Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json)
Hash identifier: kGMgS3rgAY1wjbQWrK7Vc2cGGtDptfNFdTgRftMYAYg=
Subject key identifier: E6:CC:92:49:C1:3C:DF:25:86:47:C2:D4:14:48:24:62:D6:85:7A:2F
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial: 01A0DBA9253DBBFFBEBDD99CFEC7E0638699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
Manifest number: 0983
Signing time: Sat 26 Sep 2026 03:01:30 +0000
Manifest this update: Sat 26 Sep 2026 03:01:30 +0000
Manifest next update: Sun 27 Sep 2026 03:01:30 +0000
Files and hashes: 1: 1xRS3NEJjEx5UZbwpqmlKAt2jws.roa (hash: js9Axf4ESCujTVZU7VYFjkx4kXDlOUsMLJ+P9IJ0OBk=)
2: FGHSySotSpOKaNLpsAxEZbVXQws.roa (hash: nxZE3ZEDAfrFSYoAOUMwq235qoOhi9CvADpYdOkFcZU=)
3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: K1pcXd87/HmJ9V/5p5pwkDiUjkBb9VUUt+PplDHMLeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:25:3d:bb:ff:be:bd:d9:9c:fe:c7:e0:63:86:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Validity
Not Before: Sep 26 03:01:30 2026 GMT
Not After : Sep 27 03:01:30 2026 GMT
Subject: CN=e6cc9249c13cdf258647c2d414482462d6857a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:96:0b:2e:19:38:c1:1c:c5:cf:a7:fc:c9:
12:96:29:98:c6:35:eb:a4:cd:82:4b:1b:f4:68:39:
bf:04:a8:84:39:28:eb:39:41:6c:d6:20:1d:17:66:
ed:47:64:8a:7c:72:1d:cc:1e:6a:3b:c9:60:71:c1:
86:4d:75:e1:4c:0c:e6:c9:77:28:a1:35:83:c0:3c:
bf:f8:8b:ca:d4:a3:91:87:0b:c5:9d:dd:44:32:84:
21:19:54:ce:8f:f5:5b:22:46:17:e6:df:48:91:63:
a1:16:f7:79:81:a2:28:29:e2:9b:42:14:b8:cb:f7:
03:93:72:22:71:05:e6:6f:46:96:36:e2:d7:72:a2:
71:48:ec:c6:d0:ae:15:65:0f:36:d6:06:ee:66:af:
87:6a:d1:3d:1b:d6:6d:32:f7:3f:fe:38:0e:b4:39:
1f:d8:11:29:35:9f:d9:85:d4:f6:87:64:7f:eb:32:
22:c1:2b:30:9b:30:c2:26:d5:23:00:e8:1d:1f:22:
80:73:65:03:25:3b:30:24:1b:71:32:86:07:0d:b0:
94:e5:5a:be:f3:7a:f7:3a:89:e8:9c:f5:e2:1c:93:
22:e2:4a:9a:29:f4:1e:44:fa:b5:9b:25:95:8f:f7:
51:9b:18:1b:b9:9d:7e:ca:a2:29:c9:06:95:c7:85:
e5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CC:92:49:C1:3C:DF:25:86:47:C2:D4:14:48:24:62:D6:85:7A:2F
X509v3 Authority Key Identifier:
keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:21:69:d0:65:0e:bc:83:c3:78:46:ea:5e:e3:d5:a9:50:9f:
76:61:1d:2a:0f:1d:fa:61:b4:33:6c:99:a0:0c:94:bf:68:26:
e4:43:fd:49:6f:78:3f:45:5f:85:59:6d:a7:4e:be:d3:3e:df:
19:e5:91:b7:44:b1:f7:6d:6d:b8:6b:ee:13:75:a3:41:a1:58:
1c:fe:c1:39:ca:b8:9a:2d:e9:cd:b3:53:c9:cd:4f:f0:fb:93:
d6:db:de:cb:26:ac:1c:aa:ad:ea:3d:e4:93:ea:aa:85:6a:ce:
27:01:cb:4e:bb:0b:90:68:5c:e0:34:dd:e1:9c:33:31:69:41:
e2:dc:2d:d3:d6:f3:37:0e:3d:d5:20:46:87:19:71:83:86:6b:
34:9b:c1:bb:4a:37:ec:1c:ee:ce:22:55:d6:2e:fe:78:4c:92:
d2:af:c8:55:2b:eb:e8:11:f3:93:72:31:2b:b6:67:28:03:25:
f8:71:f9:6d:5a:da:58:f4:ba:c6:4c:fd:2b:e4:06:19:88:9c:
11:59:1e:d9:3b:44:c3:bb:f0:37:52:5d:44:dc:e7:3a:40:1c:
06:c6:a2:47:0d:8c:a3:5f:79:42:cb:c8:ec:95:ac:f5:eb:43:
f1:5f:6d:9c:08:94:2a:73:7d:38:db:7b:dd:66:49:b7:27:d7:
a1:cd:00:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:05:12 2026 by rpki-client