Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
File: YOPZchUzu192hceOyY34FPrV1nw.mft (raw, json)
Hash identifier: Ai/ofesweeCjL7H9GXVK/b/JFFO837lxC1P/A3t+J0M=
Subject key identifier: 5D:92:CF:58:C4:E7:09:91:CB:2C:26:F5:5E:9F:F3:82:0E:22:0D:57
Authority key identifier: 60:E3:D9:72:15:33:BB:5F:76:85:C7:8E:C9:8D:F8:14:FA:D5:D6:7C
Certificate issuer: /CN=60e3d9721533bb5f7685c78ec98df814fad5d67c
Certificate serial: 01A0E0CFA97EB9DD044FDCA43CE11733E7C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
Manifest number: 01A5
Signing time: Sun 27 Sep 2026 03:01:40 +0000
Manifest this update: Sun 27 Sep 2026 03:01:40 +0000
Manifest next update: Mon 28 Sep 2026 03:01:40 +0000
Files and hashes: 1: YOPZchUzu192hceOyY34FPrV1nw.crl (hash: QmUbkbjMUIf97zvlPEG6lN6YVhPn2N/5kHfYxk8rmoE=)
2: okPZ0EMnwJL524YI5m6pf0dydug.roa (hash: 12kkW5rSqZtsaJDVjPRmMQKFWipqt44KCipTx0aZSLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:a9:7e:b9:dd:04:4f:dc:a4:3c:e1:17:33:e7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e3d9721533bb5f7685c78ec98df814fad5d67c
Validity
Not Before: Sep 27 03:01:40 2026 GMT
Not After : Sep 28 03:01:40 2026 GMT
Subject: CN=5d92cf58c4e70991cb2c26f55e9ff3820e220d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:45:8f:19:fc:68:77:f6:be:eb:08:c0:44:
91:bf:e4:40:55:23:f0:3e:4c:0d:74:f1:92:70:48:
3a:2d:39:82:51:32:ff:d3:fd:42:ec:20:a7:4e:fc:
59:3f:77:4d:70:ea:e8:b9:14:d8:13:e0:f3:76:57:
3f:9d:c8:0a:44:7a:a9:49:c5:11:68:38:45:dd:24:
30:4c:01:97:d9:d1:e4:ee:77:10:4f:ff:f0:ab:04:
74:1c:7c:13:93:30:62:91:5a:c7:45:c3:15:af:ec:
97:7a:40:d0:8b:ce:aa:2f:6a:fd:63:0e:fc:72:8f:
29:04:0a:37:82:e6:6a:fa:e2:40:72:0f:e6:6a:a4:
e2:7e:3f:46:8d:6d:a9:8e:62:e9:e9:0b:06:ac:41:
7d:4b:19:1a:81:63:85:f7:4c:e8:2f:a5:d8:47:fa:
ef:bd:ea:c9:bc:73:4f:78:e6:d1:0e:46:87:78:6d:
58:8c:2a:2b:a1:0f:19:21:75:68:12:ad:90:23:e6:
10:04:23:ab:e2:a7:b7:34:14:25:fb:dd:64:c0:b3:
69:4b:33:3a:0f:3a:4d:90:0c:37:76:00:06:29:34:
d3:d6:5e:80:06:48:98:fb:39:0f:78:92:d3:80:87:
89:63:1e:85:b6:2e:0d:80:6d:53:a7:6b:5d:cd:28:
0d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:92:CF:58:C4:E7:09:91:CB:2C:26:F5:5E:9F:F3:82:0E:22:0D:57
X509v3 Authority Key Identifier:
keyid:60:E3:D9:72:15:33:BB:5F:76:85:C7:8E:C9:8D:F8:14:FA:D5:D6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:44:94:df:33:13:3b:a3:35:81:3d:d3:5f:1e:74:04:8a:60:
c1:60:74:4f:c4:28:6f:cb:d3:df:4e:16:de:f2:3b:be:1c:7b:
ce:f3:b7:aa:cd:ef:d2:88:da:89:f4:a9:3a:dd:1d:76:27:06:
07:f3:62:7a:5b:c3:91:ce:3e:e0:f3:fd:52:fb:5d:af:69:22:
ef:05:a4:e8:a3:34:53:e3:ad:2d:8a:0c:af:b6:36:2d:83:1c:
45:e4:df:f3:2c:60:fc:dc:08:42:aa:f0:44:0c:42:c2:26:e6:
72:40:df:54:b5:19:54:c7:a4:ec:46:63:84:75:8f:be:ce:f3:
06:97:20:a1:bc:81:86:fd:49:4e:74:a2:e4:43:87:d2:1c:de:
96:67:e6:9d:79:0b:76:bc:87:23:18:a1:2f:ae:00:72:a2:c6:
c8:f8:92:a6:7c:cc:90:74:ad:5c:1b:1e:6f:c5:e5:cb:39:68:
81:e7:92:a4:e9:27:c0:6c:df:8f:21:24:ad:db:10:7c:fb:25:
f9:b4:60:b6:d0:9b:10:93:01:9a:f6:74:a2:74:ee:30:10:81:
5e:b9:d8:53:e0:a8:70:d0:95:72:89:1f:a2:df:a5:b7:ff:8e:
48:73:c4:40:e3:4d:d3:78:8c:a5:bc:27:0d:87:b9:b1:26:64:
fb:fb:0f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:55:27 2026 by rpki-client