Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: bMGtgk0HaLN2J5YXSS7PXVzCNAWUQCxTRlKxRb9qUY0=
Subject key identifier: DA:EE:FD:01:28:70:79:3D:91:7B:45:72:1E:FE:87:1B:60:66:E1:48
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 01A187BFCD034D1822320331974F53EB6AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 12C6
Signing time: Thu 29 Oct 2026 13:00:56 +0000
Manifest this update: Thu 29 Oct 2026 13:00:56 +0000
Manifest next update: Fri 30 Oct 2026 13:00:56 +0000
Files and hashes: 1: 3ExD7nKcCYNGR68ATw2vAixFfPw.roa (hash: PRfZSceh3jh1FTBUXpKPdAPCRhio/qZFjdbYjEajKSY=)
2: EyM4wivbpkVOKedhB97D1lcXuLE.roa (hash: ztSlxeB82WQ5Ip3+c+gguWX+u1grG8UgGeYQslXQHlM=)
3: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: RhEUM2N5Lz5D8hRKtfKm1haQKGVGX/WwX1cmNisWa/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:bf:cd:03:4d:18:22:32:03:31:97:4f:53:eb:6a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Oct 29 13:00:56 2026 GMT
Not After : Oct 30 13:00:56 2026 GMT
Subject: CN=daeefd012870793d917b45721efe871b6066e148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:46:2e:7d:bf:73:ff:50:0e:bc:8e:1f:a8:
37:c4:f2:72:c9:8b:d0:e5:82:8b:b4:c7:53:25:a8:
23:02:d9:61:8b:74:f7:46:54:fd:d8:a2:42:62:b1:
61:ca:e9:f8:db:f6:7c:e4:79:b4:70:30:28:2c:31:
36:45:5a:4c:4a:24:8c:ec:a2:05:7c:43:40:8a:ff:
72:35:b7:81:f9:ed:ef:f4:40:b7:2f:f1:91:b2:f0:
52:4f:f0:86:43:9a:64:a0:eb:b7:94:e8:0e:dd:47:
51:cf:23:e3:e8:9c:70:5d:98:92:ef:d8:a7:dc:19:
3e:c0:25:99:3b:6b:fa:91:6a:e1:fe:0d:45:1d:6e:
3c:28:b2:ca:e3:a7:cf:45:8c:56:ab:e6:7c:e7:a6:
56:d0:b9:5f:e5:fa:62:84:37:1c:78:b2:26:15:57:
f3:95:b7:7c:19:7f:b5:0b:84:75:de:0f:86:60:69:
2d:ac:fe:85:f1:26:9a:71:e4:bb:cd:64:c1:29:1d:
51:32:86:0c:b5:72:f4:1a:ab:ef:08:64:de:9f:f1:
43:fd:23:97:0d:64:c2:e3:a0:e6:54:bc:c4:de:fd:
49:2f:c1:7f:df:2e:c3:50:8a:63:da:23:ed:67:3b:
6f:d9:af:bc:fb:ee:9b:c7:6b:1c:b7:2e:b8:a8:57:
e5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EE:FD:01:28:70:79:3D:91:7B:45:72:1E:FE:87:1B:60:66:E1:48
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:dd:7b:d8:57:b0:96:f9:8b:fc:ee:b1:3c:ee:dc:4d:c7:56:
6a:2c:07:1a:e6:a7:f4:3c:e5:e3:66:cf:09:64:80:1f:5d:8c:
ee:e8:f2:d5:53:36:43:41:9c:da:95:9a:82:e7:9a:7c:9f:3c:
79:fc:27:d4:1b:21:1b:c7:73:1c:41:82:9f:3d:14:48:7e:bf:
18:7e:cb:a0:f1:9c:64:69:d7:a9:b9:99:c2:68:f5:ab:cc:9d:
18:96:1e:43:3f:c9:b6:fa:bf:81:15:60:14:04:46:29:97:f2:
92:32:ff:f0:c2:d5:b5:a4:01:45:e4:c6:bc:ca:84:a3:60:f8:
d6:bb:5f:9a:55:4a:21:48:78:ab:6d:56:05:00:b0:fd:cf:ba:
26:39:24:c9:ef:94:65:2c:a7:ad:0d:f5:47:c7:19:a3:a7:27:
1c:4b:5c:c2:75:c0:70:19:31:6d:fa:13:93:53:76:a0:b5:3d:
b9:45:1e:66:02:5b:78:ff:ae:3f:d3:ce:58:6a:b8:5e:41:5e:
cd:ad:84:33:68:af:81:87:c8:c3:0c:6a:6b:68:bf:8b:2b:13:
e0:27:ec:9e:78:78:7b:c5:52:f7:72:cf:ca:2e:c5:42:99:f2:
a9:4d:5a:36:44:23:fb:5e:4b:52:44:2f:c3:3b:0e:1a:3d:3a:
c3:e8:84:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 20:42:12 2026 by rpki-client