Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
File: yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft (raw, json)
Hash identifier: yozrsHJRpuZnERWraZ+2VJu4f6K2ewENSuqbXWIR4EY=
Subject key identifier: 9A:5B:A2:C8:95:A1:3E:F7:68:A5:71:E1:B3:69:F7:F3:92:03:09:ED
Authority key identifier: C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
Certificate issuer: /CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Certificate serial: 01A0DACDD20E5D4F71C5508EBD85BEFFA240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
Manifest number: 1706
Signing time: Fri 25 Sep 2026 23:01:56 +0000
Manifest this update: Fri 25 Sep 2026 23:01:56 +0000
Manifest next update: Sat 26 Sep 2026 23:01:56 +0000
Files and hashes: 1: YjABWXq1K-e_wEund0ue5nxCxOU.roa (hash: PI1L0CXgsAmafCm4unnTqfAaCBg3v/MEpLRsMdPwg9s=)
2: yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl (hash: d5/RK1YnDGluilolBdoA7WKAqwJAMOKQLK8BnJ9vcnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:d2:0e:5d:4f:71:c5:50:8e:bd:85:be:ff:a2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Validity
Not Before: Sep 25 23:01:56 2026 GMT
Not After : Sep 26 23:01:56 2026 GMT
Subject: CN=9a5ba2c895a13ef768a571e1b369f7f3920309ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:49:06:ee:8f:08:37:66:cd:b7:28:ca:bf:
9a:e8:5d:6a:34:6d:6e:7f:51:ff:4a:a8:fe:06:bf:
c5:f0:88:04:30:ae:0e:20:0c:ea:6e:38:49:41:b1:
0f:c6:d2:1e:77:a6:ce:f0:45:82:fd:4a:87:34:cd:
3d:0a:c2:be:be:5b:a8:dd:5a:03:88:61:88:b2:dd:
b1:8b:bf:87:46:5b:66:90:a4:09:a8:3f:f2:11:df:
85:b6:53:d3:d6:01:e9:83:d8:63:3a:61:51:3d:07:
ab:5d:24:6a:9f:ef:4c:db:85:58:b4:da:ac:62:e1:
26:94:2a:e8:1d:0f:47:1e:aa:7e:1c:ea:49:e9:30:
09:22:b6:78:78:3b:0f:b3:1a:8f:aa:a9:be:fc:5b:
03:3d:18:5b:6c:e9:9b:52:ca:15:02:e9:ac:c3:f5:
10:df:3e:35:4a:93:f9:eb:6f:08:5f:79:cd:39:dd:
f2:d1:a2:7c:cb:00:ef:2f:9f:da:c1:95:e4:e6:31:
e3:9b:32:62:46:54:6b:a6:cf:4b:07:3f:9f:91:1f:
c5:16:1d:ca:1d:24:cf:3c:e8:d5:52:d9:e0:02:55:
b2:02:16:9e:c8:7a:6c:13:4d:df:12:4a:1f:80:3e:
ce:85:77:55:7a:10:9f:00:3a:57:f4:05:98:e2:f3:
50:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5B:A2:C8:95:A1:3E:F7:68:A5:71:E1:B3:69:F7:F3:92:03:09:ED
X509v3 Authority Key Identifier:
keyid:C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:34:82:cc:14:da:89:0f:6b:2c:78:de:65:f7:04:5d:85:c3:
89:53:a3:d0:d7:ae:e3:da:74:19:d5:1f:a9:d5:a1:46:02:8a:
63:55:e0:a9:68:4e:e0:05:7e:2b:23:73:ff:4b:f9:61:2f:27:
b5:6c:c2:48:e7:af:83:48:e6:5f:eb:50:8d:4e:96:2f:e5:73:
d5:f4:5f:4b:e8:23:a9:cc:3b:e0:14:42:ab:e7:bf:fe:b7:08:
8e:2d:08:a3:3a:b4:f4:97:8f:d2:68:d4:36:7f:ed:59:9c:5b:
f8:e1:31:fa:dd:d2:21:15:1d:e6:11:4c:61:bf:4e:f2:76:81:
75:d0:97:24:82:b2:e6:b7:29:3a:65:97:ae:94:77:c2:2b:3e:
e9:d1:03:e1:26:b7:53:27:9b:a7:5f:55:e4:bb:08:54:34:5d:
0e:9f:4e:3b:34:55:4b:84:9e:fb:0e:37:13:7d:0d:8b:81:6c:
b1:be:b1:db:f7:c2:8c:60:25:5a:86:ec:cd:71:a2:6c:86:77:
21:87:61:10:14:7d:ed:37:a8:75:b6:28:6e:63:73:64:fa:ce:
76:50:2a:93:d4:f6:a7:77:02:3a:e6:46:9f:44:d7:22:04:a5:
eb:3e:9a:cf:87:05:c6:5d:5b:f6:cb:d8:c0:5c:d2:76:c8:f1:
a4:fb:00:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:17:55 2026 by rpki-client