Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
File: YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json)
Hash identifier: ffoxPamEiccj6+UBaNl1elnfNdP6IarqeIFIuRwswbQ=
Subject key identifier: B2:6B:4A:6A:83:61:BC:D9:4B:36:3E:3E:8B:92:E4:AE:06:D0:69:4A
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 01A12842F516B384110830AED5C0555B74AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
Manifest number: 1A2C
Signing time: Sun 11 Oct 2026 00:00:38 +0000
Manifest this update: Sun 11 Oct 2026 00:00:38 +0000
Manifest next update: Mon 12 Oct 2026 00:00:38 +0000
Files and hashes: 1: Lft1TVXiYVdikjn_A01iU-k02DE.roa (hash: AUhYpOdbzarhMkv1M+Fv4hjTQh+rQF7twSf3TVX7HXM=)
2: PejTwsBdKH5-f3Vp_HDi2lV40HI.roa (hash: sQMSKyXDXZzbEaxAsB9c8v4n+R0LYVRrVo36SmpYF40=)
3: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: Z85VGkEKnj5iiDnqrAO4sO2dc6iKbTC7u07HSUSMcpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:42:f5:16:b3:84:11:08:30:ae:d5:c0:55:5b:74:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Oct 11 00:00:38 2026 GMT
Not After : Oct 12 00:00:38 2026 GMT
Subject: CN=b26b4a6a8361bcd94b363e3e8b92e4ae06d0694a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:57:23:e2:a8:08:3d:16:b8:a1:b7:d5:07:ca:
48:3b:5d:48:4c:66:57:0f:90:9b:77:7d:bf:2b:83:
22:2b:fc:df:23:5b:c8:f1:5c:43:89:ea:9d:4c:bd:
d0:5e:9e:21:52:4d:5e:8e:e9:2e:8f:45:41:8f:7d:
5b:61:8b:91:21:1a:68:d8:48:ab:07:73:f3:cc:dd:
6d:3e:0d:fd:92:e6:08:8b:16:21:d2:d1:85:80:47:
76:38:e4:95:29:1e:c4:12:84:f8:bc:3c:d5:71:aa:
58:e3:67:ae:2f:60:99:16:0a:25:af:e2:03:a2:a2:
b5:d0:07:a4:37:35:06:e7:11:a7:ba:61:95:fa:90:
a2:9e:25:bd:61:1a:4a:cb:82:23:93:eb:79:81:85:
ac:6f:0a:99:79:94:7c:f3:85:d0:3e:b2:11:45:11:
12:17:a3:2a:c4:f5:35:5c:20:85:75:86:df:66:8c:
16:fa:01:3d:91:e3:c4:15:e0:2f:6e:14:ec:ab:e2:
8f:7d:3d:88:a8:97:be:a6:89:39:bf:72:47:a6:be:
b0:89:c4:25:8b:27:de:ca:e5:83:70:99:b5:5f:76:
40:a7:34:ae:cb:7d:55:2c:76:12:bc:a7:7d:df:0f:
7e:95:cf:e5:d1:55:88:f5:48:17:f8:3f:aa:04:b6:
65:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6B:4A:6A:83:61:BC:D9:4B:36:3E:3E:8B:92:E4:AE:06:D0:69:4A
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:90:f1:6f:b8:fa:81:10:bc:e2:0c:57:af:0b:7f:b6:30:b9:
2d:0c:85:dc:73:73:e6:99:25:5b:16:2a:4b:b9:76:0a:b8:32:
b9:f9:7b:c7:8a:26:03:4c:5a:67:f5:1e:37:af:bc:fe:df:25:
5f:98:28:36:a0:26:45:52:f2:75:59:7d:1a:a6:d0:d4:24:11:
59:38:4f:a3:f9:33:ca:2a:44:86:de:b4:ae:44:a0:04:1e:88:
5c:22:33:f8:94:d2:b8:60:b7:84:f0:86:a2:7e:6c:e1:8f:d6:
ad:e9:9f:ed:1a:5a:bb:35:43:76:d5:b0:b8:2c:d8:c2:22:6b:
53:2f:aa:0a:fd:86:2e:06:d2:b3:52:6e:57:d8:24:4b:1c:a7:
e4:72:b7:0e:d2:61:50:2e:dc:76:91:aa:71:74:0c:90:af:04:
e0:89:22:cc:c3:c2:4b:d0:a8:30:2b:e3:97:a1:3a:eb:a8:60:
37:1f:cf:b6:d6:e4:0c:f3:ff:3c:bc:da:fd:56:ec:54:ee:58:
7e:f6:69:cf:52:77:ee:3e:1e:ed:2d:00:ae:99:02:8a:bc:41:
8a:8c:84:c0:38:21:77:6e:c1:27:4e:14:70:67:62:23:d5:cf:
e3:f7:c4:9f:a6:69:02:6f:4c:fc:a0:66:9b:35:53:75:16:44:
d4:a7:52:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:50:34 2026 by rpki-client