Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
File: ylmb3Bz8eujML7oV_NgMoRc3hGc.mft (raw, json)
Hash identifier: LZzOa9HKkPnFAiYLJYk50qDEF58Im0fk6clZrWxrol8=
Subject key identifier: 8B:10:6B:34:D5:3B:4D:EA:4A:3F:55:E0:22:E7:09:E1:4E:3C:79:EA
Authority key identifier: CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
Certificate issuer: /CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Certificate serial: 01A0EA405470E942E3577A95F4C75307A6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
Manifest number: 0691
Signing time: Mon 28 Sep 2026 23:01:19 +0000
Manifest this update: Mon 28 Sep 2026 23:01:19 +0000
Manifest next update: Tue 29 Sep 2026 23:01:19 +0000
Files and hashes: 1: hLDJZ-V17lQ1uYy4Yb_7EyNt5EY.roa (hash: 0stvy4uT+ZzDa9Ceq2lwui9WwwpxCgyyC5wsX5cUjjE=)
2: ylmb3Bz8eujML7oV_NgMoRc3hGc.crl (hash: MScH18bzG6O8zGEUXm5ApLy7hjbURUZqN+t3z659mSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:40:54:70:e9:42:e3:57:7a:95:f4:c7:53:07:a6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Validity
Not Before: Sep 28 23:01:19 2026 GMT
Not After : Sep 29 23:01:19 2026 GMT
Subject: CN=8b106b34d53b4dea4a3f55e022e709e14e3c79ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:b9:32:b8:72:bf:56:43:38:a0:3e:40:be:
c0:72:ed:76:86:be:38:e1:9b:91:45:53:f3:a4:50:
33:48:4d:74:95:59:45:13:9a:90:d0:6c:b8:87:c0:
d6:30:b1:97:df:a4:cd:fa:6c:75:d7:cd:13:82:e7:
75:c5:80:15:14:21:1a:b6:08:60:4c:d5:1d:92:0f:
86:d6:bc:7d:38:76:0d:4a:47:3d:a1:4f:91:4f:16:
61:c9:b4:57:c5:94:78:c9:e7:d5:64:20:1c:b6:6b:
4d:44:08:f3:ad:65:3d:ac:eb:c9:2d:01:3f:6c:80:
86:a7:5d:5c:32:e7:80:ab:ca:76:f4:13:5f:2f:0c:
61:5c:ca:f4:7e:01:9b:05:de:74:95:a3:30:a1:ee:
49:ac:cf:e2:ea:87:5c:b1:a6:8a:25:83:a9:9b:d7:
fd:58:11:3c:15:96:bd:6e:60:30:ff:e7:cf:6d:44:
3b:93:5b:52:19:30:36:b8:df:4a:44:ff:8d:ed:a1:
98:fc:6b:3b:76:e1:a7:8e:6a:50:83:d6:84:b5:1f:
31:70:f3:d6:06:5e:91:cc:01:b9:d5:25:54:bb:8d:
7c:89:68:f7:7b:3f:54:0d:73:c3:90:df:76:16:7a:
ad:21:68:3b:1a:b6:dd:38:e9:06:6e:84:09:d5:0f:
bd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:10:6B:34:D5:3B:4D:EA:4A:3F:55:E0:22:E7:09:E1:4E:3C:79:EA
X509v3 Authority Key Identifier:
keyid:CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2a:0c:6f:b6:34:ee:fc:61:fc:bf:90:34:4f:62:7e:c1:24:
54:f5:e7:9b:e1:8b:7b:b2:9d:f8:be:5c:92:ff:f9:79:7f:8a:
9e:61:9f:07:3f:93:be:aa:25:17:77:71:3a:54:2a:c2:d3:9c:
56:d4:de:54:47:f5:1b:24:c5:21:0b:4c:d0:5d:ca:94:5e:8f:
68:e4:32:17:7b:2b:47:00:9f:8a:d8:18:80:83:bf:a6:cf:36:
d0:27:11:fd:3e:10:41:d9:cd:f4:c4:05:b5:30:e7:a8:47:9d:
d7:7d:af:29:39:9a:ec:4c:45:18:d1:ae:8b:9b:f6:8f:f1:c6:
68:7f:02:86:fc:7b:10:a6:5e:ac:b6:e5:c2:29:35:f3:e4:c7:
db:b9:ea:84:dc:a9:91:8a:44:ee:29:10:de:b4:1c:67:17:60:
02:51:70:6c:3b:4d:ab:78:d6:19:07:b8:b4:e6:0e:5c:e8:ab:
17:ef:cd:52:d0:b7:23:08:72:e9:be:09:f5:c7:ea:da:f6:9c:
9a:dd:d5:26:ee:3c:68:20:a0:c2:57:2a:0f:d1:b5:bc:be:ee:
51:6a:88:57:d6:7c:d1:b2:e3:03:ae:6e:b6:b2:9e:60:4e:67:
8d:97:50:3c:1e:5c:e8:76:a3:e4:d8:32:cd:82:09:de:6e:77:
63:4d:6c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:52:06 2026 by rpki-client