Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier: zu+n7XT+16UqNOjoUhIzBe+xIfnwk16DPS5JOpvOKrc=
Subject key identifier: 4C:DF:7C:D9:CF:09:AD:C0:84:28:01:E2:E5:71:2B:C6:D5:7E:41:18
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: 01A0EA77CAA9DC13DDEE14C7BC6FBB2A299A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number: 1270
Signing time: Tue 29 Sep 2026 00:01:54 +0000
Manifest this update: Tue 29 Sep 2026 00:01:54 +0000
Manifest next update: Wed 30 Sep 2026 00:01:54 +0000
Files and hashes: 1: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: OI5KPAF8FDFQr2D7H6AvxddDCbscvViExCNhQ/G+swE=)
2: iliXSfFW9CmHSeqMey9o5nQh8YE.roa (hash: Fb6bIsCY/5XAoXMXg9zGQmjVCnZpfmN1KdROzLuLLmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 00:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:77:ca:a9:dc:13:dd:ee:14:c7:bc:6f:bb:2a:29:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: Sep 29 00:01:54 2026 GMT
Not After : Sep 30 00:01:54 2026 GMT
Subject: CN=4cdf7cd9cf09adc0842801e2e5712bc6d57e4118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:19:2c:de:ca:cf:fa:c4:57:aa:49:b7:87:
3f:ef:be:87:6f:34:2c:10:17:bd:fa:f3:a3:1d:1b:
92:b8:fc:2a:63:4d:2e:b1:e3:38:6f:1d:52:73:cb:
0d:a9:05:df:76:f0:c6:d5:74:47:78:58:99:37:16:
19:bb:1c:b2:e4:87:98:10:d1:f0:79:81:c8:15:5a:
be:ad:28:0b:c4:4c:4d:d4:43:3c:81:5e:ab:43:b8:
b7:c9:2c:36:c6:ca:d9:c1:c6:64:b4:d4:76:29:6d:
47:dd:9f:c1:b7:de:d5:86:27:0f:39:20:a7:d7:6a:
93:4f:14:9c:93:d1:d0:b6:d9:8a:54:bc:d0:e7:85:
ea:52:67:14:7c:48:59:3e:4f:4d:7b:1c:81:be:70:
39:9a:18:58:7f:c2:9e:bd:d3:ca:f4:68:4f:89:4c:
4f:ab:3b:94:7a:0e:d1:86:53:0e:c8:19:e7:ad:2a:
b5:4e:37:af:b4:4f:4c:73:f3:bd:2e:a2:6a:58:a4:
88:ec:3e:24:24:4f:34:03:93:b2:9f:de:52:b3:ec:
db:f1:13:c0:c7:5c:d8:99:a7:49:47:1f:f0:0b:b3:
84:1a:75:f9:f9:24:30:81:76:c7:67:08:99:94:51:
ce:4b:33:b1:6b:83:ec:75:65:8c:d3:98:36:6c:37:
95:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DF:7C:D9:CF:09:AD:C0:84:28:01:E2:E5:71:2B:C6:D5:7E:41:18
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4f:f3:0d:0e:64:c5:93:19:8b:77:3f:15:ea:be:11:27:f1:
46:bf:3b:6d:cd:ae:6f:cc:85:4b:eb:fb:72:06:51:a0:2a:68:
41:dc:ec:03:e6:3f:28:a8:cf:7b:3c:9c:10:31:33:3f:92:9a:
75:de:a0:10:16:03:fc:7d:40:75:97:7d:07:9f:79:c8:5e:7b:
33:d8:15:ff:99:ee:5a:c2:a6:60:5d:c6:f0:31:72:8d:a9:3b:
bc:a9:11:03:73:f2:ea:d2:7b:d8:1f:bc:ac:4b:56:60:98:a5:
da:b5:6c:c8:25:a9:2d:4b:77:e1:da:ad:09:69:e9:30:8c:12:
e4:c7:d5:fa:5c:70:f6:53:06:df:ce:b4:6b:12:3e:89:ed:02:
40:5c:83:91:ad:6b:e4:51:fd:a6:1b:ec:6e:33:34:d9:3c:8e:
e2:92:0d:4b:b2:4d:53:25:e1:49:fc:96:f1:c3:b8:26:d5:b8:
73:e2:a9:bb:45:d8:57:0a:7f:51:d2:0f:b8:51:f6:cc:dd:b8:
35:b5:6b:ed:5b:7c:c1:25:48:5c:8c:82:07:09:2d:26:90:c6:
e2:e2:0b:e0:6c:c6:5a:15:3c:e6:9e:97:ea:53:aa:74:2c:f2:
c3:28:15:0b:ab:a9:05:b8:a7:60:0e:d6:49:b7:fd:ea:7c:20:
a3:cf:5f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:24:42 2026 by rpki-client