Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
File: YL83NiAUbm8piugtLIqDccrLexs.mft (raw, json)
Hash identifier: Tpk3PFz8F26gnUkQisslCp+V2YYDlLXVLTly/5zem2w=
Subject key identifier: A3:9F:A9:E3:39:B2:4A:4C:40:13:2F:5A:B4:72:C2:28:5E:63:FE:95
Authority key identifier: 60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
Certificate issuer: /CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Certificate serial: 01A108EF71B52E61C31189D98ADFB93EC86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
Manifest number: 1A89
Signing time: Sun 04 Oct 2026 22:01:12 +0000
Manifest this update: Sun 04 Oct 2026 22:01:12 +0000
Manifest next update: Mon 05 Oct 2026 22:01:12 +0000
Files and hashes: 1: X2IqazocGBh2TzPpbjgU543EV3k.roa (hash: bpCuK7CG9CoRNnFqOKdhYMABq2l/U8E9Zuo+llQrjU0=)
2: YL83NiAUbm8piugtLIqDccrLexs.crl (hash: 0ZrgEw0VgySQ91QZUaKKW6KK/JGS48r5ZVpR8Y9Pizs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:ef:71:b5:2e:61:c3:11:89:d9:8a:df:b9:3e:c8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Validity
Not Before: Oct 4 22:01:12 2026 GMT
Not After : Oct 5 22:01:12 2026 GMT
Subject: CN=a39fa9e339b24a4c40132f5ab472c2285e63fe95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:af:3b:84:fb:e3:9a:34:1e:cd:cf:d0:0e:
d0:51:48:20:2c:69:80:96:c9:76:25:ab:4b:af:97:
f5:03:12:c5:09:d9:31:1f:06:38:5c:1a:53:c7:ed:
df:36:2a:64:96:b0:d2:bb:b4:01:8e:ed:17:01:fa:
e3:f2:9a:e8:4e:ce:bd:be:8c:0c:64:d1:a3:85:c9:
41:0d:52:2f:d4:56:34:82:76:c2:d9:0d:01:79:13:
98:57:ea:9e:15:f1:8e:55:4b:21:a9:ed:ce:dc:69:
65:ab:b8:bb:68:8c:69:fb:e4:f2:b7:04:c6:46:18:
47:3f:f9:a4:40:5e:3a:8b:da:75:30:11:98:5d:74:
4f:5a:0f:af:87:37:e4:19:8e:30:7c:1b:a0:10:8e:
cb:a3:b0:4e:c2:67:81:02:5f:33:ba:48:65:b3:65:
a9:cf:fc:e5:48:e0:35:ea:ac:e5:b6:4c:94:e7:51:
29:12:2a:c5:a3:2f:dd:1b:70:a8:16:40:56:99:93:
0f:b3:9c:49:2d:7f:9b:e4:56:d1:09:a6:ca:28:b2:
5e:5b:f4:64:ba:98:88:6f:f3:7b:08:02:a5:5f:52:
90:96:8f:86:db:bd:1e:40:db:5b:c8:7e:3c:88:0f:
50:f0:36:7c:02:b6:80:5b:ce:fb:a8:a5:9a:92:2d:
51:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9F:A9:E3:39:B2:4A:4C:40:13:2F:5A:B4:72:C2:28:5E:63:FE:95
X509v3 Authority Key Identifier:
keyid:60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:cb:78:da:65:57:f2:c4:51:8b:22:d6:4d:47:45:5b:10:e8:
bd:ab:d0:b5:da:08:6c:e0:01:da:82:8c:08:c5:db:82:01:1c:
70:56:99:9d:1b:e0:9f:13:90:54:af:d5:01:de:8d:5b:64:5f:
32:e7:b1:0c:d4:71:ab:42:fd:9f:1f:ac:c1:73:a5:68:37:21:
ee:4d:15:98:f2:ce:cb:66:4e:bd:64:cf:86:26:ff:49:d4:94:
3c:29:fb:79:06:82:a7:ab:58:c6:d7:88:7b:29:a6:12:27:4d:
9d:a7:f9:2a:10:b2:fa:c9:32:83:72:1a:61:76:e8:d8:ac:22:
6d:01:d9:02:41:e0:c8:9a:51:c8:55:44:36:da:1f:07:8a:f2:
68:82:75:77:06:f8:4a:e4:fd:71:61:bc:11:fd:6f:fd:3f:47:
cc:cb:9a:e4:90:fc:90:ef:32:b9:5f:65:41:6e:e4:bd:cc:4e:
e5:c0:06:bc:e3:e9:c0:8c:65:6f:6e:98:15:33:e1:b6:cd:48:
8a:45:2c:9f:5c:db:27:29:59:e8:9a:0f:f9:5c:0d:43:2b:bf:
8c:3a:19:e1:35:f4:62:c1:39:69:79:81:59:3b:98:4e:bc:9f:
52:e4:8c:6f:e1:18:6d:02:79:40:ad:97:a7:1c:4c:00:24:b8:
44:7c:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:33:53 2026 by rpki-client