Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier: U8eJbEmvxiqX/SCp38fTGW+pttFevb7oOzam47Ppld8=
Subject key identifier: 6A:60:7D:18:0D:09:B2:E5:08:FB:05:75:C6:D0:57:79:15:83:47:13
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 01A17DAA138D75BF79B43BF5A6AFB1C161B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number: 190D
Signing time: Tue 27 Oct 2026 14:01:00 +0000
Manifest this update: Tue 27 Oct 2026 14:01:00 +0000
Manifest next update: Wed 28 Oct 2026 14:01:00 +0000
Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: 9PgiWOJ8AYFvyEAzruWHPHRtnO/Q0JfRlOaM2Cn3kjs=)
2: tCO87qgLeHdiJcQ1IV_bd46Jvho.roa (hash: 2SSHDUuNwyIUrIbmZYF0QjOFxPKwxanOkPswUq79oUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:13:8d:75:bf:79:b4:3b:f5:a6:af:b1:c1:61:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: Oct 27 14:01:00 2026 GMT
Not After : Oct 28 14:01:00 2026 GMT
Subject: CN=6a607d180d09b2e508fb0575c6d0577915834713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9c:1a:4f:4e:9a:56:fd:5b:83:6b:f7:a9:68:
b9:ea:30:3c:cb:5a:d8:4f:06:48:7d:d8:93:60:ad:
7c:2f:4f:5f:a1:bf:4d:dd:a2:f9:de:9f:f5:21:4e:
15:2e:2f:a1:a3:a7:07:6d:a0:92:a7:e6:5b:dc:a0:
50:c1:79:46:aa:f6:f0:5f:c0:20:d2:b6:4d:5e:8e:
32:04:a6:ff:6e:7d:5e:84:ec:3e:0e:a9:00:ac:e7:
0f:a7:28:41:38:ad:fe:cc:8b:a4:cc:ba:4b:f7:34:
f6:9c:01:19:fd:38:2e:a0:3e:fe:24:8d:52:5b:77:
ed:26:50:3f:bb:f9:dc:35:5a:89:f9:fc:10:17:8d:
7a:79:8d:e5:a7:d6:9c:68:b2:b8:ac:60:27:60:0a:
e6:32:78:a5:cc:31:02:94:7c:16:fb:f5:20:c3:0a:
34:3f:46:be:87:f0:1a:a3:c6:21:24:4f:f7:c4:87:
f3:d8:da:b7:16:ea:9a:8b:42:83:27:a1:d6:97:d9:
be:f3:ed:6c:e4:42:45:97:93:48:d2:e1:ce:15:db:
df:7a:41:75:97:60:6c:ce:7d:52:ab:51:1e:37:80:
e2:4c:d4:91:7e:11:a8:b3:0c:bb:90:9c:46:0c:45:
85:ff:5d:9b:45:a8:ca:bf:97:9a:58:98:5e:4f:b3:
ad:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:60:7D:18:0D:09:B2:E5:08:FB:05:75:C6:D0:57:79:15:83:47:13
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:84:07:6a:9f:46:13:b3:ba:04:5d:e5:3f:43:e9:af:57:ad:
b1:27:ca:18:1c:02:0d:5e:f5:68:4a:30:64:ba:60:9c:b3:f4:
64:85:ac:61:4b:49:33:12:a1:2f:8b:96:8d:ba:33:ce:7d:22:
ca:05:3e:6d:1c:7b:8c:7a:bf:da:37:e6:07:0e:6c:13:f8:f9:
03:ad:84:a4:5d:3a:0c:fc:da:2c:30:51:a3:ce:19:03:35:6a:
93:1e:25:f0:e2:8c:e5:48:6b:a2:31:a0:ac:d2:b3:97:4f:a7:
09:39:ed:7d:81:cd:ef:71:58:bf:16:de:e1:34:0f:ff:09:5e:
6c:50:da:3e:5f:43:d6:e2:77:1d:db:e5:72:5a:cd:19:af:6b:
19:b6:45:5d:58:c4:8a:b0:dd:ee:03:ab:af:43:ac:9d:d1:ef:
ff:23:f2:dc:94:1a:ff:d3:4e:c1:7d:7f:f1:36:e6:a3:9e:3c:
56:13:d8:72:de:2c:5d:5a:e4:85:fa:c6:07:6f:f3:d8:f8:89:
07:24:e3:80:f4:fe:47:70:fa:a2:7f:87:af:16:d5:2d:6f:e4:
0e:99:38:93:d9:d7:80:8d:dd:63:14:cc:81:17:5b:bf:4b:55:
e0:c9:fc:c9:93:2d:b5:f4:f8:08:ef:ee:c9:d3:ef:e4:8e:9e:
2a:58:c3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:46:33 2026 by rpki-client