Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
File: yvYTMRp4acM1ymbLQjzG6LL6kCw.mft (raw, json)
Hash identifier: Cx8oo3kQMqIQP+mAOwtnKUfk1/UdgBZQ4GfAHjzrNb0=
Subject key identifier: 0C:62:78:21:0E:D5:AC:C7:7D:2F:ED:1D:81:98:86:5A:57:0D:EC:8C
Authority key identifier: CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
Certificate issuer: /CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Certificate serial: 01A0C331C78E2B0F5E141402EADA9D5F3EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 09:00:14 +0000
Manifest this update: Mon 21 Sep 2026 09:00:14 +0000
Manifest next update: Tue 22 Sep 2026 09:00:14 +0000
Files and hashes: 1: 1w-DEGovWlGeUvxZrEhAkhZFri0.roa (hash: erRkVrb3pyj6Yu2qx5hIETEqq580z4OTzTDEWJgauCE=)
2: yvYTMRp4acM1ymbLQjzG6LL6kCw.crl (hash: rnLBMlyr0oc+5y/USW8lIxxChKXQ0cgm7Is1Jvv+ofg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:31:c7:8e:2b:0f:5e:14:14:02:ea:da:9d:5f:3e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Validity
Not Before: Sep 21 09:00:14 2026 GMT
Not After : Sep 22 09:00:14 2026 GMT
Subject: CN=0c6278210ed5acc77d2fed1d8198865a570dec8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7b:92:96:6e:c2:b7:bd:ee:b2:34:0b:24:b8:
20:a0:9e:d7:35:6d:c1:3e:f7:39:f9:60:85:6d:b7:
17:23:2a:61:43:f8:36:ff:1d:3f:e4:af:e5:ef:26:
fe:80:e5:d1:5f:d5:d8:da:ee:b0:4d:f0:c0:61:1a:
a1:b7:39:4e:94:1b:35:72:05:55:2d:35:fc:9f:28:
d4:d0:8b:c5:7b:c7:32:a6:96:a2:43:5a:af:11:5c:
0e:63:19:79:ff:84:de:62:b2:b5:92:91:d5:9d:dd:
ea:3d:f0:9a:05:e7:e2:3b:1c:60:33:f3:32:43:12:
9a:78:77:a0:f0:84:9e:13:68:86:c8:2c:3a:af:79:
94:0c:f9:61:10:36:48:ea:5b:c1:c0:66:01:a5:b7:
ac:bb:2c:11:55:be:8b:de:02:e7:19:f4:05:9e:4e:
fe:0c:2d:66:77:85:4a:55:df:c5:0f:51:79:d7:02:
2f:4d:77:a3:12:32:e5:b5:78:ee:6f:e6:27:24:cc:
6e:55:05:84:2b:6e:6e:d9:66:47:21:20:c2:e7:1e:
bf:88:9f:99:3b:c3:dc:0e:6d:ae:02:15:6f:92:0f:
6e:e9:48:4e:99:76:2f:8f:7f:7f:7d:a0:15:7b:fe:
8c:62:59:1d:6b:a0:e2:08:7f:dc:e7:e6:c3:ba:5d:
cf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:62:78:21:0E:D5:AC:C7:7D:2F:ED:1D:81:98:86:5A:57:0D:EC:8C
X509v3 Authority Key Identifier:
keyid:CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7c:76:2d:ca:21:be:68:0e:f0:ef:55:bf:48:04:a5:18:86:
42:43:ec:1d:88:b1:2c:36:97:56:08:3c:40:cc:c7:bb:62:d6:
37:ac:78:90:6d:cf:1c:88:55:18:09:4b:b9:2b:5a:95:f3:ed:
65:dd:39:bf:a1:b1:d1:39:60:86:53:79:5b:25:cb:6a:1c:59:
70:e7:f7:b9:fc:26:ec:ae:96:b5:67:f9:32:5b:73:f7:79:b8:
85:ae:d6:ab:06:2a:aa:41:bf:07:a8:c8:94:c5:5f:3e:1f:c5:
42:15:a9:19:f9:a8:c2:ba:60:fa:0e:78:c7:a4:25:4f:0e:2e:
4c:ef:9d:57:8a:3e:04:68:42:6b:67:fa:ec:a0:ce:ae:bf:3e:
88:74:a4:85:a8:e3:d9:87:31:3d:ef:a7:78:af:06:3a:34:b6:
94:48:c4:fc:3d:cf:fc:dc:2a:f2:99:08:ad:c9:77:e0:50:1b:
32:ee:97:14:56:4e:c5:c7:50:7e:ef:ee:25:68:2d:f1:87:36:
9e:55:81:f1:ee:83:d5:d8:e2:97:71:2f:7e:6b:7e:c8:a0:1e:
94:c0:5b:ab:68:6a:f3:05:89:30:04:2f:38:f4:80:dd:34:f4:
30:53:ca:d4:6b:95:96:22:3c:47:d2:94:a0:5c:ed:05:a3:6e:
7f:4f:4a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:32:51 2026 by rpki-client