Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File: yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier: 01Wcxwx+K8c+nfKJeCds+fSPOYga+q+COUyveJ6SlUc=
Subject key identifier: 1D:A5:8E:40:61:52:83:CE:38:E6:30:CC:8B:BB:2E:31:4E:DC:F2:6A
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer: /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial: 01A159668682FF5E259BF775F564CC5B4BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number: 0A37
Signing time: Tue 20 Oct 2026 13:00:53 +0000
Manifest this update: Tue 20 Oct 2026 13:00:53 +0000
Manifest next update: Wed 21 Oct 2026 13:00:53 +0000
Files and hashes: 1: LRUYfg6USsKj2QtL2hsG4I_Xo-c.roa (hash: 2GklllL0UBZh20Fr2fNv23BY6CPenyVwkECk1lNGsHo=)
2: S83M800fbELdZQf9hRfrhc7ekM0.roa (hash: t/V/LOUUpNTS7J4UMag24vHAzDu0bcjylpu2q8pupgk=)
3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: vX8VhUtn9Py0E18hNAmUJlnZ3bDbZ1yo6JpCOARnJpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:66:86:82:ff:5e:25:9b:f7:75:f5:64:cc:5b:4b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Validity
Not Before: Oct 20 13:00:53 2026 GMT
Not After : Oct 21 13:00:53 2026 GMT
Subject: CN=1da58e40615283ce38e630cc8bbb2e314edcf26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e3:f3:96:08:68:f0:bc:20:1b:d2:03:c4:d5:
31:ab:5d:cd:20:54:6b:63:5f:e8:19:ad:b6:6c:f8:
df:ae:ac:70:15:1b:47:24:7c:3e:f1:4a:20:5a:1d:
5d:67:43:ca:55:10:12:ca:1c:e8:5c:e5:ab:fc:d4:
6b:61:4d:b5:ee:cc:76:44:40:87:92:8f:30:d5:fc:
d7:6e:0d:1b:15:3e:2c:4f:06:90:dd:27:34:59:1b:
4a:9f:70:9f:1d:93:6e:30:f7:f9:29:a2:d7:3d:8c:
b1:8e:eb:43:00:2e:a8:11:78:f5:0d:8d:44:97:30:
cb:6a:53:3c:2c:9a:91:99:23:67:f0:f4:d4:39:10:
28:96:69:6f:47:3f:e1:0e:f8:6d:58:22:cf:9a:15:
ea:84:4d:39:0d:f8:2a:d0:59:10:7a:02:d8:35:cc:
6a:30:e4:23:3b:bb:e7:91:28:60:78:72:ce:af:1a:
b6:ff:f8:47:d0:05:4d:79:65:35:7d:7a:f8:c8:ec:
d3:5f:07:fd:e5:74:38:1d:b3:6e:68:05:28:8d:5d:
f9:de:2d:72:96:95:9e:96:0f:1b:89:f4:d7:f0:d6:
37:52:3a:2d:8e:05:1f:13:cd:c5:7c:f1:b7:6b:df:
a4:53:e4:dc:1a:1a:58:c2:89:09:d8:6c:2d:82:c9:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A5:8E:40:61:52:83:CE:38:E6:30:CC:8B:BB:2E:31:4E:DC:F2:6A
X509v3 Authority Key Identifier:
keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a2:11:24:da:70:40:de:de:a0:3a:58:d8:26:69:9b:ed:94:
8a:56:1a:d7:58:5b:83:41:14:d3:e2:62:da:d4:2a:97:20:1d:
8a:6f:83:f8:0e:3a:32:82:f6:64:fe:3a:af:c2:bb:be:e7:5b:
65:12:ab:4a:27:ad:7a:4c:a0:a9:ce:21:fa:01:f3:00:75:b5:
b0:2a:24:5f:b4:12:59:6a:2c:40:d0:2f:57:87:92:ed:cf:93:
86:ee:d8:62:1a:4a:97:49:4d:ee:dd:34:81:58:c3:9b:84:af:
2f:55:1e:cd:b0:fd:57:3a:2d:08:1d:7e:39:f6:77:a3:a8:d1:
79:11:75:30:0a:c6:92:5a:f0:ad:77:6d:af:91:f5:87:cf:9f:
d3:67:cf:2c:b1:16:a2:2e:d7:5d:40:e9:aa:7c:3a:4c:80:11:
0c:d2:27:c6:8b:17:76:b6:e4:f1:66:2e:b3:bd:e3:3a:c6:8e:
18:80:74:52:b2:9f:41:a8:c9:4c:44:c8:81:38:89:75:3c:8f:
46:73:a1:c8:9b:c6:0a:b2:1f:e9:06:4b:e3:3a:55:ef:7a:d2:
ba:75:a2:57:d2:a7:a4:00:ea:4b:a8:29:12:a7:e5:bb:c5:5d:
f6:ae:cf:c3:e9:06:9e:59:31:0f:6c:58:c3:ff:85:63:f6:80:
a5:45:be:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:40 2026 by rpki-client