Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
File: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft (raw, json)
Hash identifier: xRgsu+bA6Jrqs5KPChnnnpGop1ANwAsECFjIlNSgpy4=
Subject key identifier: E7:E2:8F:6A:1A:6B:C2:DC:5B:F0:3B:DD:07:9F:42:31:CD:95:29:FA
Authority key identifier: 60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
Certificate issuer: /CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Certificate serial: 01A107DCC86549C1067FAD80619FE981520F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
Manifest number: 1A8C
Signing time: Sun 04 Oct 2026 17:01:12 +0000
Manifest this update: Sun 04 Oct 2026 17:01:12 +0000
Manifest next update: Mon 05 Oct 2026 17:01:12 +0000
Files and hashes: 1: OgWEvpt9l3fjUZPTGCjCIeBKF7g.roa (hash: ERaqLzlMb64hRM2SkbR4/skAX7oKEBTPX2o20Ce35C4=)
2: YNe4buptuJ7UBEwKBogeIyq80jg.roa (hash: NkTj5ifZYkof4P8g9p6OTOx3j64mOVFXyYQzcr25aXA=)
3: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl (hash: 4Z1/57aXrY4HJ1ayiN90s1VcVzV/RHgbqEhaagZzT8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:dc:c8:65:49:c1:06:7f:ad:80:61:9f:e9:81:52:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Validity
Not Before: Oct 4 17:01:12 2026 GMT
Not After : Oct 5 17:01:12 2026 GMT
Subject: CN=e7e28f6a1a6bc2dc5bf03bdd079f4231cd9529fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:af:56:d7:17:7d:6e:1a:0e:be:5a:72:d7:
66:d5:3a:06:1b:86:c7:0c:0b:a8:32:81:4f:66:e4:
fd:9f:7b:63:84:ec:79:87:e0:19:6c:4f:a9:a2:d3:
5d:f0:d6:44:6f:96:a8:49:21:70:53:73:c2:c1:5d:
18:b3:62:b8:c5:07:99:53:fb:1d:14:d8:11:fe:d7:
2b:78:29:7f:c1:69:d0:9d:1a:4b:5c:b4:6a:63:10:
35:64:f7:de:e2:2b:73:21:c8:ae:8e:5c:4c:8f:1e:
c9:a7:3c:3b:14:86:b8:7a:d9:ac:f4:3d:a0:17:4d:
52:fb:c2:2e:59:f4:dd:ff:d8:28:98:99:6f:75:09:
29:e5:e3:b0:92:d9:a8:c3:12:70:48:7b:2b:3b:14:
e3:ba:98:68:19:1b:ce:d8:23:b4:14:9d:8f:c3:8a:
c3:bd:7c:77:7a:43:79:67:b6:33:65:4a:cc:60:b3:
70:b6:be:e0:69:ef:a1:bb:12:4a:01:45:7e:2d:b1:
f4:f1:95:87:ae:da:01:d6:42:bc:a3:60:55:99:7f:
72:e6:17:11:18:9a:ff:18:53:d5:c2:de:7c:5f:12:
16:36:6a:27:ec:b8:56:7c:a1:ca:10:87:b1:e6:f8:
e0:2e:86:c5:65:6e:32:e0:c8:31:70:41:76:79:d3:
ff:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E2:8F:6A:1A:6B:C2:DC:5B:F0:3B:DD:07:9F:42:31:CD:95:29:FA
X509v3 Authority Key Identifier:
keyid:60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:77:a1:ab:f5:05:b4:41:e0:fa:a8:74:fe:92:6d:ef:14:c6:
bf:02:14:3c:3d:de:45:09:a5:8f:15:99:2a:ee:a2:25:cc:8b:
ef:34:27:1e:5e:46:2c:0a:f6:89:ec:19:ba:5c:f4:a7:94:41:
6d:ed:b9:97:90:98:bb:15:6a:17:86:d2:64:b1:58:1b:e8:92:
b1:3c:8d:1b:bf:b6:14:a8:96:58:c2:5f:16:33:fb:60:8f:3d:
98:0c:b3:3d:a1:ef:78:20:46:eb:ca:f7:45:f9:a5:87:3b:6e:
8a:42:01:21:5a:23:b9:eb:ab:bd:14:2a:8b:22:26:01:3b:79:
95:40:f1:bd:47:20:6f:6f:9d:06:86:41:03:eb:56:8f:7f:e0:
0a:97:b1:fa:c2:1d:f2:cd:7d:8e:b8:c4:27:cb:9e:86:e0:46:
9f:7d:af:38:e8:01:f2:09:95:ec:25:de:b3:25:af:79:1e:27:
45:bd:45:af:30:59:f7:bb:e9:84:d4:8f:2e:8a:1e:5e:cf:14:
21:62:61:54:d7:d1:c5:53:10:72:1e:34:5a:27:f5:10:93:0c:
f0:c7:28:bc:4b:e2:eb:e7:49:fa:84:b7:92:04:1c:84:fd:e8:
bb:86:2f:30:f2:e2:a0:b6:65:e3:4c:6b:8c:d3:fa:9f:48:e9:
81:f0:1c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:15:46 2026 by rpki-client