
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.mft
File: y4HNpg5_XtX_8DjLSQkTr_4jMeo.mft (raw, json)
Hash identifier: SmLkxHl2T65CwBmiqZlrAeR4G3VbVbHVH2gi74Ydb/4=
Subject key identifier: AF:FF:14:0B:B8:64:34:8E:FD:7C:D6:49:1F:83:60:72:81:E3:1F:B0
Authority key identifier: CB:81:CD:A6:0E:7F:5E:D5:FF:F0:38:CB:49:09:13:AF:FE:23:31:EA
Certificate issuer: /CN=cb81cda60e7f5ed5fff038cb490913affe2331ea
Certificate serial: 01A0D193118CEA244FE43ED1C01860C4F772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4HNpg5_XtX_8DjLSQkTr_4jMeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.mft
Manifest number: 0103
Signing time: Thu 24 Sep 2026 04:01:11 +0000
Manifest this update: Thu 24 Sep 2026 04:01:11 +0000
Manifest next update: Fri 25 Sep 2026 04:01:11 +0000
Files and hashes: 1: y4HNpg5_XtX_8DjLSQkTr_4jMeo.crl (hash: sravzqnZVjwUFVxsnwMKzAYoboQoIaCWRkupKgP+YXk=)
2: ypwoD8WNlujjLErobvoTdVgSnlM.asa (hash: mZSvKsEORYpPG2YuRUeELKK/DzjDDr8HvRa5KJ/AxkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4HNpg5_XtX_8DjLSQkTr_4jMeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:93:11:8c:ea:24:4f:e4:3e:d1:c0:18:60:c4:f7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb81cda60e7f5ed5fff038cb490913affe2331ea
Validity
Not Before: Sep 24 04:01:11 2026 GMT
Not After : Sep 25 04:01:11 2026 GMT
Subject: CN=afff140bb864348efd7cd6491f83607281e31fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:da:a6:61:64:07:45:23:d7:af:02:6f:2a:a6:
f6:8d:4c:e9:a2:64:17:84:7f:0b:d8:b9:a2:fe:bd:
fb:b6:20:ac:4d:f0:ba:e7:07:9b:6a:25:ab:51:57:
10:b9:98:9e:d5:5c:64:7c:db:0d:cc:64:f0:3f:49:
c8:3c:55:a4:7c:0c:06:f9:1d:99:21:19:a0:e2:85:
38:5e:8f:2e:a2:74:0e:2f:1a:2b:ec:b2:27:0c:81:
44:10:19:41:aa:c0:d1:c0:e8:12:68:36:8b:66:ba:
23:85:03:9c:6a:2a:5c:f0:7d:a9:7c:ab:61:35:58:
60:d2:e6:0b:ce:19:65:c2:8d:3c:54:2d:15:6e:2d:
df:98:0f:ac:88:9e:28:21:b8:f2:fb:59:17:51:1b:
b3:c6:ee:b5:ac:68:d7:5a:cf:9a:d2:58:7f:d0:cc:
96:6c:8f:56:7f:67:47:44:b4:e6:e8:44:30:88:3d:
d5:49:54:65:d3:06:8f:38:ff:d7:6f:53:eb:dc:8e:
ac:9f:97:bf:d5:60:b3:42:a2:e7:ea:1e:12:a5:8c:
c5:39:74:c0:3e:a3:27:86:ab:12:a7:5d:83:2f:8f:
27:79:c2:d5:db:8c:bd:6a:b8:7b:91:05:e1:2c:11:
68:81:90:e0:4d:dd:53:c3:8f:11:da:37:e6:fa:5e:
de:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FF:14:0B:B8:64:34:8E:FD:7C:D6:49:1F:83:60:72:81:E3:1F:B0
X509v3 Authority Key Identifier:
keyid:CB:81:CD:A6:0E:7F:5E:D5:FF:F0:38:CB:49:09:13:AF:FE:23:31:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4HNpg5_XtX_8DjLSQkTr_4jMeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6c:6c:a0:89:55:19:0d:fc:03:f6:7f:37:1a:7d:39:a0:e5:
cf:7a:08:19:fc:2a:46:96:f9:10:df:7f:e5:b6:3d:92:bc:76:
b0:b4:12:ab:0a:17:a8:bc:e0:74:f4:17:20:82:25:e4:5d:00:
e0:36:b4:7e:0d:a3:d1:76:17:8c:1b:a0:66:e3:56:7e:51:ed:
37:44:f3:8d:32:df:b1:61:37:81:f8:4d:f9:a0:0b:49:37:da:
14:63:9d:fc:b2:f8:fd:73:9d:de:83:9a:57:ba:90:a9:15:c9:
ef:b1:3d:a9:f0:8c:4e:5b:ca:9d:93:99:e4:e1:85:ec:46:9f:
66:ee:ab:49:5b:28:88:2d:7f:97:dc:17:9d:dc:19:f2:a1:37:
48:6a:64:bf:83:36:05:af:f5:cf:a3:7f:81:81:fa:b6:67:fe:
2d:d7:0e:ec:4a:09:60:56:0b:a9:f0:91:79:b7:13:11:95:d3:
86:0d:7c:a4:bd:96:b7:77:8b:e3:d9:70:7e:85:52:30:fd:83:
5e:0a:2e:24:23:2f:e5:4e:78:b2:19:95:62:cf:c1:ac:c8:93:
53:6d:55:46:6b:80:24:a3:9d:3b:cf:1b:d8:02:e7:da:88:24:
16:88:60:2e:94:f5:fb:f4:1d:fc:ff:7d:6f:c1:7f:50:a8:70:
97:20:bd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:54:51 2026 by rpki-client