Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
File: Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft (raw, json)
Hash identifier: jiw5Tn4G3tMpUMwbU/CUCNMKMBntLxl8QXdfRt0QKmQ=
Subject key identifier: 42:A3:62:AF:67:F6:83:FB:75:EA:71:AA:AE:E0:4E:C4:47:3F:3E:66
Authority key identifier: 62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
Certificate issuer: /CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Certificate serial: 01A0CE5AAE2FF272CFB20A3D65036916961A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
Manifest number: 162B
Signing time: Wed 23 Sep 2026 13:00:44 +0000
Manifest this update: Wed 23 Sep 2026 13:00:44 +0000
Manifest next update: Thu 24 Sep 2026 13:00:44 +0000
Files and hashes: 1: 3Kmog7cWFs6s3S45GoXvhR3Efno.roa (hash: Iqqkv/IBYj5OUDfgj+1rxohlVAnDwSEOY17mdlZvfIw=)
2: JVvCSDu8rrifYpO5MIC8vy1zrds.roa (hash: okxALFImBayqCq+MjZ+88HtUfnizSp2j3P1VuBRZTtY=)
3: Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl (hash: U4ttpnvjHL/xmLmIjOUmnyUZknmsXOL9Rb1/LFoblVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:ae:2f:f2:72:cf:b2:0a:3d:65:03:69:16:96:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Validity
Not Before: Sep 23 13:00:44 2026 GMT
Not After : Sep 24 13:00:44 2026 GMT
Subject: CN=42a362af67f683fb75ea71aaaee04ec4473f3e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e4:03:3d:a9:79:e9:3e:11:de:26:2d:5d:ea:
a2:47:f0:53:5b:de:8b:98:ff:91:e3:7f:3e:72:13:
45:b7:bc:1c:27:08:a1:60:48:43:a3:05:bb:36:58:
ca:49:c3:1d:f9:35:5d:39:bf:1b:c8:f9:6d:f0:4c:
1c:1b:04:11:3b:94:91:ea:ba:ec:8f:03:4c:83:98:
a2:bf:8b:16:05:2d:f6:61:d5:ed:53:7f:4e:6e:a9:
43:63:db:28:a0:58:40:06:5d:0b:f1:37:23:bd:81:
dd:35:35:e0:ee:71:6d:25:c7:2b:73:32:6a:6e:bb:
37:c9:09:9c:bc:16:22:91:fc:ff:c6:60:82:fd:75:
43:2c:65:e0:02:82:bd:10:c0:70:e9:35:b5:d8:a9:
b7:51:35:02:5b:5b:02:d5:a4:19:57:ca:21:b7:28:
f8:f2:23:ad:8f:06:db:f6:9b:c1:d9:4c:71:07:42:
41:8b:c2:64:13:fd:e2:d1:cc:3b:4d:43:c2:ac:a8:
94:8b:f3:d1:13:c4:d8:23:24:6f:24:5c:18:33:79:
0e:65:6c:c6:1e:82:60:4a:85:12:e4:ed:9c:66:c5:
29:3e:dd:8f:5a:f7:26:71:70:32:cb:9e:c3:03:6e:
31:c6:37:c0:6d:6c:38:3b:b1:bb:c2:b7:f3:41:73:
57:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A3:62:AF:67:F6:83:FB:75:EA:71:AA:AE:E0:4E:C4:47:3F:3E:66
X509v3 Authority Key Identifier:
keyid:62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4c:81:0f:8e:62:d4:86:50:64:2c:fe:79:cd:57:a5:c4:9d:
e3:5a:da:18:38:2e:07:4e:e1:b6:44:fa:27:0a:36:b3:41:87:
1e:bd:43:94:11:bf:97:a6:c8:26:93:f6:50:fa:ab:d4:1a:06:
27:7c:8c:13:b2:81:01:6c:99:67:43:15:d0:1e:b7:cf:7f:52:
13:5e:b5:00:f1:f7:70:3e:a6:e8:1e:d8:29:7b:77:ae:bd:4e:
b7:02:a7:a1:f2:79:c4:33:12:b0:4a:43:cb:00:a2:6f:80:54:
ca:f4:42:ee:4c:a3:93:10:34:4b:fd:da:92:e8:df:f4:34:f6:
6b:a6:83:ec:db:e1:99:e6:78:a1:8b:56:c5:3d:3a:85:5a:a9:
69:49:71:af:f3:7d:1e:9b:06:f2:77:1c:7b:69:20:52:cd:61:
89:01:bc:80:0c:93:e1:d9:b1:94:84:61:43:68:23:8b:92:26:
9e:5f:5e:14:3f:29:73:79:06:f1:a0:43:02:8a:03:89:a2:d5:
e7:bb:38:44:00:bf:e5:5e:a2:2a:6f:a6:7a:17:a0:15:b6:a7:
31:cb:f2:49:d8:e1:cf:66:2f:8d:25:8c:b8:fb:6e:c5:54:8d:
f0:55:c6:c6:68:0d:37:4c:8b:f5:74:ab:b3:4f:c9:6f:2f:ab:
06:50:44:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOWq4v8nLPsgo9ZQNpFpYaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNWI1Y2Y5ZTI5OTEyNDQ4Y2JiYmM4NmQyMDU2MTg5OWNk
YjEwNGQwHhcNMjYwOTIzMTMwMDQ0WhcNMjYwOTI0MTMwMDQ0WjAzMTEwLwYDVQQD
Eyg0MmEzNjJhZjY3ZjY4M2ZiNzVlYTcxYWFhZWUwNGVjNDQ3M2YzZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+QDPal56T4R3iYtXeqiR/BTW96L
mP+R438+chNFt7wcJwihYEhDowW7NljKScMd+TVdOb8byPlt8EwcGwQRO5SR6rrs
jwNMg5iiv4sWBS32YdXtU39ObqlDY9sooFhABl0L8TcjvYHdNTXg7nFtJccrczJq
brs3yQmcvBYikfz/xmCC/XVDLGXgAoK9EMBw6TW12Km3UTUCW1sC1aQZV8ohtyj4
8iOtjwbb9pvB2UxxB0JBi8JkE/3i0cw7TUPCrKiUi/PRE8TYIyRvJFwYM3kOZWzG
HoJgSoUS5O2cZsUpPt2PWvcmcXAyy57DA24xxjfAbWw4O7G7wrfzQXNXqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKjYq9n9oP7depxqq7gTsRHPz5mMB8GA1UdIwQY
MBaAFGJbXPnimRJEjLu8htIFYYmc2xBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85N2NjYWItZDBjOC00MmU4LTg3MjUt
YTU4NmIwN2FkZDcyLzEvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy85N2NjYWItZDBjOC00MmU4LTg3MjUtYTU4NmIwN2FkZDcy
LzEvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEyBD45i
1IZQZCz+ec1XpcSd41raGDguB07htkT6Jwo2s0GHHr1DlBG/l6bIJpP2UPqr1BoG
J3yME7KBAWyZZ0MV0B63z39SE161APH3cD6m6B7YKXt3rr1OtwKnofJ5xDMSsEpD
ywCib4BUyvRC7kyjkxA0S/3akujf9DT2a6aD7NvhmeZ4oYtWxT06hVqpaUlxr/N9
HpsG8ncce2kgUs1hiQG8gAyT4dmxlIRhQ2gji5Imnl9eFD8pc3kG8aBDAooDiaLV
57s4RAC/5V6iKm+mehegFbanMcvySdjhz2YvjSWMuPtuxVSN8FXGxmgNN0yL9XSr
s0/Jby+rBlBEdA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:31:07 2026 by rpki-client