Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
File: yxODRz6KqHJwaPx1LgYOPb9j4O8.mft (raw, json)
Hash identifier: 1iV3b0X85O5O++PaD5dtEElRRYbu9TdFSomKU0AaeHM=
Subject key identifier: 78:10:9E:10:17:FE:80:1F:A7:EE:9F:23:76:9B:D3:EC:3A:CE:C3:3F
Authority key identifier: CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF
Certificate issuer: /CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
Certificate serial: 01A0CF3699D38209E9EDB7F371D249506F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
Manifest number: 0C27
Signing time: Wed 23 Sep 2026 17:00:56 +0000
Manifest this update: Wed 23 Sep 2026 17:00:56 +0000
Manifest next update: Thu 24 Sep 2026 17:00:56 +0000
Files and hashes: 1: 153fjxVtV5IdmULjsKFsyho7xsA.roa (hash: sMHTNIGNQvUhkdN5VlDx3F2+I4FUHbgADAQUyA3sCa0=)
2: yxODRz6KqHJwaPx1LgYOPb9j4O8.crl (hash: 9sDc5Rai/vlldi/17kh6pbp6ICMXA7IqOLI2dtGrWA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:99:d3:82:09:e9:ed:b7:f3:71:d2:49:50:6f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
Validity
Not Before: Sep 23 17:00:56 2026 GMT
Not After : Sep 24 17:00:56 2026 GMT
Subject: CN=78109e1017fe801fa7ee9f23769bd3ec3acec33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:41:15:f7:a4:6c:cc:75:d0:ee:f7:4e:ba:4c:
ca:bf:8b:d7:35:d5:a8:7d:62:5e:28:72:bc:32:e1:
1b:4e:4d:13:8f:db:66:0a:47:6a:5b:d3:01:6b:31:
14:7a:7f:d6:b6:28:6b:56:1b:9e:37:8e:e2:d0:f0:
b9:c2:49:3d:bd:8b:7b:b3:4e:99:34:b0:93:d2:0b:
08:16:3e:cc:29:0c:cb:44:9b:71:8e:df:53:6e:43:
91:f6:d2:65:dc:ab:74:8a:68:34:cc:d2:ea:ea:a6:
e9:06:31:98:d0:a6:e1:5f:24:be:a7:5d:cc:e5:34:
60:32:04:f9:c6:0f:ed:7f:bb:ba:ab:48:ed:32:54:
db:c1:c0:42:45:3d:51:93:07:36:8a:b9:f6:07:b1:
25:90:6d:e7:32:39:30:ef:1d:61:26:3d:2b:87:15:
98:8f:ea:d6:3c:d3:5f:ef:09:52:bb:9b:90:61:b5:
79:c9:a8:b5:c4:c3:42:0e:25:18:19:07:f0:a1:91:
69:1f:64:9e:cb:f2:f7:2e:cc:ee:81:a1:be:1f:f5:
58:34:df:4f:dc:25:48:1b:45:7a:89:2a:d9:c2:f8:
52:2f:43:c3:68:af:5f:78:8d:7e:01:76:60:0f:04:
53:a0:02:d1:0e:db:ae:50:1f:d5:2c:e6:b1:d3:78:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:10:9E:10:17:FE:80:1F:A7:EE:9F:23:76:9B:D3:EC:3A:CE:C3:3F
X509v3 Authority Key Identifier:
keyid:CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5f:af:46:7b:6c:5b:af:36:a0:45:13:d9:ba:76:e3:a4:6a:
96:97:4d:3a:c4:0c:b4:32:ac:38:9a:bf:13:11:6d:c4:ae:93:
80:68:e0:0c:88:43:7a:1f:37:b9:f9:25:ae:ef:91:7c:5a:fd:
96:1a:00:9e:bd:f8:26:fc:da:3b:99:65:cb:77:28:b5:dd:b4:
f0:ec:84:18:2d:07:ac:72:67:d7:0a:bb:db:f3:2a:f5:8f:4c:
06:97:11:f9:80:27:42:0e:ac:a0:8c:39:4a:d1:40:e8:93:a3:
a5:a3:50:88:00:75:6d:b1:c1:67:1f:f2:01:bd:d1:10:f0:6c:
0e:40:d4:c9:02:0e:49:1b:d5:43:b9:18:c9:82:53:9d:22:f8:
98:cc:38:72:ec:2b:d3:59:f3:4d:f4:f7:04:83:08:57:70:ef:
8f:c1:05:26:53:bb:2d:c6:64:a3:fe:e8:87:c3:80:70:07:b6:
4d:93:26:ac:c5:34:dd:ea:20:2a:fc:60:fc:82:24:d3:a8:ad:
12:ae:89:4b:95:c0:99:31:1a:70:e5:27:b7:30:01:2a:e3:a8:
bb:71:15:4a:71:2e:eb:3e:e8:f7:c4:84:e2:1b:9e:d0:41:ff:
86:36:f6:cc:ed:f0:7b:0f:f6:35:af:fe:02:e6:77:83:5b:a6:
df:15:4e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:44:52 2026 by rpki-client