Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
File: Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft (raw, json)
Hash identifier: 2gmG+dZQ6jy7/HY592tLK/U2Jqg9tknMTRxFevwq/fE=
Subject key identifier: 3E:F8:EB:6A:94:2D:E2:B6:16:8C:9D:BF:AF:E7:E5:10:A1:6E:6D:2F
Authority key identifier: 62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
Certificate issuer: /CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Certificate serial: 01A1DEA797E99892ECBD85DF5BF2A43688A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
Manifest number: 16B8
Signing time: Sun 15 Nov 2026 10:01:27 +0000
Manifest this update: Sun 15 Nov 2026 10:01:27 +0000
Manifest next update: Mon 16 Nov 2026 10:01:27 +0000
Files and hashes: 1: 3Kmog7cWFs6s3S45GoXvhR3Efno.roa (hash: Iqqkv/IBYj5OUDfgj+1rxohlVAnDwSEOY17mdlZvfIw=)
2: JVvCSDu8rrifYpO5MIC8vy1zrds.roa (hash: okxALFImBayqCq+MjZ+88HtUfnizSp2j3P1VuBRZTtY=)
3: Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl (hash: j4Xz660Neju1fSXYDjNJQ1qioHZGvUJu0zNblKs/ExU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:97:e9:98:92:ec:bd:85:df:5b:f2:a4:36:88:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Validity
Not Before: Nov 15 10:01:27 2026 GMT
Not After : Nov 16 10:01:27 2026 GMT
Subject: CN=3ef8eb6a942de2b6168c9dbfafe7e510a16e6d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:fe:d0:5e:4e:ef:bf:5e:89:60:81:12:a8:
bd:af:45:89:ed:af:6f:35:44:be:29:2a:f4:7f:be:
73:11:e4:46:f7:71:20:df:9e:31:8b:0e:fd:5a:79:
55:0c:e1:38:aa:e6:17:cc:27:45:11:e2:12:81:7c:
3a:18:5c:27:fc:15:40:18:2d:42:41:6d:6c:fe:6a:
b2:a6:78:6a:a4:5c:68:d0:c2:65:46:b4:6c:fd:3f:
d5:cb:af:04:26:4f:1f:a6:19:16:af:a5:15:51:26:
d7:12:8e:b1:f1:1e:8b:16:3b:ca:7f:da:01:4d:af:
51:b7:8f:2a:7a:99:fd:be:b2:75:e4:b3:cb:2e:53:
b1:a6:2e:0b:8c:5f:2b:b4:a0:8a:88:c4:d4:b5:c2:
cd:99:b8:f0:ec:ef:f7:5b:c0:0f:73:30:41:11:74:
21:df:ea:95:8b:dd:d5:5a:aa:cf:3e:77:80:ba:62:
c0:58:1b:0b:1e:2b:c9:6d:d1:08:4b:c0:fe:c5:ea:
c9:19:78:c3:ef:03:55:95:5f:64:56:8b:01:48:68:
2e:da:a7:86:60:90:a8:10:f7:71:60:83:02:24:45:
7d:ae:e0:8d:cb:2c:f0:53:75:9c:e5:b1:d5:b0:df:
75:c2:ed:a8:09:07:15:e8:33:1c:33:24:c3:24:7f:
a2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F8:EB:6A:94:2D:E2:B6:16:8C:9D:BF:AF:E7:E5:10:A1:6E:6D:2F
X509v3 Authority Key Identifier:
