Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json)
Hash identifier: e/81XVxXmc41GDoV0A8E607FWrXvsDGFeydUWIFBPyE=
Subject key identifier: 67:40:0A:C3:1C:92:21:5D:7F:DC:EE:FE:96:2A:19:16:EA:FC:E7:90
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial: 01A1DFBA82C3F6263DC18EB86080A12FEF6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
Manifest number: 0A5C
Signing time: Sun 15 Nov 2026 15:01:44 +0000
Manifest this update: Sun 15 Nov 2026 15:01:44 +0000
Manifest next update: Mon 16 Nov 2026 15:01:44 +0000
Files and hashes: 1: An9tSo9g-Gy9Up4GlPHJ27LvWXs.roa (hash: v2Ll6SU0terKek9jzeeagy8cmeBNdj6wWNsYdp2V7sU=)
2: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: 737NEeFWOSpKPTsEz4oJwLVaKothZZ0Nei0O+kjrcLE=)
3: slyTkpHxsHHbymiBgxBnw2OM_JE.roa (hash: C2RqSAQP0bQ9sirjpml2aDPA2kjBI0WnlaU7NuMnd5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:82:c3:f6:26:3d:c1:8e:b8:60:80:a1:2f:ef:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Validity
Not Before: Nov 15 15:01:44 2026 GMT
Not After : Nov 16 15:01:44 2026 GMT
Subject: CN=67400ac31c92215d7fdceefe962a1916eafce790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3d:a0:90:37:e6:1e:70:21:85:b5:c0:97:b4:
8c:29:ff:dc:6f:b2:9c:14:11:7e:dc:6e:c6:9f:79:
88:c0:6c:f0:15:4f:f9:34:f3:a4:67:6b:ef:41:ea:
96:ba:4f:c7:ff:3f:82:e0:3c:5b:1a:9c:d2:c7:82:
79:5b:37:b9:7e:4e:cb:8b:83:f3:a7:ec:b0:6e:38:
51:f4:41:35:77:1d:0a:c2:e5:c2:59:d5:5f:aa:64:
a5:ed:e8:bf:52:bb:1c:69:9a:5f:c3:b6:e1:ad:84:
ec:b8:3f:72:d2:9a:2e:70:e5:e3:35:ae:91:80:53:
23:a5:6b:e2:8b:f6:ac:e3:2d:a4:73:95:a4:51:24:
8a:8c:ca:b4:63:32:2e:bc:d5:78:c8:c5:a4:87:db:
11:41:cd:9b:de:49:58:bc:9f:d3:74:75:fe:1a:cf:
93:12:54:d2:5f:82:fe:4a:fd:5a:fe:5c:1b:2d:81:
c6:80:09:c4:8c:e5:89:6d:31:07:76:7c:80:70:50:
80:a2:0b:67:d8:f6:1f:40:37:ad:dd:c8:8e:b5:5c:
64:eb:30:64:fc:e4:d4:0d:b7:03:fb:3c:9d:db:23:
d3:2d:50:e0:2d:5a:13:ea:52:32:a5:bc:3e:65:77:
55:80:d5:98:ed:fe:39:cb:34:62:66:45:94:0e:13:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:40:0A:C3:1C:92:21:5D:7F:DC:EE:FE:96:2A:19:16:EA:FC:E7:90
X509v3 Authority Key Identifier:
keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:bb:63:2c:3a:93:5d:25:79:29:de:40:52:64:b1:77:e6:65:
a7:d7:e0:80:a1:af:ba:04:9f:ac:9a:30:0b:26:89:ed:e2:12:
b6:18:a4:d7:24:2b:2e:63:ef:a0:28:97:65:91:f9:47:2a:a9:
c4:99:c7:b8:5c:e5:96:a9:b3:68:ea:6c:5b:6f:55:d6:20:21:
c1:c6:bd:a7:a5:00:f0:1b:f5:0e:ba:d5:70:37:70:c6:b1:d3:
09:55:80:78:01:81:f0:f9:99:74:f5:99:2c:28:0e:62:1d:c1:
7d:aa:5f:63:b1:fa:cb:92:62:64:af:ca:16:4c:f4:cc:80:81:
35:03:72:2f:9b:cf:2c:28:a9:1f:ad:98:4a:c4:db:5e:c5:0d:
b2:5d:02:b3:dc:c7:38:db:76:aa:3f:80:01:a5:7f:30:d9:a9:
ea:21:0e:5d:1c:36:d4:1f:56:8f:54:96:dd:6d:d9:ec:41:c1:
7e:5f:d8:ee:b8:f7:09:53:d2:5d:b5:e5:8e:e2:6e:f8:0e:4c:
0b:8d:04:3e:81:e7:dd:bc:6f:78:b2:e0:ea:39:36:72:e3:44:
36:9c:8d:02:54:85:4a:5e:c5:da:de:84:07:21:1b:8e:57:de:
c5:2c:28:d0:c1:4a:dd:46:b1:34:f6:0d:8a:17:9b:a5:16:4a:
f5:ca:02:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:56:25 2026 by rpki-client