Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
File: YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft (raw, json)
Hash identifier: JH1OZ/mPJSWK6bHEu8xeApze/xwMd0ZdCujQRZrkzbQ=
Subject key identifier: A5:3C:CD:6D:24:08:D8:E6:BF:88:94:27:0B:12:04:E7:F7:D5:0D:36
Authority key identifier: 62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
Certificate issuer: /CN=62719c6d8b9950378a7489315fb078111a18ad55
Certificate serial: 01A0E7AE75B0082C3A2E10A77F47B57ED7B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
Manifest number: 0392
Signing time: Mon 28 Sep 2026 11:02:45 +0000
Manifest this update: Mon 28 Sep 2026 11:02:45 +0000
Manifest next update: Tue 29 Sep 2026 11:02:45 +0000
Files and hashes: 1: 2iC8kbXKFjWmx_dbdVyppAM0-6Y.roa (hash: tmWp7mxjB9vdgjX2gtWUKioc5qEfAmveNcok4dIUQAo=)
2: GRea9lk1vceom4TFm3UHffkyQH8.roa (hash: 7sx9fKJ6zSwa6txM9tmVfdAR/9hActQM7paLbf+Thbw=)
3: YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl (hash: oD6/OoYcVId/sJJC8Ds1WsS0ip91H7PyLA7Qi0pUOyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:75:b0:08:2c:3a:2e:10:a7:7f:47:b5:7e:d7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62719c6d8b9950378a7489315fb078111a18ad55
Validity
Not Before: Sep 28 11:02:45 2026 GMT
Not After : Sep 29 11:02:45 2026 GMT
Subject: CN=a53ccd6d2408d8e6bf8894270b1204e7f7d50d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:02:4c:51:3c:38:97:51:64:a8:22:40:76:
27:ff:a2:87:74:4e:ac:95:93:63:1a:66:90:4c:0f:
5b:34:ea:cb:bc:24:6b:28:3a:16:56:9a:1d:de:2c:
6b:24:e6:11:f5:3b:94:8d:ba:e6:9a:2c:5a:2d:d8:
b9:8d:96:e4:e9:3e:01:9e:9c:da:59:47:08:3c:67:
b6:e0:71:d8:a3:ec:2c:4f:ab:dc:1b:76:2f:6b:e3:
1c:8c:2f:aa:29:56:2f:5a:7c:d6:e6:f2:81:cb:5f:
13:f1:58:61:70:b2:45:04:24:4e:01:a3:1e:fe:a5:
9a:b3:98:c6:c1:b5:53:a8:27:2d:3e:31:c1:9d:60:
52:4c:42:95:94:dc:51:5f:cb:e1:11:81:a6:61:6b:
61:61:2b:f5:fa:d2:2f:e7:c4:b1:64:68:38:1d:db:
4f:cd:9c:48:d8:e7:74:6b:26:fc:bf:6b:d9:3c:39:
dc:0b:62:79:f0:7b:a4:26:40:a5:af:85:02:f9:c4:
3b:f3:d4:14:91:14:15:d9:ac:0b:68:d9:45:d6:e1:
4d:8e:e2:54:97:b1:be:f8:05:56:b0:ae:c2:40:ae:
1c:ef:7f:13:8b:f0:80:a0:37:6f:17:9a:21:62:3d:
76:9b:9b:a7:df:de:3a:64:74:9f:68:c8:7b:91:22:
9c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3C:CD:6D:24:08:D8:E6:BF:88:94:27:0B:12:04:E7:F7:D5:0D:36
X509v3 Authority Key Identifier:
keyid:62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0f:d1:fa:a7:32:b0:01:72:74:4e:8b:e8:ff:c9:1e:48:c6:
49:b8:54:d7:ce:3c:34:97:d0:b6:1b:16:41:64:25:a4:1b:2e:
46:1c:9f:93:80:0f:af:13:e8:ef:a9:c4:85:1f:44:17:57:b8:
09:46:b8:36:24:50:df:ba:03:16:60:25:1a:cd:9f:9e:e6:26:
25:89:70:c4:1f:eb:d1:f4:d1:21:a4:66:0d:dc:ac:47:aa:52:
07:fc:d4:73:d8:76:e7:fd:51:76:17:1a:1f:37:4a:99:79:67:
89:9a:50:2a:29:71:08:1a:0a:59:11:48:a5:31:5d:c1:e0:f0:
16:fa:14:87:78:4b:d0:15:34:b4:5a:d5:23:b6:ba:22:2d:05:
cc:07:d5:ee:f8:3e:9b:8e:9a:bc:5e:87:ab:b6:18:e3:ad:d3:
c4:cc:86:9e:b1:94:2e:5f:a5:54:22:6d:30:10:08:17:97:74:
7d:fa:a6:12:e9:9d:78:e6:3a:0a:99:33:3f:a5:7e:e0:32:19:
b7:2f:0a:53:5f:95:9a:07:da:b5:67:8a:cc:eb:77:2a:88:d2:
9f:5a:76:ce:07:48:bb:ad:8b:de:22:e0:61:93:ea:ac:1c:fd:
45:98:f5:26:16:64:2c:da:38:95:77:9b:01:6c:22:b4:58:bc:
c1:b5:d9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:25:11 2026 by rpki-client