Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
File: YRs47qO8cHP29KpNIe1BNmXXyic.mft (raw, json)
Hash identifier: XIbGS2O3Ke8WA0qCD4+XdIzzRqyDa4mYTOAw4ZI/Eyk=
Subject key identifier: 8C:50:A7:51:F5:DB:B7:1B:97:4A:24:2C:5C:73:E8:75:F8:52:9F:0B
Authority key identifier: 61:1B:38:EE:A3:BC:70:73:F6:F4:AA:4D:21:ED:41:36:65:D7:CA:27
Certificate issuer: /CN=611b38eea3bc7073f6f4aa4d21ed413665d7ca27
Certificate serial: 01A0E174BDAC1D57F49F6E5D48BA87A8C676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
Manifest number: DF
Signing time: Sun 27 Sep 2026 06:01:59 +0000
Manifest this update: Sun 27 Sep 2026 06:01:59 +0000
Manifest next update: Mon 28 Sep 2026 06:01:59 +0000
Files and hashes: 1: TcaCPZlW9b7nUjd0B-e1yd0zAE8.asa (hash: Oy2UJlXOZ8xOLUsWDNeaDlW0wd+hjDN8NHEzf1/ZIt0=)
2: YRs47qO8cHP29KpNIe1BNmXXyic.crl (hash: suxgQfGXA6fLvrld0NPrDWDJByr8zcR7y7putr4N35o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:bd:ac:1d:57:f4:9f:6e:5d:48:ba:87:a8:c6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611b38eea3bc7073f6f4aa4d21ed413665d7ca27
Validity
Not Before: Sep 27 06:01:59 2026 GMT
Not After : Sep 28 06:01:59 2026 GMT
Subject: CN=8c50a751f5dbb71b974a242c5c73e875f8529f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:25:75:de:47:48:9b:b5:9b:c4:2f:61:b3:
da:80:a1:5e:56:b6:b4:92:7b:e4:23:8c:c7:7d:c8:
0f:b7:e8:0c:75:d8:bf:68:51:72:4c:6d:85:be:1e:
39:cd:dc:3e:85:d5:52:52:e9:ce:d3:99:a2:3b:7a:
21:cd:9b:03:69:d3:0a:d6:26:d1:05:0d:d2:1b:c4:
c3:f0:7c:92:79:3f:ec:9e:7b:12:09:1b:3b:73:5e:
fe:96:ee:f1:cb:e5:9c:86:74:98:50:84:fa:93:fb:
62:c1:ae:8a:ed:ee:75:05:5f:c2:eb:d4:03:72:57:
df:94:b0:f4:4c:26:c3:de:2a:c3:88:a9:db:c3:fc:
7e:96:49:bb:ae:37:72:e2:fe:ea:cd:14:dc:4a:2c:
99:b0:86:1d:39:10:0e:db:12:f9:09:ff:6b:a0:b8:
bd:03:13:e8:e4:14:87:76:e6:f1:bf:2b:74:7c:67:
97:f3:a9:be:86:01:08:b2:e1:25:5f:4a:16:5d:26:
5e:61:8c:45:76:73:08:96:46:22:e6:95:e6:bd:60:
48:84:16:ce:8e:c5:5f:9a:ea:cc:c5:f9:4d:11:8a:
71:22:2e:26:55:27:94:66:6f:37:1d:77:22:73:8b:
a9:6e:9e:9a:27:f7:a1:c7:2e:a4:ec:54:a9:19:8c:
5f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:50:A7:51:F5:DB:B7:1B:97:4A:24:2C:5C:73:E8:75:F8:52:9F:0B
X509v3 Authority Key Identifier:
keyid:61:1B:38:EE:A3:BC:70:73:F6:F4:AA:4D:21:ED:41:36:65:D7:CA:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b9:aa:44:81:cd:84:a0:2e:51:65:6e:cd:21:85:ab:c6:f8:
18:4f:0b:1b:44:cb:0d:62:05:03:5b:1a:f1:c2:d9:5a:2d:fd:
9a:24:a2:27:6f:ee:10:38:10:8e:d4:fc:c0:13:d2:4b:d4:14:
21:8d:94:b9:40:ef:52:be:80:1d:f3:e8:fa:b8:59:fe:cf:b7:
3b:93:93:9c:61:fa:e1:7a:f0:64:83:11:da:6a:65:4c:5a:e5:
36:c0:3d:17:c3:ce:19:f8:61:71:b9:9f:1f:40:d0:18:f6:10:
35:67:c0:ab:f5:7b:ed:03:bc:7d:99:a6:8d:de:0a:52:67:a5:
40:b9:45:5c:35:eb:78:09:67:50:d2:69:a4:cc:4f:b7:ab:ae:
6f:7b:f4:3b:c3:b4:e4:49:8c:ae:5d:8c:b4:f4:86:f9:60:46:
cb:78:ed:2c:01:2c:08:d3:de:a1:79:eb:38:8c:3d:06:37:9d:
03:9a:fe:17:d8:87:a9:5e:99:17:89:2a:3e:d0:f0:92:f8:08:
8f:13:e8:ee:ce:4c:6c:b8:38:f3:ce:19:13:4d:12:46:bf:57:
d8:c1:ec:77:d4:a4:ca:0c:b9:d8:29:3b:5e:17:57:f7:b0:47:
f2:8c:79:78:ef:44:b3:68:c3:5a:0d:08:51:2c:16:f9:ec:0a:
16:28:43:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:47:11 2026 by rpki-client