Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
File: yIYjh23RrY5iSiPdUossZMgKhSE.mft (raw, json)
Hash identifier: i+lkf85Sbhkf0GWih24g2MUz4kaVcV+Z8qIqyoLm8xI=
Subject key identifier: 6D:C2:90:E9:D5:8B:1F:CC:A0:4D:7B:D2:B6:40:1B:F1:54:17:36:D7
Authority key identifier: C8:86:23:87:6D:D1:AD:8E:62:4A:23:DD:52:8B:2C:64:C8:0A:85:21
Certificate issuer: /CN=c88623876dd1ad8e624a23dd528b2c64c80a8521
Certificate serial: 01A1231DA9AD356D369D8EB6380B6950786E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
Manifest number: 09B8
Signing time: Sat 10 Oct 2026 00:01:48 +0000
Manifest this update: Sat 10 Oct 2026 00:01:48 +0000
Manifest next update: Sun 11 Oct 2026 00:01:48 +0000
Files and hashes: 1: h1IcZRGY_rRXRhpZWTLbtpzh9tM.roa (hash: L8O1+G2QnBwVNFEY7LCl7zf6sGt3HNSfVfaE38wa8Uo=)
2: yIYjh23RrY5iSiPdUossZMgKhSE.crl (hash: iPxQEOxtYMvV+c8IjF/oseZzECLIDM2nvkpIIlsOaIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:1d:a9:ad:35:6d:36:9d:8e:b6:38:0b:69:50:78:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88623876dd1ad8e624a23dd528b2c64c80a8521
Validity
Not Before: Oct 10 00:01:48 2026 GMT
Not After : Oct 11 00:01:48 2026 GMT
Subject: CN=6dc290e9d58b1fcca04d7bd2b6401bf1541736d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:cf:c0:5f:5d:23:ee:87:67:c6:3b:9c:13:
01:46:3e:04:fb:19:15:32:1a:ce:f2:aa:a1:49:68:
c0:a2:72:d6:f7:7e:a5:23:b0:70:a5:2d:1a:a7:44:
95:7f:2c:26:1f:d2:76:74:f3:9e:00:3e:87:8c:11:
e8:89:59:14:e8:06:4a:2b:59:90:84:4f:33:cc:87:
37:05:88:44:1b:62:79:33:c2:2c:ad:6b:e4:7c:e5:
d5:49:89:3c:50:6b:6e:5a:e0:f5:97:1b:97:80:05:
73:95:a3:22:40:d3:46:99:f2:a7:bb:25:83:00:ae:
02:8a:80:87:79:7a:08:6d:c1:64:bd:c0:7c:87:17:
37:78:44:40:0c:40:84:92:26:24:d5:d7:79:f4:e1:
de:a0:8f:a5:4e:84:90:37:f9:bf:67:9a:50:03:0b:
a4:52:05:81:69:36:b8:6d:1b:f4:dc:d8:70:53:27:
1b:04:2f:91:07:36:80:27:6c:8d:0d:f4:d6:56:d7:
d4:0d:28:e2:1c:2c:e4:06:bf:4d:fc:5a:9e:27:d9:
e2:28:0f:b0:7b:a6:06:cb:0b:3b:30:c4:15:be:74:
9b:b1:49:05:d9:38:05:aa:61:79:a5:78:0d:99:12:
7d:c4:67:63:d6:24:4d:8e:3c:a2:54:92:cc:4e:5c:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C2:90:E9:D5:8B:1F:CC:A0:4D:7B:D2:B6:40:1B:F1:54:17:36:D7
X509v3 Authority Key Identifier:
keyid:C8:86:23:87:6D:D1:AD:8E:62:4A:23:DD:52:8B:2C:64:C8:0A:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c0:c7:35:e1:1f:75:b8:d9:4e:3b:4c:08:24:e5:ed:41:fb:
3a:35:99:ad:1c:c0:d6:a1:05:07:8a:64:93:ab:4d:42:22:18:
15:2e:25:d7:15:2b:16:77:5b:95:2b:69:a0:cd:93:90:03:9f:
6b:9e:83:6d:87:be:cc:56:c5:f2:b9:15:54:46:be:07:f2:d6:
e8:c9:a7:95:f8:b5:21:32:45:ba:e5:a0:91:28:63:a4:84:be:
89:f1:68:b0:81:eb:d2:e3:cb:58:19:90:d2:7a:4f:f1:61:ea:
71:88:4b:e4:b1:c4:3e:4a:11:31:29:14:5a:8b:04:44:88:7a:
39:45:72:fe:ee:95:cd:56:a3:b1:0b:de:14:9d:11:fc:d0:6b:
25:3a:81:2a:e1:45:27:b5:08:40:56:09:34:35:88:cb:ad:e1:
ae:ba:34:8b:b8:2a:7d:9f:a0:66:be:a9:2f:1b:24:28:50:c7:
48:e5:e5:49:95:a4:92:36:d6:93:d1:9d:03:f5:51:e8:47:88:
53:9d:ed:cb:8c:b0:f8:c3:50:c4:9e:2e:8f:22:34:75:c0:45:
b9:42:8d:7e:4f:19:7b:24:b0:c6:b8:83:12:9d:a1:9d:14:a3:
88:7d:91:64:5f:4a:39:e2:bc:20:aa:ab:2e:0e:f6:5f:87:1f:
5b:1e:2a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:06:50 2026 by rpki-client