Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
File: yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft (raw, json)
Hash identifier: i4UVvsYWnj7j11Hupt0a/RDQzgvGXiEi1Hmr+Ggjw/A=
Subject key identifier: A4:2C:DD:DD:04:97:5B:21:39:1D:4F:14:81:97:74:D2:E0:13:37:4E
Authority key identifier: C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
Certificate issuer: /CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Certificate serial: 019CACEBD59A6A10A43CD7B3E082C65BBBCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
Manifest number: 14DC
Signing time: Mon 02 Mar 2026 05:01:02 +0000
Manifest this update: Mon 02 Mar 2026 05:01:02 +0000
Manifest next update: Tue 03 Mar 2026 05:01:02 +0000
Files and hashes: 1: YjABWXq1K-e_wEund0ue5nxCxOU.roa (hash: PI1L0CXgsAmafCm4unnTqfAaCBg3v/MEpLRsMdPwg9s=)
2: yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl (hash: rN4C6qugtNRrqUqTrwa3d6gEH8rUl2u4r2op0Hxv33Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:d5:9a:6a:10:a4:3c:d7:b3:e0:82:c6:5b:bb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Validity
Not Before: Mar 2 05:01:02 2026 GMT
Not After : Mar 3 05:01:02 2026 GMT
Subject: CN=a42cdddd04975b21391d4f14819774d2e013374e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:6d:3e:3e:6b:aa:9c:26:59:a6:4e:9e:61:
b9:c7:32:ad:7e:47:8c:73:d5:af:aa:02:c4:f6:d0:
14:dc:d3:90:7c:28:d1:97:1a:a8:66:70:ff:2a:c9:
0c:be:fb:1f:d7:88:bd:04:36:f6:a8:a5:34:2e:33:
9c:47:35:50:e8:9a:a1:48:89:43:b6:f1:f8:35:69:
89:d8:52:c0:2a:44:29:52:4e:13:3f:b8:d2:18:7a:
ee:8f:02:5a:6a:0c:f5:1a:81:86:70:09:a0:fa:ff:
4b:d0:f7:19:4b:c5:8b:1a:9a:bf:69:b6:81:3f:0a:
bc:e5:42:75:d7:aa:dd:9d:28:13:c0:57:59:04:fa:
c1:61:75:76:f8:b9:ac:89:57:48:0e:a7:ba:57:01:
02:b9:24:90:29:a9:00:0e:8a:53:df:12:9d:c7:f4:
d7:04:c4:f5:fc:2b:0e:68:38:18:93:fe:46:ea:5a:
b7:ba:70:21:6b:51:06:4a:87:2c:46:a5:32:cf:c3:
bd:c2:d7:36:a2:c0:ef:23:c5:c5:a5:fc:67:a2:df:
ee:59:a6:c1:a0:01:d7:7b:94:02:ae:d7:df:ad:1a:
13:b1:8b:ac:32:bf:fd:1c:3b:15:73:04:cb:e2:1d:
3b:90:07:b0:e2:cc:31:46:d9:d3:70:7e:4c:03:0a:
1f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2C:DD:DD:04:97:5B:21:39:1D:4F:14:81:97:74:D2:E0:13:37:4E
X509v3 Authority Key Identifier:
keyid:C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:20:30:b5:5d:a4:7a:bf:9d:d6:36:9a:1c:b9:6d:4b:e7:ff:
95:1c:1e:5c:02:fe:3e:06:ce:1e:4b:e0:43:b1:e3:f7:e8:68:
c1:8a:f4:83:a2:64:10:e3:62:80:79:03:1c:d4:4e:b7:3f:97:
35:fc:4c:81:e7:f8:a7:fb:12:29:e1:08:da:23:d5:82:d1:ea:
a6:2e:7d:66:c7:49:8a:8e:12:1f:05:22:3c:1d:da:2e:83:7a:
6f:1d:fb:ca:11:aa:70:27:31:5c:03:9c:dc:c8:39:52:41:9d:
6c:14:7b:d3:33:19:f5:e9:6e:af:a7:f5:e1:55:2b:f4:88:9c:
80:a9:53:02:c4:70:d3:b2:47:5a:0a:d6:14:7b:81:4c:2b:3a:
6e:0c:9e:4a:9f:6d:4a:9c:d6:69:28:64:ba:d0:f3:94:20:21:
2f:12:2f:ea:87:49:eb:10:f1:ea:9f:ca:a0:50:0f:66:22:92:
b3:44:cb:15:ff:e1:86:37:cc:7b:98:29:9f:a0:c5:1c:d2:85:
de:9b:38:4c:9e:93:e6:99:62:13:23:81:e7:97:9c:5e:92:7e:
7e:fb:8a:70:05:fd:b9:5f:27:d2:18:1c:cc:03:45:73:fe:36:
ce:82:02:31:d3:07:1f:a9:85:e9:4b:f9:70:1d:0f:72:61:3d:
b5:41:96:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:51 2026 by rpki-client