Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
File: YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft (raw, json)
Hash identifier: 4/IJNjjIcE42dEKDy/oLnXugCOLcm8vQwBl4SD8Sr+I=
Subject key identifier: 68:36:B2:D9:E8:EC:86:75:EE:13:CD:18:FE:A9:98:B3:5D:35:7C:35
Authority key identifier: 62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
Certificate issuer: /CN=62719c6d8b9950378a7489315fb078111a18ad55
Certificate serial: 01A0F34406BD91FB268F9F86C1E2B18132F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
Manifest number: 0398
Signing time: Wed 30 Sep 2026 17:01:56 +0000
Manifest this update: Wed 30 Sep 2026 17:01:56 +0000
Manifest next update: Thu 01 Oct 2026 17:01:56 +0000
Files and hashes: 1: 2iC8kbXKFjWmx_dbdVyppAM0-6Y.roa (hash: tmWp7mxjB9vdgjX2gtWUKioc5qEfAmveNcok4dIUQAo=)
2: GRea9lk1vceom4TFm3UHffkyQH8.roa (hash: 7sx9fKJ6zSwa6txM9tmVfdAR/9hActQM7paLbf+Thbw=)
3: YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl (hash: p/X78KIjd6N18mfm4uGwbUJGhogh3hidt/ZaeD6UFyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 17:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:44:06:bd:91:fb:26:8f:9f:86:c1:e2:b1:81:32:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62719c6d8b9950378a7489315fb078111a18ad55
Validity
Not Before: Sep 30 17:01:56 2026 GMT
Not After : Oct 1 17:01:56 2026 GMT
Subject: CN=6836b2d9e8ec8675ee13cd18fea998b35d357c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:57:ce:96:f0:04:b2:40:86:34:51:c7:35:fc:
d0:0d:24:bf:da:6e:b9:aa:73:60:87:5e:68:b6:2c:
75:02:20:7e:27:54:09:e9:ee:97:db:25:f8:10:6b:
dd:2f:f8:b7:5e:d2:d9:85:e2:c2:34:1a:b9:63:9c:
71:e4:26:50:19:9a:23:bc:a3:06:a4:96:14:e0:15:
bd:38:1b:98:6d:e2:10:07:12:58:72:7e:0b:41:59:
cf:8f:01:8a:90:b9:da:39:93:bc:44:c2:83:dd:b5:
3f:23:64:27:a4:51:64:08:5f:c9:6d:53:57:53:cb:
75:04:7d:11:b4:20:65:67:7b:30:ed:29:96:77:13:
e2:bc:ba:e9:bd:64:9b:d6:04:b6:ca:2d:9b:70:4e:
4d:b1:fa:73:57:57:53:76:ca:ea:1e:1c:da:ec:0d:
86:4f:43:ff:42:b7:58:de:e3:2d:67:e2:30:d2:03:
4f:8b:06:80:12:d8:85:38:b3:4d:3e:13:ee:92:c5:
15:da:c1:2d:18:79:36:ab:68:65:de:98:57:10:c3:
63:4e:5f:9f:ea:3f:66:6d:9b:8e:b8:85:df:4f:9e:
98:24:c1:7c:60:8a:8c:70:77:97:c3:4c:da:c9:d6:
64:07:f1:b8:e2:66:d9:b6:61:e8:2a:44:4f:e5:86:
e4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:36:B2:D9:E8:EC:86:75:EE:13:CD:18:FE:A9:98:B3:5D:35:7C:35
X509v3 Authority Key Identifier:
keyid:62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:08:e7:41:87:60:3b:82:f4:77:52:7a:d1:1c:e6:30:06:55:
