Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
File: YPWqx2_mvykTNdGaZY5kiRBbhp8.mft (raw, json)
Hash identifier: WsouQnEyHZPivQHsgyfgKMDjJGl6TJvy0iVBseGiT/E=
Subject key identifier: 0C:9E:78:EF:37:92:DD:9B:34:7B:B7:03:B9:57:C5:2A:E1:53:C5:B5
Authority key identifier: 60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
Certificate issuer: /CN=60f5aac76fe6bf291335d19a658e6489105b869f
Certificate serial: 01A0E407175AE7DC02E1746AA93EA4A64E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
Manifest number: 0648
Signing time: Sun 27 Sep 2026 18:01:04 +0000
Manifest this update: Sun 27 Sep 2026 18:01:04 +0000
Manifest next update: Mon 28 Sep 2026 18:01:04 +0000
Files and hashes: 1: YPWqx2_mvykTNdGaZY5kiRBbhp8.crl (hash: +keViWNjqDq73nlPjN6y94u0KF57pLJ9XjM6VwShl7I=)
2: nsMVjB3dBsEs4QDP-UqrSgiiMZk.roa (hash: 4KH9ak7vbK8YvGmfh6MjtuXURmPLUowjhWOo+NHtQgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:07:17:5a:e7:dc:02:e1:74:6a:a9:3e:a4:a6:4e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f5aac76fe6bf291335d19a658e6489105b869f
Validity
Not Before: Sep 27 18:01:04 2026 GMT
Not After : Sep 28 18:01:04 2026 GMT
Subject: CN=0c9e78ef3792dd9b347bb703b957c52ae153c5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:96:c3:91:96:67:cc:9c:7d:d0:0d:cc:3f:c6:
ac:81:17:a3:fb:11:41:72:59:88:3c:81:2a:43:b7:
02:70:1b:5f:50:d6:df:34:f2:d5:a1:20:7c:b6:62:
ae:0d:53:a8:be:88:bf:52:d1:d2:e6:a4:f7:bc:b2:
8b:7f:6d:05:af:00:88:4b:bf:3a:4f:06:06:fc:bd:
fe:df:b9:d2:f6:e9:23:5d:9b:64:88:14:0d:b3:73:
a7:b8:a2:75:3d:2b:14:71:e7:2c:0c:07:46:2b:27:
b2:69:f5:a3:19:34:50:8c:ca:c9:88:ec:21:f2:ba:
32:60:c8:34:05:67:82:f8:eb:05:1f:7d:3c:c9:15:
87:ab:03:56:00:3e:b9:2a:b2:92:59:e5:18:bb:e8:
7b:f5:6b:2c:30:6a:b4:90:d9:41:ea:12:7c:30:1c:
05:c0:55:32:7d:45:7a:a2:1d:9c:c7:e2:26:36:fb:
97:99:80:d7:39:fd:c4:17:77:18:6a:7d:31:ba:7e:
60:24:d0:0e:86:4b:54:8c:08:54:dc:c5:4a:6f:fb:
c0:6c:3d:06:6d:60:4a:a7:32:e7:9e:6b:8d:80:45:
cb:6e:7e:9b:0f:94:0e:c8:38:8f:f0:17:1e:61:05:
27:8d:fe:ac:87:94:52:06:84:19:4d:c2:13:d0:8c:
3b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9E:78:EF:37:92:DD:9B:34:7B:B7:03:B9:57:C5:2A:E1:53:C5:B5
X509v3 Authority Key Identifier:
keyid:60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:69:fa:bb:34:63:1f:d8:37:f8:d8:bf:2b:3c:1f:57:2e:b7:
c8:e3:d8:35:6b:43:8c:ef:f7:b5:1e:70:12:16:4d:e4:04:4d:
c8:ab:cc:d3:c4:d8:64:ec:7a:26:39:72:5a:8e:5d:88:64:7a:
cc:d3:cf:24:4b:8b:b7:c4:fe:55:68:ec:97:84:ed:8c:1e:97:
fe:ce:1f:5c:0a:d5:4e:9e:bb:b8:72:3a:28:a5:cd:cf:57:80:
1a:f8:e1:8b:f9:f3:42:c5:03:ea:cc:f0:d6:f9:08:2f:e4:36:
ee:de:24:89:b6:d5:cb:22:4b:cd:2d:a5:7e:4f:75:22:fa:57:
52:3a:11:48:52:60:a3:fb:f9:b3:8f:16:b5:7a:b8:b2:38:50:
fe:d9:1c:67:8b:4f:2e:1c:b8:fc:93:3e:a3:5f:bb:b8:d4:02:
16:c3:2e:26:60:cb:73:45:04:6c:49:7b:b4:46:98:a2:b7:07:
9e:95:f9:7c:a7:51:7c:13:70:89:65:a1:85:91:57:d4:6a:09:
84:23:db:3b:39:f1:70:92:76:a1:e6:81:db:aa:1c:fe:7c:d4:
e9:1b:ab:87:51:97:51:ba:04:28:1b:db:eb:62:ec:6a:e1:97:
39:7f:5f:81:33:19:d8:75:a0:0e:be:e1:c0:af:8e:99:60:8f:
6b:25:0a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:43:05 2026 by rpki-client