Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
File: y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json)
Hash identifier: TJPN0JNVaDz0LxLT0BdZvESaiWafZ+UGrFqKodj6TwE=
Subject key identifier: 6B:1D:0E:44:2D:45:7E:58:0B:0C:83:AF:99:9F:F6:50:36:2C:38:01
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial: 01A0E24FD824E56B407C19F77AD9F5704878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
Manifest number: 0C87
Signing time: Sun 27 Sep 2026 10:01:18 +0000
Manifest this update: Sun 27 Sep 2026 10:01:18 +0000
Manifest next update: Mon 28 Sep 2026 10:01:18 +0000
Files and hashes: 1: Ptns1aj1-mp6wXpfkNSnzIUQg2M.roa (hash: YJhTXg15y7lXDt6el4G9uRQ6GoxJANZucXloZAXI/Mc=)
2: SyLOIp0kgjoWQcew30ARcomgpA8.roa (hash: tw+paFoNwVB8IkQny5dTEcgX/0463MTe3dsdhAVbLtI=)
3: lSJi95jp0I1-ibaWMd_zn9diC_Y.roa (hash: ODHEc3bs//C5ArR+d/PUUYKnyXgjhKhyolbB69ZsTvE=)
4: mGTXHUzlo8jZOHFUmBeN6FRI7Bk.roa (hash: 2bfzL2d7ZwGUW9cvd/ehAd7HuPDH/Eytzu1KccPbTks=)
5: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: 7PLj5XS+cCtaHPP7VeiWP+Ltt10tPcDbGkg3ND6JTN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:4f:d8:24:e5:6b:40:7c:19:f7:7a:d9:f5:70:48:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Validity
Not Before: Sep 27 10:01:18 2026 GMT
Not After : Sep 28 10:01:18 2026 GMT
Subject: CN=6b1d0e442d457e580b0c83af999ff650362c3801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:83:5d:a9:95:39:c2:78:ae:86:51:23:94:8d:
ca:a6:03:91:46:6d:92:0c:1c:83:a6:f7:4b:2d:e0:
96:ef:c1:20:5c:22:9f:7a:1b:ff:c3:72:44:d9:c3:
3e:78:aa:f1:ab:55:29:f2:63:cd:a7:94:cb:27:fc:
07:c3:c5:b9:a3:99:42:0d:23:ec:0d:39:72:77:51:
78:84:27:ee:c2:4d:56:f1:07:76:14:33:ce:c3:62:
9b:ad:7b:7f:0a:38:86:27:b0:b3:41:c2:99:61:0a:
47:1d:74:10:cc:4f:1a:69:42:55:6b:ef:48:80:8e:
74:c9:6a:70:40:a9:66:f0:e1:3f:fa:aa:33:79:a7:
93:6e:ca:1a:69:4d:b2:83:20:9c:9a:97:fb:ea:09:
9b:54:2c:be:fb:89:fe:b5:3c:22:23:20:f2:6d:48:
52:92:7c:5d:67:6b:df:a4:7c:64:8e:fe:52:3a:d5:
37:81:61:44:a6:31:bf:86:87:0f:c9:5f:aa:b6:91:
f3:b1:f9:92:fa:33:ab:aa:4c:a0:a1:14:33:4a:3e:
cd:97:8c:41:5f:dc:1d:4a:b2:18:bd:e1:d4:f1:b1:
0e:1e:c2:04:9f:b8:37:29:d6:e5:f5:43:ce:b0:03:
0d:e4:d5:96:3b:34:ce:a6:1f:2c:b9:4d:06:74:56:
a5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1D:0E:44:2D:45:7E:58:0B:0C:83:AF:99:9F:F6:50:36:2C:38:01
X509v3 Authority Key Identifier:
keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b6:35:7c:d9:67:7c:ff:89:03:33:a9:34:37:ae:69:01:0c:
fd:fa:dd:8f:5d:73:05:b8:b6:4f:00:91:d2:ef:a7:85:eb:af:
14:0c:3d:ca:3f:a8:37:ad:a9:60:95:68:82:d3:70:f7:db:5f:
ac:ab:26:9a:ec:db:9b:6f:a0:5b:eb:a9:ed:be:49:42:00:5a:
5d:03:8c:45:e3:53:1c:27:0c:8c:3e:ef:0e:40:c0:0b:f5:64:
be:21:5e:85:5f:de:e9:30:e3:f7:2b:c5:18:c1:4c:8a:df:87:
a1:32:fa:1a:9d:df:d5:b5:bf:19:0c:46:4a:a7:04:96:e5:c6:
4b:eb:de:10:2f:fa:74:47:74:e5:97:ed:73:6f:a9:46:c9:db:
d9:1e:82:79:a3:09:5a:bd:04:d5:f7:67:17:11:46:94:97:8b:
52:70:69:3b:89:96:b1:8d:fa:47:1d:84:d9:48:b6:0b:ea:cc:
85:a8:74:da:05:dc:c2:90:5b:cb:e2:fc:97:ad:74:c1:50:e1:
31:c9:97:10:9f:29:3c:ad:2d:fa:79:f6:1a:60:e7:b3:f2:40:
b4:b2:ac:fe:52:b2:c9:31:06:f0:2c:a2:36:13:53:99:f8:49:
3e:82:68:3d:3d:44:58:db:0b:57:85:40:14:3c:89:92:f8:27:
e3:33:31:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:14:50 2026 by rpki-client