33:3a:25:69:5e:63:79:0f:3a:b1:e7:79:29:4b:37:b7:31:91:
48:55:81:27:dd:a8:e6:2a:c0:4e:e4:02:4b:46:5c:3d:dd:48:
02:23:64:04:39:82:59:29:68:3c:a2:d0:32:af:5a:43:9f:b2:
75:d1:cc:16:95:f2:6f:29:e3:ee:ea:32:85:a7:15:c4:94:e3:
91:36:73:91:ef:41:ae:da:2b:10:b2:ad:f0:9f:01:22:a5:80:
6c:83:67:94:9b:5e:34:ae:a9:47:eb:05:80:4d:7d:26:37:ae:
bb:d6:44:bc:33:ce:ae:30:3b:34:bd:45:e6:b6:95:0d:c0:40:
aa:c1:3e:b4:f5:c1:3e:ed:d6:66:f8:78:02:ae:59:3a:7a:40:
e0:64:d8:b4:1e:95:6a:88:aa:47:1b:5b:6a:2b:36:48:c6:2f:
d6:e8:f8:6b:9b:2d:7d:46:6b:17:f4:6f:f1:0a:06:50:fd:f1:
ee:d8:31:38:53:34:0a:35:a6:27:71:42:f5:2a:e0:4f:37:e6:
c6:35:86:58:4f:72:77:ae:37:cc:4a:80:92:ce:5c:20:77:e7:
d2:3c:8c:38:12:29:53:6d:d1:22:8d:80:af:d3:d7:ec:b0:77:
80:24:11:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDzRAa9kfsmj5+GweKxgTL5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNzE5YzZkOGI5OTUwMzc4YTc0ODkzMTVmYjA3ODExMWEx
OGFkNTUwHhcNMjYwOTMwMTcwMTU2WhcNMjYxMDAxMTcwMTU2WjAzMTEwLwYDVQQD
Eyg2ODM2YjJkOWU4ZWM4Njc1ZWUxM2NkMThmZWE5OThiMzVkMzU3YzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFfOlvAEskCGNFHHNfzQDSS/2m65
qnNgh15otix1AiB+J1QJ6e6X2yX4EGvdL/i3XtLZheLCNBq5Y5xx5CZQGZojvKMG
pJYU4BW9OBuYbeIQBxJYcn4LQVnPjwGKkLnaOZO8RMKD3bU/I2QnpFFkCF/JbVNX
U8t1BH0RtCBlZ3sw7SmWdxPivLrpvWSb1gS2yi2bcE5NsfpzV1dTdsrqHhza7A2G
T0P/QrdY3uMtZ+Iw0gNPiwaAEtiFOLNNPhPuksUV2sEtGHk2q2hl3phXEMNjTl+f
6j9mbZuOuIXfT56YJMF8YIqMcHeXw0zaydZkB/G44mbZtmHoKkRP5YbknwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGg2stno7IZ17hPNGP6pmLNdNXw1MB8GA1UdIwQY
MBaAFGJxnG2LmVA3inSJMV+weBEaGK1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW5HY2JZdVpVRGVLZElreFg3QjRFUm9ZclZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wNzJmNjgtODEzZC00YmE3LWI0OWQt
NzVmYTI5NTQxMWY1LzEvWW5HY2JZdVpVRGVLZElreFg3QjRFUm9ZclZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8wNzJmNjgtODEzZC00YmE3LWI0OWQtNzVmYTI5NTQxMWY1
LzEvWW5HY2JZdVpVRGVLZElreFg3QjRFUm9ZclZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAjnQYdg
O4L0d1J60RzmMAZVMzolaV5jeQ86sed5KUs3tzGRSFWBJ92o5irATuQCS0ZcPd1I
AiNkBDmCWSloPKLQMq9aQ5+yddHMFpXybynj7uoyhacVxJTjkTZzke9BrtorELKt
8J8BIqWAbINnlJteNK6pR+sFgE19Jjeuu9ZEvDPOrjA7NL1F5raVDcBAqsE+tPXB
Pu3WZvh4Aq5ZOnpA4GTYtB6VaoiqRxtbais2SMYv1uj4a5stfUZrF/Rv8QoGUP3x
7tgxOFM0CjWmJ3FC9SrgTzfmxjWGWE9yd643zEqAks5cIHfn0jyMOBIpU23RIo2A
r9PX7LB3gCQR/A==
-----END CERTIFICATE-----
Generated at Thu Oct 1 08:11:41 2026 by rpki-client