Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier: saX5Eib8ydeN8z5AZrvdjpasIeVVWolnV2FZDRyEC+E=
Subject key identifier: 68:03:80:CC:AF:CE:CB:A1:BE:C0:EE:02:C4:3B:73:BC:16:35:5C:22
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: 01A1076EF325E45C7E4F63E0078B9C37FF8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number: 127F
Signing time: Sun 04 Oct 2026 15:01:14 +0000
Manifest this update: Sun 04 Oct 2026 15:01:14 +0000
Manifest next update: Mon 05 Oct 2026 15:01:14 +0000
Files and hashes: 1: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: 16CwzK88F9on07jNXVjOjVPsQNaK5Kx3m5s1WoRRG74=)
2: iliXSfFW9CmHSeqMey9o5nQh8YE.roa (hash: Fb6bIsCY/5XAoXMXg9zGQmjVCnZpfmN1KdROzLuLLmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:6e:f3:25:e4:5c:7e:4f:63:e0:07:8b:9c:37:ff:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: Oct 4 15:01:14 2026 GMT
Not After : Oct 5 15:01:14 2026 GMT
Subject: CN=680380ccafcecba1bec0ee02c43b73bc16355c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2a:61:cc:56:14:32:8d:2b:08:a5:94:5f:c1:
b8:f6:21:c8:cd:3b:db:7a:4c:da:23:af:2c:56:5a:
47:35:e2:8e:63:6e:10:89:b6:b7:98:9c:4e:63:1d:
94:e0:76:f8:77:99:05:35:fe:6c:4f:ff:49:7e:d2:
d9:2c:9d:b4:82:93:c8:a4:11:7a:f4:f7:5a:f9:e7:
3c:3e:5a:63:31:16:63:ce:7d:8a:01:25:88:1c:9e:
a0:43:98:a0:39:d1:6a:2c:23:91:66:eb:63:f9:24:
0b:4d:c1:ee:e3:6d:3f:f1:81:f1:7c:b4:be:5a:d6:
df:6a:6e:34:78:95:be:ec:ac:a1:65:6b:ac:5b:d8:
48:a1:a0:d2:7b:9b:aa:cd:69:33:13:b4:9e:25:ef:
74:4e:cf:a9:05:40:67:bb:2b:07:d5:eb:9c:67:c9:
fe:af:14:ca:13:94:4f:bb:8f:9e:3e:1d:7c:65:16:
34:0b:a0:49:02:6c:10:8b:30:de:c3:f3:f3:5a:ee:
d8:92:47:3c:3b:0f:5d:ef:d5:62:98:d0:0e:82:c7:
2c:94:83:c6:47:2d:6c:bf:75:41:0e:22:ee:5f:37:
2b:9f:f5:b0:12:e6:aa:14:b0:aa:19:87:d1:bf:40:
b3:f9:ec:1b:cf:16:95:0b:4d:95:88:be:4d:2c:1c:
fc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:03:80:CC:AF:CE:CB:A1:BE:C0:EE:02:C4:3B:73:BC:16:35:5C:22
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2d:de:a6:db:bb:a1:f8:85:d6:1d:a5:92:b0:7b:d3:83:36:
d5:4a:0a:1f:03:fc:80:52:a4:29:af:e6:9d:84:45:f0:e2:f3:
32:dd:58:19:4c:e4:06:c0:69:f0:06:96:99:e2:bd:4e:e9:1a:
e3:5c:3a:d5:c7:ff:99:9b:9a:c1:97:a0:5a:81:7e:79:84:a2:
5e:2f:01:b9:ca:60:a2:f8:99:6f:d6:b6:73:26:4b:fa:2f:29:
3f:5a:cf:33:46:58:e7:76:41:78:78:7b:92:eb:e6:08:8a:66:
e5:e4:23:6a:f5:df:8e:7d:f5:c6:99:56:65:65:ba:fa:30:02:
1e:5b:3b:31:ef:8d:8a:19:59:82:29:a8:0d:ac:6f:ba:6b:c7:
c1:c9:b9:9d:b6:af:d7:47:78:1c:b8:20:1b:51:52:79:23:ce:
e5:6b:f4:cb:92:a4:ae:7b:d0:17:a4:14:3d:c7:8d:70:b3:12:
90:75:f7:d0:8d:48:fa:81:31:57:43:fa:23:19:c3:cb:27:cd:
66:3a:60:c3:10:15:fa:83:64:9a:35:5d:54:3c:63:74:ff:be:
a9:b4:ee:cf:19:aa:49:4d:ef:3d:be:3d:0a:83:ce:a8:5e:9b:
e5:79:9b:30:fa:ee:4d:6d:67:28:36:5b:59:4e:98:6c:66:e5:
1c:31:dd:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEHbvMl5Fx+T2PgB4ucN/+OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjM1ZTA0YzM0YzJmNzgxZWU5ODBhMTY1MWZmNjZlNTEz
MmJjNDQwHhcNMjYxMDA0MTUwMTE0WhcNMjYxMDA1MTUwMTE0WjAzMTEwLwYDVQQD
Eyg2ODAzODBjY2FmY2VjYmExYmVjMGVlMDJjNDNiNzNiYzE2MzU1YzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCphzFYUMo0rCKWUX8G49iHIzTvb
ekzaI68sVlpHNeKOY24Qiba3mJxOYx2U4Hb4d5kFNf5sT/9JftLZLJ20gpPIpBF6
9Pda+ec8PlpjMRZjzn2KASWIHJ6gQ5igOdFqLCORZutj+SQLTcHu420/8YHxfLS+
Wtbfam40eJW+7KyhZWusW9hIoaDSe5uqzWkzE7SeJe90Ts+pBUBnuysH1eucZ8n+
rxTKE5RPu4+ePh18ZRY0C6BJAmwQizDew/PzWu7Ykkc8Ow9d79VimNAOgscslIPG
Ry1sv3VBDiLuXzcrn/WwEuaqFLCqGYfRv0Cz+ewbzxaVC02ViL5NLBz8wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgDgMyvzsuhvsDuAsQ7c7wWNVwiMB8GA1UdIwQY
MBaAFGBjXgTDTC94HumAoWUf9m5RMrxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85OTI4NmEtNDViMy00Y2VlLThkYjUt
OTM3MDgxYTljZWZhLzEvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85OTI4NmEtNDViMy00Y2VlLThkYjUtOTM3MDgxYTljZWZh
LzEvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUy3eptu7
ofiF1h2lkrB704M21UoKHwP8gFKkKa/mnYRF8OLzMt1YGUzkBsBp8AaWmeK9Tuka
41w61cf/mZuawZegWoF+eYSiXi8BucpgoviZb9a2cyZL+i8pP1rPM0ZY53ZBeHh7
kuvmCIpm5eQjavXfjn31xplWZWW6+jACHls7Me+NihlZgimoDaxvumvHwcm5nbav
10d4HLggG1FSeSPO5Wv0y5KkrnvQF6QUPceNcLMSkHX30I1I+oExV0P6IxnDyyfN
ZjpgwxAV+oNkmjVdVDxjdP++qbTuzxmqSU3vPb49CoPOqF6b5XmbMPruTW1nKDZb
WU6YbGblHDHdKQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 20:02:26 2026 by rpki-client