:65:5C:3E:35:87:88:8C:45
X509v3 Authority Key Identifier:
keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:28:69:cd:76:2c:d8:f8:ac:42:cb:ec:1e:5d:21:8f:d1:78:
0b:a2:ed:30:23:aa:b8:7b:93:9b:02:45:6e:ff:a8:70:77:2a:
ef:27:42:ad:9b:d8:42:f2:7c:e2:59:af:81:11:c4:1c:70:10:
41:59:fa:7f:b1:d0:d9:f0:b2:45:f6:e5:fd:b4:cb:b3:c1:dd:
8a:2f:02:3d:9f:3f:64:81:65:5c:92:53:d5:97:2f:c1:b4:5f:
e6:79:8d:43:77:ed:63:94:6e:83:bf:86:f6:24:74:05:e6:08:
ab:2a:e5:b4:08:5f:4b:11:6f:e8:79:7c:d8:49:a0:26:95:7b:
56:87:d5:f0:5e:9b:84:c9:be:56:e8:3b:ff:6a:01:88:7d:fe:
ad:4e:5c:b0:c0:07:85:4f:fb:fa:db:17:80:b4:62:dd:3a:95:
56:c5:17:d2:0b:4f:50:20:0d:e7:1b:6e:79:2f:37:9e:ab:e9:
f1:c1:d7:6d:9f:9b:25:48:c3:d4:73:e5:d5:ac:ee:71:6f:e3:
56:e3:43:49:3f:60:0a:82:39:37:58:ff:2b:9c:d2:a3:13:72:
77:c9:ca:f8:8e:9c:0f:73:ab:b6:7f:c9:5e:99:67:fb:1e:74:
3e:e4:7d:f1:1c:14:9a:df:44:02:91:44:4f:a0:08:7c:8b:51:
00:3a:e8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:35:59 2026 by rpki-client