
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
File: ytx04QgwQh1O7qmCRM_RtBGQN_8.mft (raw, json)
Hash identifier: pSwYsO9dj+/l7ir5f7+lBMGV13vCLg//xZUjR/+L8I8=
Subject key identifier: C3:2A:FA:3B:9B:AB:B2:7A:F6:91:EB:7A:E8:97:7A:ED:43:A6:80:11
Authority key identifier: CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF
Certificate issuer: /CN=cadc74e10830421d4eeea98244cfd1b4119037ff
Certificate serial: 01A128E7F4E1838319461067E0AB59178F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
Manifest number: 1A9A
Signing time: Sun 11 Oct 2026 03:00:52 +0000
Manifest this update: Sun 11 Oct 2026 03:00:52 +0000
Manifest next update: Mon 12 Oct 2026 03:00:52 +0000
Files and hashes: 1: DDllGy-0gN7gn7wR05GXGFPsqY0.roa (hash: 56XqjX/8wAHrfEweKci5I2st8Uu/z5VPWpGUoclsXrc=)
2: ytx04QgwQh1O7qmCRM_RtBGQN_8.crl (hash: BljcO8C5LRWCulSmo5xNDkRXYCJTHA6U599dBNDjfiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e7:f4:e1:83:83:19:46:10:67:e0:ab:59:17:8f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cadc74e10830421d4eeea98244cfd1b4119037ff
Validity
Not Before: Oct 11 03:00:52 2026 GMT
Not After : Oct 12 03:00:52 2026 GMT
Subject: CN=c32afa3b9babb27af691eb7ae8977aed43a68011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3a:5e:8c:d5:d8:91:9f:95:c5:e1:c0:f8:4f:
3c:e4:b6:35:a9:73:56:af:f5:5d:29:eb:06:ce:ca:
77:1a:33:ec:0f:f0:b9:30:ed:6b:39:6d:66:9b:9a:
ed:5d:3e:be:c6:0b:0b:b5:fe:ed:4d:df:ce:20:73:
62:98:19:d6:72:f9:05:ca:72:7a:29:31:32:49:6f:
33:6e:25:f7:f7:14:47:d9:9c:a2:dc:70:23:ca:8c:
d6:8c:41:a7:cf:dc:5b:92:0b:2e:a2:ca:26:72:17:
25:4f:c3:6a:b7:9f:a3:b6:92:ee:79:93:41:d4:99:
f0:28:52:0e:5a:f7:1c:7a:50:6a:8f:6e:66:3d:7d:
d3:7c:61:c8:46:07:22:ff:a1:2e:61:7f:27:7a:c2:
cb:2e:e9:80:a3:00:4b:a2:c0:68:f7:41:26:e0:71:
e1:04:0b:d8:8a:a2:62:83:6e:a4:dd:c9:aa:a0:9e:
72:4f:f8:8f:2b:00:cc:e9:1c:ec:19:5f:7f:93:d8:
0a:6c:a0:d8:8f:25:a0:9c:be:e7:cb:a3:74:ed:72:
b8:e0:e2:ff:be:23:f9:4d:89:33:94:5f:04:21:97:
d6:e5:74:27:0c:68:37:5d:6a:1d:b1:0d:79:46:30:
9b:75:a3:1e:ef:2f:78:48:af:0d:4d:2d:b1:41:dd:
f5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2A:FA:3B:9B:AB:B2:7A:F6:91:EB:7A:E8:97:7A:ED:43:A6:80:11
X509v3 Authority Key Identifier:
keyid:CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b0:fb:dd:75:34:ed:6a:bd:ce:da:b2:24:28:bd:65:6b:c6:
86:0d:65:33:2f:be:7c:81:ae:a3:66:b7:18:29:4e:8d:4e:44:
d4:c4:ca:f6:11:97:87:86:13:1c:35:5b:f7:07:e2:01:7e:fd:
1d:b3:3c:98:c1:34:63:59:91:32:08:20:db:30:af:0b:be:57:
64:c6:fa:3c:ce:05:30:29:4e:e4:46:84:ce:eb:cb:0a:ef:6d:
b8:2f:6a:d4:bd:e6:a9:72:96:19:d4:f5:95:38:5c:66:bf:94:
5c:23:19:00:5e:40:4b:d4:5f:ab:1d:2f:98:03:e9:f1:41:3f:
98:d2:9f:dd:1f:ce:1b:13:7c:9c:99:a3:cd:fd:3d:18:fe:de:
7a:04:b6:62:8c:ae:d0:ab:b7:cf:b6:b3:1f:e8:04:91:de:46:
fa:21:7e:12:b5:4c:8b:70:db:95:f8:82:64:83:a0:7a:95:4c:
76:0c:ab:76:67:23:c8:81:a4:ab:21:3d:2b:cf:54:89:74:06:
ae:80:ce:38:a8:29:b1:fb:32:7c:05:ca:3e:6c:0e:39:9b:20:
bd:fa:31:23:db:b3:e1:9a:6f:ed:ba:e5:69:52:36:f6:40:70:
be:4b:b9:16:3f:ec:2b:37:a0:9c:e6:f4:db:5e:7e:05:cf:dc:
71:41:12:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:12:00 2026 by rpki-client