Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.mft
File: YKlx2lflTkw-UwoPekkv3uo4mgg.mft (raw, json)
Hash identifier: QKHDd45xvjAjxQT3Nthh1eBuSUndCTQY+NGK/AJz9Nw=
Subject key identifier: AD:0E:AA:FC:CE:26:65:02:86:42:5C:AE:33:E9:D9:23:41:08:65:09
Authority key identifier: 60:A9:71:DA:57:E5:4E:4C:3E:53:0A:0F:7A:49:2F:DE:EA:38:9A:08
Certificate issuer: /CN=60a971da57e54e4c3e530a0f7a492fdeea389a08
Certificate serial: 01A128E8443485BE6CD43B595610BF7E7BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKlx2lflTkw-UwoPekkv3uo4mgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.mft
Manifest number: 0113
Signing time: Sun 11 Oct 2026 03:01:12 +0000
Manifest this update: Sun 11 Oct 2026 03:01:12 +0000
Manifest next update: Mon 12 Oct 2026 03:01:12 +0000
Files and hashes: 1: 1mT64JfFKq9j8Kx613urXRMaNJo.roa (hash: Q/tOEoTc3quAKEYckZ1+BaTLL9Gk8uPvjXmM1gSrPTU=)
2: YKlx2lflTkw-UwoPekkv3uo4mgg.crl (hash: c6Dce7Ohm22Z6xWu8ZJOqf/oro8zCOnfKPP3bgxs0CI=)
3: dHFk08gJmB0tFkgpJNYQpeItYJE.roa (hash: T5a0svL8hEV805qPD4BMTFrTEgZKRlATlMErknBPEjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKlx2lflTkw-UwoPekkv3uo4mgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:44:34:85:be:6c:d4:3b:59:56:10:bf:7e:7b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a971da57e54e4c3e530a0f7a492fdeea389a08
Validity
Not Before: Oct 11 03:01:12 2026 GMT
Not After : Oct 12 03:01:12 2026 GMT
Subject: CN=ad0eaafcce26650286425cae33e9d92341086509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:fd:d4:2e:ef:a6:83:e8:eb:8b:d0:c2:82:
e5:93:bf:94:13:39:6b:b9:36:6c:b2:43:2a:b7:12:
79:20:71:65:ce:07:cf:fd:74:79:3d:59:00:2a:17:
a0:5e:ec:f3:ed:81:31:0d:d5:1a:7a:25:2e:d2:eb:
d5:c1:b8:8c:62:07:26:04:40:4e:de:52:c5:88:7d:
ec:cf:ed:ec:cc:a3:4e:99:74:57:14:f4:b3:25:5b:
f0:92:00:cb:8b:54:66:c5:0c:89:ca:59:b6:c1:30:
d6:9b:67:79:5e:87:74:7e:0f:46:3b:26:77:9b:b1:
4c:dd:c3:0e:1d:ff:bd:65:f9:a4:41:3d:65:93:d6:
b8:3f:cc:d3:b8:f8:2e:6b:58:01:2f:9e:00:61:9b:
28:86:3a:91:e7:fc:c9:f9:89:40:d9:41:ec:e0:a1:
cc:18:90:99:02:d2:de:1a:06:01:57:04:98:53:64:
1d:3d:89:f9:39:cf:d5:fd:e5:32:52:f5:bb:fb:db:
bd:7f:e1:29:a6:c6:4b:b0:25:9e:f8:c6:b1:e6:94:
1c:19:59:65:0a:3c:01:62:8c:8c:4b:46:20:b3:bd:
06:ec:9f:87:fa:e5:11:0f:fd:e6:b0:7a:6d:70:aa:
cf:07:c3:c1:76:b7:0f:20:38:10:47:0e:e0:ad:0d:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0E:AA:FC:CE:26:65:02:86:42:5C:AE:33:E9:D9:23:41:08:65:09
X509v3 Authority Key Identifier:
keyid:60:A9:71:DA:57:E5:4E:4C:3E:53:0A:0F:7A:49:2F:DE:EA:38:9A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKlx2lflTkw-UwoPekkv3uo4mgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f9:53:f2:15:28:17:ad:55:a6:29:ec:3a:1d:6f:81:3a:90:
2a:2e:82:5f:aa:b2:60:0e:e8:20:7d:b9:e7:39:9c:ea:01:9e:
55:40:93:b2:71:79:b7:40:1c:04:23:95:71:cc:74:26:9e:a3:
ea:76:40:b7:aa:df:df:26:49:cc:48:9c:93:7f:ab:fe:8e:47:
8d:b2:66:2f:84:d2:83:24:41:39:04:9d:4a:6f:78:a2:9e:77:
a5:9b:dd:69:0c:be:b8:0d:23:8b:33:cd:d6:e3:f4:9f:87:a0:
62:55:b6:f3:43:25:75:d8:ca:48:17:4b:7f:0d:b4:06:da:27:
d6:e6:ef:75:27:d4:51:30:b9:6f:a4:65:30:3b:dd:1e:5f:c5:
23:32:79:83:ab:57:73:2b:ee:d4:6e:89:85:5d:79:15:44:b3:
c1:38:fa:ce:46:08:a3:77:48:90:5b:32:58:8c:55:29:91:90:
58:27:dc:ee:c2:ff:c9:d3:e8:cd:e5:00:d0:d1:3b:e2:af:94:
72:78:73:0a:b9:8d:de:6e:33:f8:d9:63:86:28:cd:da:04:60:
67:3b:e1:56:b1:ee:a0:85:d4:3a:3f:34:85:ca:99:5c:d6:b9:
77:36:64:68:9d:87:40:a2:84:96:07:e4:cf:7c:bc:e8:5d:71:
c5:19:16:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:22:42 2026 by rpki-client