Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
File: YhuOSG7srmEk3hBJT9OROe1KN8s.mft (raw, json)
Hash identifier: E/jfeWrB/XomeoBRxV6XXTqJdQS6qY+oqvgaLGI+t1g=
Subject key identifier: 51:18:A5:F9:C4:64:B0:E6:30:02:9F:E9:F1:F6:A2:C2:BA:36:A1:6F
Authority key identifier: 62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB
Certificate issuer: /CN=621b8e486eecae6124de10494fd39139ed4a37cb
Certificate serial: 01A110720929EB7DBDBB3BD30954F15FDDC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
Manifest number: 1A8D
Signing time: Tue 06 Oct 2026 09:01:11 +0000
Manifest this update: Tue 06 Oct 2026 09:01:11 +0000
Manifest next update: Wed 07 Oct 2026 09:01:11 +0000
Files and hashes: 1: BwYYOmhJLJqapgE9lvV3d7BEWAU.roa (hash: ME1eFTl4ynavuH8tL0n87NqGZ4of85as6TbMREzi3Ig=)
2: YhuOSG7srmEk3hBJT9OROe1KN8s.crl (hash: EfQd6MAhHIiYpjNHLsBXHpD5bD5qtuYR7aARo4EUAWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:72:09:29:eb:7d:bd:bb:3b:d3:09:54:f1:5f:dd:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621b8e486eecae6124de10494fd39139ed4a37cb
Validity
Not Before: Oct 6 09:01:11 2026 GMT
Not After : Oct 7 09:01:11 2026 GMT
Subject: CN=5118a5f9c464b0e630029fe9f1f6a2c2ba36a16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:bf:b5:a3:50:81:45:79:bf:f2:0f:b7:5a:
c6:39:80:03:ca:8e:b6:5b:e8:2b:47:0e:10:10:f8:
18:f5:03:70:69:74:90:b5:ca:23:e8:b5:74:e0:84:
c6:0c:f9:ec:ba:76:19:4b:c7:f4:47:3c:f7:f7:0f:
1e:19:95:c5:c8:36:28:33:95:18:60:e0:85:f2:1f:
79:90:48:3d:4a:e2:16:fe:f9:bb:35:c3:b1:9b:a1:
ba:97:f1:f5:7d:dd:de:d3:8b:26:39:9d:8b:6e:b3:
0c:e8:f6:86:c4:ce:db:e9:29:0b:93:a7:54:0e:5b:
18:d4:c1:d2:c5:5c:ad:a1:8a:0b:28:95:fe:57:68:
4b:18:b4:4b:87:54:d4:7c:e6:72:aa:f5:31:1d:2c:
c1:ce:ed:45:e6:3d:af:f5:9b:f0:88:a1:ae:e5:ee:
d5:e3:24:e9:53:84:73:a1:b3:a6:cc:5b:c5:8f:38:
83:bb:71:89:e2:3a:4a:5d:ef:0f:5f:33:b3:12:94:
a9:ee:99:e4:b4:a5:ce:64:e8:ce:4b:2c:45:97:3b:
6b:07:3a:fb:45:31:eb:d7:7a:8d:ed:00:dd:e6:f5:
1a:ea:e1:17:e8:89:77:3a:9a:af:98:90:24:3f:5e:
c4:a0:d2:47:49:51:3a:a7:ce:40:85:ac:8b:43:f8:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:18:A5:F9:C4:64:B0:E6:30:02:9F:E9:F1:F6:A2:C2:BA:36:A1:6F
X509v3 Authority Key Identifier:
keyid:62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2a:5a:ba:0b:e2:56:ba:62:94:1b:ce:57:5f:87:31:16:90:
12:16:af:90:e7:a6:bb:c3:2f:07:c5:19:8e:2d:bb:3a:ac:e4:
8c:61:a5:b4:c9:bc:fd:ee:30:90:a2:8a:e2:77:c8:40:48:03:
92:99:7d:e9:f1:0d:7c:b9:f3:70:9d:5f:53:b9:85:ff:e1:b3:
d5:90:1b:90:8c:2d:a8:71:f0:d4:1d:31:a7:a6:e8:fd:13:1e:
74:77:aa:ca:dd:dc:da:97:38:11:f8:f4:7a:28:13:78:a9:5c:
55:d4:76:80:17:04:40:1e:78:af:51:0c:67:59:7d:b5:0e:0e:
00:bf:c0:a6:34:99:95:f3:4f:c2:7b:fb:78:4a:ab:2c:36:8d:
2a:8d:2d:34:89:80:06:19:e0:e8:d0:40:14:65:b8:ad:f3:6b:
6b:26:3c:44:78:e9:18:d0:13:7e:14:0f:c8:5b:f1:5e:1d:27:
db:bc:cb:8a:22:d1:31:46:fc:d4:88:25:1d:22:ea:43:1b:35:
3a:41:4d:15:39:71:33:0f:32:72:8a:b9:70:ba:ed:b4:c5:06:
d0:a3:91:26:fa:9f:65:c3:f4:d1:24:87:cc:d8:3d:db:44:4f:
33:72:0e:aa:75:b0:88:fe:8f:d4:c2:73:60:23:84:da:cb:04:
ae:cd:a6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:46:35 2026 by rpki-client