Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
File: yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft (raw, json)
Hash identifier: vpMBHluPqxnweHjEGjCtieIcPiZQrDzHoCqfY5D4XfA=
Subject key identifier: BB:C0:E0:8E:EB:61:54:25:5C:7B:EB:47:4B:B7:A3:A1:21:72:48:DB
Authority key identifier: C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
Certificate issuer: /CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Certificate serial: 01A0C77CED8F2561EAE52BDBC53B8E3D9911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
Manifest number: 16FC
Signing time: Tue 22 Sep 2026 05:00:48 +0000
Manifest this update: Tue 22 Sep 2026 05:00:48 +0000
Manifest next update: Wed 23 Sep 2026 05:00:48 +0000
Files and hashes: 1: YjABWXq1K-e_wEund0ue5nxCxOU.roa (hash: PI1L0CXgsAmafCm4unnTqfAaCBg3v/MEpLRsMdPwg9s=)
2: yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl (hash: 8jHNnqQahgJDC2QEckDud23jmZTaudcSPaq5ASfkeEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:ed:8f:25:61:ea:e5:2b:db:c5:3b:8e:3d:99:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Validity
Not Before: Sep 22 05:00:48 2026 GMT
Not After : Sep 23 05:00:48 2026 GMT
Subject: CN=bbc0e08eeb6154255c7beb474bb7a3a1217248db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:d1:67:1b:81:1a:49:2c:67:3a:f4:7f:61:
7b:ce:d4:db:5b:1a:c9:b9:3e:25:5a:5a:fc:1f:9f:
42:7d:90:f3:ca:39:fc:24:6e:a2:b7:41:68:d5:50:
ce:29:c8:40:3d:fd:0a:e5:dc:62:a5:0f:ec:af:63:
6a:b0:f3:1b:24:b4:4d:9d:a8:34:60:ab:65:12:73:
66:a7:f7:72:ce:d6:5f:73:29:47:45:56:5d:92:6b:
5a:ce:48:f4:30:c7:0e:59:a1:21:ab:cf:9f:a5:fe:
9d:9c:9c:c4:52:bc:05:8e:a6:0f:76:2a:b6:98:59:
87:f0:52:67:d4:b2:1d:31:64:36:c9:fd:91:61:04:
e4:f0:d4:72:b1:87:b8:c3:9c:8a:73:2d:df:bf:25:
ea:9c:68:c1:f7:e4:04:8a:a2:48:5f:3f:de:44:9a:
84:3e:a5:19:6a:75:1e:85:fb:c0:1c:d1:02:e9:fa:
70:7c:4b:56:27:24:5d:2a:1f:28:b2:8f:2c:05:4e:
73:b1:46:f3:8f:6d:47:e1:00:c1:11:78:d9:bb:10:
c6:99:60:95:c0:2a:44:a3:f6:92:3a:a4:8f:1e:db:
82:9f:c7:2a:a8:5e:ad:1b:d6:5b:28:05:fd:63:a4:
14:c0:e7:0d:ae:d9:d3:a3:28:5d:48:cf:ed:ba:f1:
61:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C0:E0:8E:EB:61:54:25:5C:7B:EB:47:4B:B7:A3:A1:21:72:48:DB
X509v3 Authority Key Identifier:
keyid:C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:89:5d:f4:3a:b5:86:3c:67:05:0c:bd:85:1e:ff:6c:df:84:
46:94:f5:ce:87:66:e2:a2:73:36:27:30:7d:d1:6b:f8:c3:84:
d8:f5:95:f9:68:f9:8b:41:b8:f9:18:ab:66:da:ee:69:07:9f:
fd:8a:c4:42:59:6a:49:c9:98:89:fb:4f:ce:2c:8c:ec:37:df:
20:84:4c:ce:62:18:14:66:c4:e3:fd:26:bc:d6:94:ff:03:17:
82:2d:91:a6:44:04:72:3a:05:f9:7a:d6:91:eb:a6:ad:8f:f9:
fa:ea:d3:2c:99:fe:e4:1f:e4:d1:dc:9d:14:2d:18:7f:9f:93:
8a:0c:4c:1f:7b:67:ee:96:50:b2:aa:1d:8d:37:95:b3:55:cb:
ee:96:31:42:3d:4c:b0:90:5a:db:3a:e7:06:66:50:da:8a:c9:
c6:31:d7:7e:51:ac:53:aa:59:fa:21:af:7b:36:13:8a:07:31:
52:94:23:9c:c7:a3:09:b9:2f:87:81:94:7c:5c:26:d9:23:b0:
fe:da:89:47:4f:43:be:6e:97:42:14:66:aa:30:f3:3a:a7:f8:
7e:e6:f0:93:3a:1d:e8:a8:b5:ed:b0:4f:93:e3:0a:0f:d8:de:
02:b1:08:1b:7e:eb:15:fb:91:4b:24:dc:e5:d4:a0:21:97:74:
41:f4:be:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:38:47 2026 by rpki-client