Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
File: YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json)
Hash identifier: 0cMoB2+mo43awHuv8Ta/0HYPsH9Wb0ioDb9fcvmHifk=
Subject key identifier: CB:93:96:CF:6C:71:CB:8B:3F:AF:7B:8E:ED:28:5D:29:3B:F2:89:D9
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 01A11DBF5104CE303148028F71854630E99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
Manifest number: 0AFB
Signing time: Thu 08 Oct 2026 23:00:39 +0000
Manifest this update: Thu 08 Oct 2026 23:00:39 +0000
Manifest next update: Fri 09 Oct 2026 23:00:39 +0000
Files and hashes: 1: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: p7jB8EvNssgZqh1Yaa9VkcN2KEmx96ERhMimfM4PMw4=)
2: Z82rG6_S6tuaECr9XCpjrA6MXBY.roa (hash: b7wehsai3YBico5JtbrGo9m6dNte7f4BVY42wHZn7pY=)
3: _3UUxWfdIKjZ94RP_R__5_MA69o.roa (hash: xEub+d4iGHet4J1D7KwTY4kCPRXkdFvIc+V+yAPzmjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:bf:51:04:ce:30:31:48:02:8f:71:85:46:30:e9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Oct 8 23:00:39 2026 GMT
Not After : Oct 9 23:00:39 2026 GMT
Subject: CN=cb9396cf6c71cb8b3faf7b8eed285d293bf289d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:25:fc:03:f1:b4:56:56:30:01:f8:d0:c1:a3:
7f:51:35:64:33:0a:59:bc:ab:9b:2a:e3:cd:59:a2:
87:ab:24:a0:15:07:95:33:09:66:0f:aa:8c:72:5c:
a9:57:bb:30:60:41:47:b5:eb:6c:ac:7b:7f:fe:67:
a6:75:ef:5c:70:60:87:74:0e:f5:46:18:f7:e1:33:
ee:a4:db:29:d5:9e:ba:43:1c:b4:be:62:98:4d:a7:
79:00:11:bb:a2:db:f4:f4:a0:21:63:22:a1:ab:71:
95:8c:3c:46:14:26:3b:82:55:cf:2b:eb:5f:2c:e0:
51:a3:eb:39:c5:1f:f5:27:10:86:28:c1:2b:9d:7b:
0e:3c:a9:93:94:d7:63:11:cf:37:e4:8e:6f:6b:19:
71:a5:39:1d:d0:e6:6b:61:37:eb:24:72:9e:77:90:
bf:fb:89:25:e4:f8:7d:ed:65:6d:a1:81:72:ce:ac:
6d:ea:17:29:cf:c6:81:17:39:62:48:91:44:19:3e:
f0:9c:08:e3:32:71:57:33:c4:b8:f5:c8:bb:db:0d:
7b:e5:3c:a6:41:5c:71:cf:6a:07:d6:20:a8:dd:b7:
56:81:b6:f7:fa:3a:07:eb:f3:67:eb:91:69:87:7c:
cb:3c:23:f2:d7:45:6a:43:0d:56:88:f8:b8:ac:b4:
9a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:93:96:CF:6C:71:CB:8B:3F:AF:7B:8E:ED:28:5D:29:3B:F2:89:D9
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:38:41:ed:0b:3f:64:f1:fc:51:89:d4:13:77:aa:c6:27:60:
ff:e6:0a:e8:11:dd:a7:3e:05:4d:54:a4:2a:02:9d:cf:96:c6:
0a:c5:68:81:e0:76:d4:71:4c:79:8b:d9:3b:df:a3:a7:eb:9a:
40:85:4a:06:d3:80:9a:92:c8:6b:e0:3e:92:13:24:25:0b:2e:
ba:03:64:c1:83:57:5a:73:b3:7d:a6:d4:32:76:84:5f:f1:0d:
cf:a1:4f:80:e0:58:36:86:6c:8d:56:37:a5:67:33:37:37:6c:
05:02:21:68:31:c2:d3:05:9a:96:87:6f:20:9d:46:42:25:f8:
77:9e:bd:6e:88:e7:27:9e:e9:87:4f:b0:7c:61:84:cd:63:9e:
36:57:cd:78:47:e3:e0:b7:c7:29:1d:ec:46:40:db:0b:39:11:
94:cf:9e:2a:73:49:42:65:c1:d6:0b:5a:f6:ee:7f:d3:92:73:
8f:1c:7c:a6:7c:61:0b:c9:1a:ea:fe:0e:60:d9:33:54:66:7c:
66:d0:75:14:89:38:6a:46:57:4b:62:f6:45:7b:1d:e8:66:69:
48:1f:ce:e5:5c:88:e5:8c:dc:65:ee:65:a7:6b:a7:f0:16:bc:
c8:1a:7f:ed:92:a9:c3:75:27:e4:65:77:82:11:27:5e:28:01:
c7:22:6e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 10:01:23 2026 by rpki-client