Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
File: ybBR6OaBSbZgROfeSuWdc25Teqo.mft (raw, json)
Hash identifier: yd4krspkdQyhuGpHsO4KX+QugiuVsAFnTYv0hcdC7Ko=
Subject key identifier: 25:25:7B:12:C2:53:02:EF:58:D4:2C:3E:DB:20:BC:2F:94:38:9A:37
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Certificate issuer: /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial: 01A1DDCBF0C03C0508A580A8B5CD05411406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
Manifest number: 0AE0
Signing time: Sun 15 Nov 2026 06:01:32 +0000
Manifest this update: Sun 15 Nov 2026 06:01:32 +0000
Manifest next update: Mon 16 Nov 2026 06:01:32 +0000
Files and hashes: 1: ElQ5chtEAtBtP2GIXdac_TddA80.roa (hash: HOH5oCt/YkRKpTxo1H1ugWQGWMm04Hcv5fnFxFjdw8s=)
2: mDTOHKx9pFPb6EOP9UxQxm-ClKw.roa (hash: 38/vqHt1v0uvrIdlEvEwCRci+eMQynBKytD9wiXBCtc=)
3: nu9XCXuPflVxiBkepDLOxds4g2s.roa (hash: W/feVk1DUwfkmSjB+I5O4CPhUu5C032era/IbMRpza0=)
4: ybBR6OaBSbZgROfeSuWdc25Teqo.crl (hash: 2BDa4ll9yoCsy5vv8Fz5qZKG6aJoftInoJDAvk7ms40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:f0:c0:3c:05:08:a5:80:a8:b5:cd:05:41:14:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Validity
Not Before: Nov 15 06:01:32 2026 GMT
Not After : Nov 16 06:01:32 2026 GMT
Subject: CN=25257b12c25302ef58d42c3edb20bc2f94389a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d7:fc:fa:65:56:52:8b:28:89:7e:7b:cd:40:
0e:c2:3d:33:15:ac:36:54:7f:0e:81:d1:54:b0:db:
33:e5:a8:d2:43:97:c3:91:74:58:f0:57:b0:f9:ee:
7f:96:44:43:12:2d:e5:ce:ec:b3:63:dd:87:4c:7d:
61:8e:00:b0:8a:95:5f:97:fc:92:b4:26:48:00:dd:
ee:15:cb:f5:c5:0b:fe:b2:53:56:4d:ce:30:4f:66:
e1:c5:54:8f:7e:d7:20:ef:af:20:c5:5c:43:da:99:
35:41:02:71:34:32:07:69:d6:13:30:0c:f7:70:10:
ae:92:4e:28:54:eb:7a:7f:29:41:85:05:bf:8e:38:
da:1e:83:53:d2:84:6d:ed:54:cb:52:48:2b:dc:fd:
d0:cb:d4:a2:ad:43:a0:a4:46:ff:9b:33:50:d5:a3:
35:a2:e3:6c:a4:70:77:f9:b6:ba:b4:cc:9f:47:c7:
85:d9:d3:46:0d:62:81:54:0c:b9:31:57:34:0d:f9:
cb:ac:d5:b8:1a:d6:b8:8a:44:83:9c:b2:2b:9f:00:
d0:b2:ed:5f:b9:3c:98:df:f3:d1:4c:44:ca:a7:86:
71:d0:75:a9:df:e0:23:bd:84:e5:22:01:cd:30:d1:
03:6f:d7:3c:1b:55:b3:73:ae:82:b4:dc:12:f2:b6:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:25:7B:12:C2:53:02:EF:58:D4:2C:3E:DB:20:BC:2F:94:38:9A:37
X509v3 Authority Key Identifier:
keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cc:fe:c4:a1:63:83:ca:37:f5:06:63:11:93:0b:4c:92:5e:
7d:fb:cf:df:e5:8e:b0:1c:b5:d9:b1:8e:bf:3d:92:ed:24:27:
34:2e:08:6f:49:8a:fc:93:09:6c:6d:a3:74:8d:db:d9:01:42:
24:a9:49:87:3c:fc:06:ad:17:94:0f:60:7f:21:97:3b:02:5b:
69:9a:c8:39:63:43:34:36:9f:b9:69:d1:e7:2f:1a:a4:ba:af:
20:cd:17:e0:ad:d4:8b:db:21:aa:ee:71:99:d4:37:cb:cc:e9:
56:29:36:2a:ea:09:4f:7f:16:a1:53:b8:30:85:4b:a0:b1:04:
da:3d:93:de:79:7f:d9:3e:2a:dd:6b:c7:d8:90:da:14:42:6d:
5e:09:e6:34:31:bd:e9:bb:0c:84:33:a0:53:7d:c2:c9:f7:fc:
90:e7:ee:5a:d8:71:4f:6d:b4:e0:80:df:62:c3:fa:38:3b:5b:
db:31:28:1a:5a:10:f7:74:ed:4a:c0:cc:b2:55:95:61:3a:e9:
9e:d3:19:5c:9c:a3:ab:60:33:e5:28:8c:f2:25:ac:e9:a3:b0:
34:71:c1:73:20:19:a2:75:f9:de:04:4c:ec:05:e3:29:25:e3:
ba:fe:8c:91:3a:a6:63:9e:a0:80:4d:6d:af:3a:a2:37:37:06:
5d:4f:c5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:51:33 2026 by rpki-client