Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
File: YL83NiAUbm8piugtLIqDccrLexs.mft (raw, json)
Hash identifier: m7QBf96/NfiiVDSDzdIIBY7pOLWKhvi8hqZC0Gquydo=
Subject key identifier: 80:7F:DD:6F:01:E1:0A:64:47:FF:F8:35:01:7F:BC:28:BC:5A:78:EA
Authority key identifier: 60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
Certificate issuer: /CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Certificate serial: 01A127D5376A2EF3231ABBDF1466DEB84ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
Manifest number: 1A99
Signing time: Sat 10 Oct 2026 22:00:46 +0000
Manifest this update: Sat 10 Oct 2026 22:00:46 +0000
Manifest next update: Sun 11 Oct 2026 22:00:46 +0000
Files and hashes: 1: X2IqazocGBh2TzPpbjgU543EV3k.roa (hash: bpCuK7CG9CoRNnFqOKdhYMABq2l/U8E9Zuo+llQrjU0=)
2: YL83NiAUbm8piugtLIqDccrLexs.crl (hash: 193Bkk6H8W8e67uU/LsBs4cCyqlSo88Sp2DCInJVz30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:d5:37:6a:2e:f3:23:1a:bb:df:14:66:de:b8:4a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Validity
Not Before: Oct 10 22:00:46 2026 GMT
Not After : Oct 11 22:00:46 2026 GMT
Subject: CN=807fdd6f01e10a6447fff835017fbc28bc5a78ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6f:84:e1:f9:a1:a8:87:d3:3d:11:ef:88:30:
78:bf:3b:dd:2a:17:d6:68:08:7e:76:d1:1e:72:68:
71:15:f9:00:56:01:46:cd:da:54:80:62:0c:62:b5:
39:75:57:dd:72:f6:cc:28:87:ba:17:65:19:f3:a6:
c8:e9:75:62:76:25:1f:38:b6:00:e7:78:3e:5e:51:
26:61:a7:03:a1:42:ec:99:5e:7e:41:39:c9:79:2e:
d0:5b:3a:a7:aa:38:c3:65:76:5e:a2:45:87:d4:02:
f7:5e:df:ed:34:fe:88:32:70:26:82:81:48:5b:6d:
ba:3c:cd:e2:10:92:5e:28:95:22:3b:53:c4:7f:93:
52:8f:1b:ef:d9:17:f1:e6:eb:05:76:83:05:80:bf:
b6:ea:ab:7b:1a:d1:97:8e:99:65:ce:3e:54:fb:28:
9f:c4:94:8c:a0:ce:2e:38:42:2f:58:53:6a:cf:5e:
85:46:70:8b:21:23:25:21:90:53:54:c2:63:a3:ca:
c0:c2:5c:3c:e3:f7:fd:f5:98:fe:9e:91:cc:ff:b4:
2f:b6:00:d9:b2:59:58:f2:6b:09:6c:1b:98:fa:0c:
58:5d:53:e0:28:4f:be:c3:9e:7d:64:49:4f:a3:0b:
63:60:83:f3:32:13:11:ad:d2:2c:07:b0:af:00:3f:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7F:DD:6F:01:E1:0A:64:47:FF:F8:35:01:7F:BC:28:BC:5A:78:EA
X509v3 Authority Key Identifier:
keyid:60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:df:a9:e4:65:bd:c3:6f:ba:34:c4:c2:46:de:73:3c:62:a4:
df:97:71:76:7f:7f:a3:b5:1b:18:4a:4a:f6:f4:57:44:8d:fa:
07:26:96:62:34:ae:7b:0a:1d:d1:cd:fe:f1:63:d6:37:bd:eb:
1c:ae:b3:9c:f8:8a:17:42:33:e7:e1:1f:91:5d:cd:18:fa:72:
43:1c:c3:47:3e:72:91:26:29:29:0e:76:ef:56:02:79:ea:a0:
a6:75:52:ee:57:ec:b4:0e:09:d6:c8:29:ed:c1:0e:44:fe:9f:
ed:4d:2a:a5:0c:f8:37:f7:e3:13:72:2e:5f:4e:0b:89:ec:74:
36:7e:f5:b9:63:cc:fe:42:8e:c5:ae:a9:5d:7f:38:95:7c:6c:
e2:80:c3:28:47:ea:1b:e8:bc:90:a4:ee:af:75:76:d1:cd:e4:
36:b5:65:54:7f:0a:b2:d1:94:53:aa:07:a6:96:e4:bf:fe:eb:
79:12:c8:ee:15:27:1b:5c:ae:6b:db:4f:0c:10:58:53:40:ef:
e4:ec:95:9f:5b:b6:fb:ce:a9:fd:29:72:21:01:91:c0:cf:0b:
51:09:15:f1:20:a5:a1:6b:a3:9a:3f:5f:fe:82:9e:bc:bb:f9:
b9:75:8a:6b:dc:52:05:d1:02:f2:dc:b6:d3:c0:57:02:dd:29:
75:5b:73:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 01:42:26 2026 by rpki-client