Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier: 9FNenyD2LwQi7gkK9E2/PRAJ6Qw2qwYA+RrzhqZTZs4=
Subject key identifier: DE:9B:6E:86:29:FF:6F:07:75:04:C4:B9:F0:97:87:BF:28:67:A2:16
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 01A0E8F6A988067AC18C3CA97C0E158A811B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number: 18C0
Signing time: Mon 28 Sep 2026 17:01:14 +0000
Manifest this update: Mon 28 Sep 2026 17:01:14 +0000
Manifest next update: Tue 29 Sep 2026 17:01:14 +0000
Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: jUGLHEU7JS4GFQCioTdPi3FqaAs7zaE9hl2YF0CJCr0=)
2: tCO87qgLeHdiJcQ1IV_bd46Jvho.roa (hash: 2SSHDUuNwyIUrIbmZYF0QjOFxPKwxanOkPswUq79oUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:a9:88:06:7a:c1:8c:3c:a9:7c:0e:15:8a:81:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: Sep 28 17:01:14 2026 GMT
Not After : Sep 29 17:01:14 2026 GMT
Subject: CN=de9b6e8629ff6f077504c4b9f09787bf2867a216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:26:4f:38:b2:00:9f:03:b8:31:75:2f:5e:9f:
ce:49:4a:e4:6e:e7:61:63:07:e2:36:c2:c5:79:c1:
fd:89:c8:62:8b:74:6a:a3:cd:12:05:19:df:06:e2:
31:55:9a:b4:d6:84:e3:a5:7f:2a:87:e8:a7:c5:0b:
34:b5:cb:dd:f9:64:32:ab:93:9c:5a:56:ed:c7:68:
83:ed:3a:32:c9:a8:f9:04:84:2a:fd:57:9f:59:a3:
0f:76:ea:d2:fb:26:16:e6:e8:df:fe:30:3b:dd:f4:
0f:71:69:ac:11:9c:ec:98:fd:ad:92:75:0e:e0:14:
75:26:de:99:62:96:98:23:c2:1d:62:8e:2d:80:c6:
a9:09:13:f6:b2:e3:41:2b:88:e4:8a:89:3f:1d:7a:
91:13:a5:d2:00:3c:1c:73:10:c2:92:c1:f2:87:b7:
51:d6:13:d0:58:2b:c8:37:0d:28:7b:1d:2f:ce:b0:
8f:0d:7b:06:1c:ac:f9:6e:59:30:89:b7:94:88:b4:
8d:a2:70:c4:25:90:ff:b3:53:b8:60:56:e7:4d:f5:
ea:c8:35:d8:88:e4:f9:99:12:ed:36:db:38:47:f2:
ef:c9:ec:c8:52:0a:5f:e2:e9:1c:63:9f:65:50:93:
e8:03:5a:6d:44:37:6a:15:1a:c4:56:09:a2:25:db:
66:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9B:6E:86:29:FF:6F:07:75:04:C4:B9:F0:97:87:BF:28:67:A2:16
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:3e:35:76:17:2c:d4:6a:c1:52:2f:0d:66:42:59:3b:f3:0f:
30:8b:55:f9:da:e8:8f:3e:4e:b7:fb:8f:84:3a:08:ac:c6:97:
9f:c0:cb:67:2c:e0:53:61:31:a1:c1:8d:96:cf:da:52:20:f6:
dc:71:08:f1:27:60:4c:04:99:e8:4c:92:2b:55:19:25:5e:51:
82:27:97:68:51:39:48:d4:4f:7e:50:ce:ec:a4:c3:20:fd:e0:
3e:a5:18:65:64:13:c6:9d:8d:d4:1f:42:d2:a5:5c:c9:4e:d7:
19:02:70:6f:ce:e1:01:a1:be:2c:b0:18:8f:58:81:a3:4a:a1:
57:d0:3a:9d:1d:bf:69:da:0a:e3:db:91:fb:3b:da:8f:50:ef:
aa:4b:68:83:56:ee:c3:0e:01:b5:85:b4:91:1a:cd:58:dc:83:
e8:a0:42:a2:a0:ab:20:28:80:90:6a:d7:20:e2:c1:0d:ea:53:
30:c4:d7:89:ee:19:63:c3:9b:bc:9f:67:de:03:ae:e9:c0:de:
1b:47:58:29:f3:d7:a0:15:71:a1:18:89:21:2d:8a:5d:ed:a8:
ca:7c:d4:10:dd:72:ff:32:a9:36:7f:8a:a8:7c:40:e1:b7:44:
47:be:26:03:e5:9d:71:14:54:ed:9e:dc:f2:19:bd:62:b8:90:
fd:eb:f6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:23:10 2026 by rpki-client