Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
File: ybWfQXeebyQ19Z8aFxwIClp6RNI.mft (raw, json)
Hash identifier: mmFJ7e0cZYmQawxE7HAq/BC91eIl6LI+qlDd16gZdSo=
Subject key identifier: 20:6B:C6:4B:EC:44:FB:28:F9:95:33:ED:C0:86:78:8C:AE:9A:15:AE
Authority key identifier: C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
Certificate issuer: /CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Certificate serial: 01A10C94B4B261E7F0AEA3166262C7B9588F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
Manifest number: 1A8A
Signing time: Mon 05 Oct 2026 15:00:34 +0000
Manifest this update: Mon 05 Oct 2026 15:00:34 +0000
Manifest next update: Tue 06 Oct 2026 15:00:34 +0000
Files and hashes: 1: mDqresBCjx5tB2O9064HotHQuTM.roa (hash: VNWcNf8Sdt3FuYIE0VhCUYSxFFyBe4BxXJfzVVJjUDM=)
2: s_AKvxWCsACkF3KVOQOZnp7oWW8.roa (hash: 49Z2BVMcidGjzi+D5MSkcRcdFDX2/JcSVY9r82t0hoI=)
3: ybWfQXeebyQ19Z8aFxwIClp6RNI.crl (hash: IcDy8Q5vi6m3HfbpXkg6k7X4dha/bBW9QFfbZZdW5M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:94:b4:b2:61:e7:f0:ae:a3:16:62:62:c7:b9:58:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Validity
Not Before: Oct 5 15:00:34 2026 GMT
Not After : Oct 6 15:00:34 2026 GMT
Subject: CN=206bc64bec44fb28f99533edc086788cae9a15ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a9:8e:af:2c:ab:16:a0:c3:43:5b:82:48:e0:
64:93:07:c6:55:1c:1d:ef:30:71:8d:44:35:8e:e8:
17:de:bf:6e:98:f9:3e:f7:d7:4e:fc:43:9e:4d:93:
59:18:1c:08:e7:2a:4c:f4:66:f0:fb:95:4e:59:e5:
c4:32:ae:b5:6a:14:4c:21:a6:7b:56:09:b9:d4:77:
a6:bd:86:1a:09:91:d7:61:4f:47:18:c6:42:68:bc:
bc:1d:9c:b4:92:35:af:0c:5d:8d:cc:9e:02:e1:44:
9d:b2:39:30:85:d7:80:ca:5d:30:81:97:a6:3a:ae:
6c:2c:cc:a4:0b:47:99:60:3f:40:13:c0:83:ea:15:
3c:22:db:95:01:89:bc:85:17:6a:cf:8b:ca:60:87:
29:22:db:d0:dd:83:a9:49:3d:ef:c5:26:b9:df:bb:
e2:f4:49:b7:53:05:71:10:72:d9:f3:cf:73:32:40:
47:2f:bc:b5:ec:29:2c:08:4b:13:d9:84:cb:aa:cd:
3c:9a:0b:52:18:01:20:36:fc:fa:30:37:aa:53:fc:
9a:e0:f0:54:44:09:44:9b:07:cd:39:da:6f:f0:a2:
5a:db:3e:c2:6c:4d:38:a0:f6:17:4e:3b:7b:42:e1:
5c:a0:29:2d:0e:21:24:f0:d8:e3:d1:df:44:f2:70:
62:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6B:C6:4B:EC:44:FB:28:F9:95:33:ED:C0:86:78:8C:AE:9A:15:AE
X509v3 Authority Key Identifier:
keyid:C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e0:ba:04:17:49:7b:01:4c:6c:0c:02:3a:0a:8c:90:dd:83:
75:ce:20:30:44:73:49:62:ab:b8:7b:db:91:cd:90:f2:28:37:
5f:dd:a9:21:41:11:77:9b:3b:46:16:aa:01:22:93:15:b7:09:
31:9c:ab:b9:6a:28:54:c2:84:b1:21:6d:a7:24:47:2f:31:22:
e2:25:87:e4:0b:1d:3d:77:28:37:59:a4:13:8a:7b:53:8a:45:
d1:ec:fa:2f:dc:af:18:8e:0f:a9:5b:f3:bd:c9:7c:c2:58:91:
d1:b8:eb:2c:74:c8:64:0b:f4:06:fd:40:e7:4e:58:b7:c7:0a:
ae:7c:fa:16:ab:d8:39:c6:4e:24:4e:e6:14:af:cb:1d:c1:90:
cb:3c:33:fe:c5:4c:81:51:a3:fd:86:28:9b:5b:90:cb:c2:e5:
00:38:68:b3:60:d1:28:08:0e:8d:0c:9d:c5:f0:e2:13:0f:a8:
99:64:6b:b6:df:9b:dd:3a:73:d7:fe:72:3a:e0:c9:87:84:44:
0a:29:02:ea:41:5e:e3:95:42:54:8b:5e:41:ca:a0:b4:01:bb:
10:a3:ca:c6:2e:db:91:d3:a3:47:b0:06:32:0e:84:2f:37:0a:
e2:a4:83:01:c9:14:b8:19:4b:cf:0a:9b:ec:b0:b7:af:86:d4:
11:f9:cc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:41:14 2026 by rpki-client