Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.mft
File: YKlx2lflTkw-UwoPekkv3uo4mgg.mft (raw, json)
Hash identifier: hyzFEKRA+VbDE2KT0U03Qr2gQTowFgZSsiBoK7Gf0yE=
Subject key identifier: F1:6C:8D:8A:7D:2B:FD:4B:56:F7:2C:B6:36:05:01:DB:3C:0E:BA:BD
Authority key identifier: 60:A9:71:DA:57:E5:4E:4C:3E:53:0A:0F:7A:49:2F:DE:EA:38:9A:08
Certificate issuer: /CN=60a971da57e54e4c3e530a0f7a492fdeea389a08
Certificate serial: 01A108141B1EE8FC7EB1289C98FD0271DB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKlx2lflTkw-UwoPekkv3uo4mgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.mft
Manifest number: 0102
Signing time: Sun 04 Oct 2026 18:01:37 +0000
Manifest this update: Sun 04 Oct 2026 18:01:37 +0000
Manifest next update: Mon 05 Oct 2026 18:01:37 +0000
Files and hashes: 1: 1mT64JfFKq9j8Kx613urXRMaNJo.roa (hash: Q/tOEoTc3quAKEYckZ1+BaTLL9Gk8uPvjXmM1gSrPTU=)
2: YKlx2lflTkw-UwoPekkv3uo4mgg.crl (hash: K2uUctWhieaJ36bNt0SNwYJqxG/imKHhoOyho8zS7sA=)
3: dHFk08gJmB0tFkgpJNYQpeItYJE.roa (hash: T5a0svL8hEV805qPD4BMTFrTEgZKRlATlMErknBPEjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKlx2lflTkw-UwoPekkv3uo4mgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:14:1b:1e:e8:fc:7e:b1:28:9c:98:fd:02:71:db:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a971da57e54e4c3e530a0f7a492fdeea389a08
Validity
Not Before: Oct 4 18:01:37 2026 GMT
Not After : Oct 5 18:01:37 2026 GMT
Subject: CN=f16c8d8a7d2bfd4b56f72cb6360501db3c0ebabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d1:45:cc:73:39:05:26:8c:bd:06:5d:38:6d:
d4:68:73:b4:da:cd:06:d2:31:37:ef:fa:56:1d:d0:
3f:f8:66:be:e2:eb:f0:79:3c:6f:76:b5:80:7b:d0:
48:34:97:ed:d4:9b:26:8a:e4:d5:b9:fa:c0:97:68:
2f:78:55:d2:70:5f:f9:e6:43:f9:bd:1d:15:32:53:
eb:b7:50:89:5c:21:aa:ec:75:ee:fe:9e:04:56:e1:
18:57:c8:cc:d5:9d:7f:42:66:c8:1c:a2:3e:2b:ea:
eb:66:3c:aa:8b:b2:47:ee:04:44:1e:b7:a5:84:27:
44:f9:6b:10:b8:f1:9e:d7:bd:26:ec:54:d1:1d:4b:
01:9e:4d:31:2f:f9:86:94:ef:d3:9f:3b:d1:c0:90:
5a:75:5c:00:38:e5:f9:98:2f:da:0d:2b:c4:ec:c8:
5f:49:a0:cb:d9:f7:5d:12:da:04:17:75:51:75:d1:
44:a6:16:c6:c5:00:63:40:ca:34:69:e1:68:4b:c3:
1d:e8:bf:cf:4b:ec:98:ef:6d:9f:72:e2:4b:d1:53:
aa:ac:ba:8a:bc:21:64:7b:1e:3a:d3:de:71:a5:33:
b2:ec:a2:7e:45:cb:f5:e9:c1:12:9a:21:14:f9:4a:
ee:62:30:04:7e:fe:0b:61:b3:36:06:12:90:8b:f3:
cd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6C:8D:8A:7D:2B:FD:4B:56:F7:2C:B6:36:05:01:DB:3C:0E:BA:BD
X509v3 Authority Key Identifier:
keyid:60:A9:71:DA:57:E5:4E:4C:3E:53:0A:0F:7A:49:2F:DE:EA:38:9A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKlx2lflTkw-UwoPekkv3uo4mgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2d:22:9c:68:0a:7b:05:39:83:1e:d9:5f:68:fb:56:56:85:
69:88:98:7f:64:c6:a4:f3:b5:ea:8b:a4:b6:ea:96:0d:d8:57:
52:4f:dd:f0:1d:54:9d:32:5b:bd:09:c0:2b:ab:a4:09:a4:50:
4a:59:64:2c:6a:9d:60:20:82:34:e8:42:a2:82:8e:b1:bd:8e:
5d:a7:b3:36:4e:d1:1c:53:2e:22:f9:aa:7b:36:f4:52:15:35:
a2:0d:aa:ea:1d:c6:29:7d:18:bf:be:08:2b:54:76:c9:1b:17:
06:07:17:8b:ea:5e:f3:6d:d6:a0:68:12:c9:07:3e:80:8a:16:
d3:cd:ff:9f:0c:a3:43:9c:50:a2:d8:b2:34:e3:d1:e1:78:c2:
57:f2:44:6e:ee:2d:56:ec:b7:f0:71:9c:f9:ae:c9:f7:54:85:
22:2f:1b:74:0c:a6:e2:69:8b:f2:5e:60:b3:04:61:ac:1f:3a:
3b:70:36:7d:ee:84:4a:c2:e5:90:4b:2a:d0:19:41:00:51:d2:
69:d5:2f:91:d4:93:15:f0:d4:c4:89:c1:21:b9:79:03:c4:d7:
d8:35:c8:71:5c:78:f2:a4:85:d1:ef:33:fe:e5:40:72:e2:a4:
f8:6d:e8:3b:c5:3b:96:d6:33:59:58:fc:5d:35:cf:cd:7e:73:
05:27:0d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:01:44 2026 by rpki-client