keyid:62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:9e:6e:60:a8:73:04:dd:74:2a:f7:d5:cb:f6:7b:6f:98:3b:
29:43:25:99:e5:8e:73:4d:fc:e7:d6:67:33:aa:03:fb:90:7e:
a9:63:f6:b9:ff:05:46:41:cd:16:a2:95:97:f4:33:4c:75:4e:
4f:59:3e:66:07:54:4d:19:63:f7:83:cc:1d:71:37:16:b1:f6:
2c:81:59:26:5b:b7:9f:b8:01:2f:96:c1:44:c7:68:1b:c9:a2:
c9:f2:7e:e5:d7:4c:29:99:41:62:5b:79:cf:f5:25:58:07:25:
64:b8:aa:ad:ca:e2:c0:23:7d:98:33:3b:18:7b:c7:69:89:c3:
dd:00:d2:fe:30:6f:0a:63:29:5e:c2:a9:23:1c:0c:6a:25:5e:
32:f0:ed:e6:75:23:3d:a5:cf:d1:83:71:3d:30:9c:7e:3e:1f:
63:49:72:32:01:d7:8a:8c:87:6f:d0:df:f7:cf:f3:54:ed:25:
94:26:92:5a:52:45:1f:b5:9b:33:39:42:fe:f9:38:86:a3:75:
0e:ab:72:5e:19:45:2e:25:70:ff:21:a0:1f:5f:c1:8e:f0:38:
a5:26:12:1a:43:c2:2d:1b:1a:80:d2:1e:a3:d4:5a:ab:b4:02:
37:97:fc:58:e6:05:c7:2c:f9:da:4d:0d:33:69:ac:93:ed:ec:
79:53:94:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHep5fpmJLsvYXfW/KkNoinMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNWI1Y2Y5ZTI5OTEyNDQ4Y2JiYmM4NmQyMDU2MTg5OWNk
YjEwNGQwHhcNMjYxMTE1MTAwMTI3WhcNMjYxMTE2MTAwMTI3WjAzMTEwLwYDVQQD
EygzZWY4ZWI2YTk0MmRlMmI2MTY4YzlkYmZhZmU3ZTUxMGExNmU2ZDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyir+0F5O779eiWCBEqi9r0WJ7a9v
NUS+KSr0f75zEeRG93Eg354xiw79WnlVDOE4quYXzCdFEeISgXw6GFwn/BVAGC1C
QW1s/mqypnhqpFxo0MJlRrRs/T/Vy68EJk8fphkWr6UVUSbXEo6x8R6LFjvKf9oB
Ta9Rt48qepn9vrJ15LPLLlOxpi4LjF8rtKCKiMTUtcLNmbjw7O/3W8APczBBEXQh
3+qVi93VWqrPPneAumLAWBsLHivJbdEIS8D+xerJGXjD7wNVlV9kVosBSGgu2qeG
YJCoEPdxYIMCJEV9ruCNyyzwU3Wc5bHVsN91wu2oCQcV6DMcMyTDJH+idQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7462qULeK2Foydv6/n5RChbm0vMB8GA1UdIwQY
MBaAFGJbXPnimRJEjLu8htIFYYmc2xBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85N2NjYWItZDBjOC00MmU4LTg3MjUt
YTU4NmIwN2FkZDcyLzEvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy85N2NjYWItZDBjOC00MmU4LTg3MjUtYTU4NmIwN2FkZDcy
LzEvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA055uYKhz
BN10KvfVy/Z7b5g7KUMlmeWOc03859ZnM6oD+5B+qWP2uf8FRkHNFqKVl/QzTHVO
T1k+ZgdUTRlj94PMHXE3FrH2LIFZJlu3n7gBL5bBRMdoG8miyfJ+5ddMKZlBYlt5
z/UlWAclZLiqrcriwCN9mDM7GHvHaYnD3QDS/jBvCmMpXsKpIxwMaiVeMvDt5nUj
PaXP0YNxPTCcfj4fY0lyMgHXioyHb9Df98/zVO0llCaSWlJFH7WbMzlC/vk4hqN1
DqtyXhlFLiVw/yGgH1/BjvA4pSYSGkPCLRsagNIeo9Raq7QCN5f8WOYFxyz52k0N
M2msk+3seVOUYw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:30:19 2026 by rpki-client