Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.mft
File: ySJCCO6vPr2vU3J3NOEhkbkx-1M.mft (raw, json)
Hash identifier: gWjEMXRC6TfjwyZtcPmjVrEStJFlCQZsUnQOuinOjMg=
Subject key identifier: AC:7D:42:BD:C6:CB:E2:F7:DB:EC:EA:65:5C:6D:EB:15:C3:86:1E:57
Authority key identifier: C9:22:42:08:EE:AF:3E:BD:AF:53:72:77:34:E1:21:91:B9:31:FB:53
Certificate issuer: /CN=c9224208eeaf3ebdaf53727734e12191b931fb53
Certificate serial: 01A0C2565A5AD72B677A9F662C8BF3B82B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySJCCO6vPr2vU3J3NOEhkbkx-1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.mft
Manifest number: 012D
Signing time: Mon 21 Sep 2026 05:00:34 +0000
Manifest this update: Mon 21 Sep 2026 05:00:34 +0000
Manifest next update: Tue 22 Sep 2026 05:00:34 +0000
Files and hashes: 1: L6cWexgMIbqFul3AirbjsOAefEg.asa (hash: 1nOkALqCPFQsioiwLDdO7OlhwTmnqBbLFbvH6uqIpPw=)
2: X2DmUx0pbN5guKhNJtTsv2u4c3Y.roa (hash: VTwewHc51dPE2RalZVl+hHr3MWkt8tZDjDqcqb8c2w4=)
3: ySJCCO6vPr2vU3J3NOEhkbkx-1M.crl (hash: whYE35YqCxAcwk+j4UOzylCBf7UHie9okgj4X81mRN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySJCCO6vPr2vU3J3NOEhkbkx-1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:5a:5a:d7:2b:67:7a:9f:66:2c:8b:f3:b8:2b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9224208eeaf3ebdaf53727734e12191b931fb53
Validity
Not Before: Sep 21 05:00:34 2026 GMT
Not After : Sep 22 05:00:34 2026 GMT
Subject: CN=ac7d42bdc6cbe2f7dbecea655c6deb15c3861e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:62:16:df:d2:fb:dd:26:51:10:05:a7:87:
e2:a6:34:ad:72:af:4c:fe:4a:fc:5a:6e:d5:f0:97:
9d:03:1e:9d:87:e3:28:55:b7:4c:02:bd:1b:70:8a:
64:17:da:9d:f3:7e:cb:5a:75:37:8a:3a:9e:71:5c:
bb:97:96:e5:98:8c:ea:28:54:bf:86:54:75:39:c5:
b4:e4:f5:80:65:ce:d9:41:5f:d5:0e:85:88:3a:4c:
58:7b:2b:a6:d5:4d:f5:d9:70:13:13:63:33:bc:12:
e1:18:1c:87:bb:d9:f6:0e:d4:bc:03:41:de:18:cf:
77:09:28:2b:e6:0b:77:18:d1:b6:29:e3:c9:73:ab:
59:1e:3f:63:4e:27:04:29:48:f6:60:69:83:47:2a:
be:51:f2:a7:06:da:01:df:4a:d2:5f:7c:e8:94:52:
75:76:cb:cd:07:3e:33:c9:1e:ef:e2:58:c9:cb:3f:
6c:3d:06:fd:79:bb:ae:20:9d:48:a8:84:53:f8:d8:
44:9c:21:b0:14:9a:4e:ec:8a:24:ba:c9:f6:83:70:
33:5b:7a:4f:90:51:48:12:8c:15:e8:db:0e:27:8f:
98:fc:39:75:31:52:55:75:a1:51:fa:ae:dc:22:be:
d7:22:ac:56:bf:c0:cd:c0:fb:3b:f1:a0:18:7d:b1:
84:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7D:42:BD:C6:CB:E2:F7:DB:EC:EA:65:5C:6D:EB:15:C3:86:1E:57
X509v3 Authority Key Identifier:
keyid:C9:22:42:08:EE:AF:3E:BD:AF:53:72:77:34:E1:21:91:B9:31:FB:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySJCCO6vPr2vU3J3NOEhkbkx-1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b9:f5:15:44:60:a9:0e:eb:2a:d3:a2:a6:81:5d:41:63:c0:
c3:63:0d:ce:3b:e9:7a:26:1f:cf:76:31:cf:8b:97:f4:a6:a0:
7d:6b:5d:3e:58:22:26:19:ad:f7:a6:b8:46:c6:44:59:c5:af:
14:71:5e:3f:11:d8:ce:f3:14:6c:07:12:f2:11:52:8a:a0:66:
a8:16:ba:1c:3e:a7:b5:0f:41:80:da:c3:f4:d4:fc:f1:f9:84:
3c:c6:2b:1e:24:f2:86:ce:1b:09:30:d8:a1:ef:e0:0c:6e:09:
0f:e5:b9:df:e5:6e:7b:38:49:f3:fc:fa:d7:07:97:2d:a7:3b:
85:f9:2c:ef:1f:20:2c:52:f3:63:ce:dd:e9:78:30:bd:3d:ce:
49:ec:82:cb:1a:ac:05:24:00:30:6a:05:c2:36:d3:18:d2:f7:
31:71:24:d6:47:ac:a1:3b:a3:1a:4f:2d:11:08:05:24:2e:b4:
51:7f:db:4e:34:f5:c9:08:50:06:92:c3:9f:ac:bc:92:30:9d:
21:ce:60:92:42:7c:9f:47:0a:1a:48:42:7d:8b:2d:22:90:a8:
ce:9b:a2:91:bd:a7:0c:e7:1c:40:4b:26:ea:22:f6:30:92:2a:
ae:dc:d5:95:fe:1a:a0:f0:57:1f:df:48:62:bc:23:e6:4a:7e:
5f:09:66:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:00:13 2026 by rpki-client