Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
File: YtA4iKQF5huH0XBvkzs2aob7QpU.mft (raw, json)
Hash identifier: ZLaaF7FWtB7PO37MjOT3EwJm17bItSQc/OWOvaNcfL8=
Subject key identifier: A9:78:27:AA:56:AE:91:7A:5E:97:3B:D1:6F:58:25:A6:3F:27:2A:FD
Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
Certificate issuer: /CN=62d03888a405e61b87d1706f933b366a86fb4295
Certificate serial: 01A1249DC8D7233A0320C9D2A8F711196DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
Manifest number: 0A80
Signing time: Sat 10 Oct 2026 07:01:22 +0000
Manifest this update: Sat 10 Oct 2026 07:01:22 +0000
Manifest next update: Sun 11 Oct 2026 07:01:22 +0000
Files and hashes: 1: ByyzWxM12G0BPucLG6JiwdJtgEE.roa (hash: 4G2lH2XdNKPJSfTS1f9mdoy30Er7U9NNS0wrRk3c+sc=)
2: YtA4iKQF5huH0XBvkzs2aob7QpU.crl (hash: tEh4P8D28B29OggnAx1hdozVCNvExXd7jLrn/plNXVI=)
3: lH39RLJn2Hz8-UQkPP2o_JvX24I.roa (hash: iB4qVFkaq5F/oZHjDXHDMbbQUo5Vscic17RgZki9i5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:9d:c8:d7:23:3a:03:20:c9:d2:a8:f7:11:19:6d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295
Validity
Not Before: Oct 10 07:01:22 2026 GMT
Not After : Oct 11 07:01:22 2026 GMT
Subject: CN=a97827aa56ae917a5e973bd16f5825a63f272afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9d:cd:47:71:40:85:ff:3e:99:85:a3:6a:1e:
d1:4d:c3:c7:b7:1b:6f:97:01:23:e2:76:a4:46:53:
c2:8c:cd:68:02:5f:7c:d1:2b:75:81:72:34:1c:41:
7b:4e:3a:d5:8c:a4:73:49:99:36:e7:eb:a8:c7:cd:
ab:06:fa:7c:9c:c7:a6:e9:aa:10:9d:3d:50:56:5b:
4f:14:19:fd:9f:b9:c5:78:7b:54:40:c5:f4:38:10:
48:2f:dc:d7:88:fe:e8:a4:62:92:6d:57:49:c2:f9:
d8:18:e1:fd:66:c4:7b:4a:3f:37:49:61:c0:7c:08:
79:45:a1:41:eb:50:00:cf:41:03:d2:ae:78:42:57:
4c:99:84:31:96:b8:a6:24:05:21:5e:90:6f:13:ac:
32:08:0f:46:ee:b3:c3:eb:9a:54:82:fc:4b:c4:43:
a0:2b:1d:6d:a2:ad:6e:7d:9e:e7:c2:b2:79:db:0e:
39:db:ff:a9:78:3b:87:19:67:69:2f:87:6d:bf:5d:
3f:d1:f7:57:3b:63:cd:f7:ef:35:ad:8f:8b:43:9d:
16:bc:59:44:06:75:c1:1c:d4:d4:93:d8:21:5d:d7:
02:27:b0:7a:61:32:02:05:33:0c:a4:c9:ca:48:af:
2a:9e:0f:c9:51:a9:9e:92:f2:67:40:ba:7b:47:74:
05:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:78:27:AA:56:AE:91:7A:5E:97:3B:D1:6F:58:25:A6:3F:27:2A:FD
X509v3 Authority Key Identifier:
keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:47:c2:e3:61:2a:1f:ec:ee:78:eb:c9:50:84:1f:e8:3c:6e:
80:4d:c9:55:93:4a:aa:27:cc:a6:c6:1b:3c:e5:d4:d5:e5:1b:
c4:06:ff:ef:94:57:5d:06:a8:50:6a:0f:7f:38:1d:ca:97:3b:
12:ec:b3:63:9e:59:a7:86:25:a0:a8:a3:81:3d:db:16:f2:3b:
81:c4:7e:08:1b:d7:0e:3e:6b:d0:84:c5:60:d1:b2:79:e6:ec:
a9:91:0e:74:ba:35:32:92:a8:a2:a9:c9:6d:e8:79:60:e8:14:
ff:7d:06:8d:32:db:90:6b:0f:58:0b:3f:ae:15:ac:f6:8d:92:
48:9d:0d:e1:f1:0c:86:6c:39:3b:02:87:76:d0:df:df:ce:2b:
ec:ac:dc:4f:f6:2a:f4:f8:93:f8:1e:dd:66:01:9e:fd:00:83:
11:25:ca:78:a2:88:b1:00:d4:1d:53:13:90:2a:2c:05:1d:3b:
23:1d:4e:36:2f:2f:f0:f0:40:af:42:5c:21:f9:79:c0:d7:cc:
31:f9:70:7d:a8:84:96:85:10:c9:2c:b5:5f:50:7a:d5:05:05:
5a:73:9a:fa:cf:d9:cf:c0:64:51:3e:ae:7d:25:7d:7d:76:d3:
de:0c:22:b8:26:f2:7b:25:a4:e1:79:63:3c:2d:5e:6f:9a:f9:
a7:99:f7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:29:39 2026 by rpki-client