Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json)
Hash identifier: aYIihvvf45no3PqJo8NSU0xsAjbSB6Qg3IYYftOOkk8=
Subject key identifier: 24:B9:DF:6F:A6:B8:0E:2E:06:9D:A0:CE:E3:85:23:3A:5B:3F:95:8F
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial: 01A1A2926F272BF1C08DDC400D7E914FC8E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
Manifest number: 09EA
Signing time: Tue 03 Nov 2026 18:01:08 +0000
Manifest this update: Tue 03 Nov 2026 18:01:08 +0000
Manifest next update: Wed 04 Nov 2026 18:01:08 +0000
Files and hashes: 1: 1xRS3NEJjEx5UZbwpqmlKAt2jws.roa (hash: js9Axf4ESCujTVZU7VYFjkx4kXDlOUsMLJ+P9IJ0OBk=)
2: FGHSySotSpOKaNLpsAxEZbVXQws.roa (hash: nxZE3ZEDAfrFSYoAOUMwq235qoOhi9CvADpYdOkFcZU=)
3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: Eunx5jGBx3CaxlO0uCi2E/IR/4561t2RLoOWvYunkKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 16:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:92:6f:27:2b:f1:c0:8d:dc:40:0d:7e:91:4f:c8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Validity
Not Before: Nov 3 18:01:08 2026 GMT
Not After : Nov 4 18:01:08 2026 GMT
Subject: CN=24b9df6fa6b80e2e069da0cee385233a5b3f958f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:dd:83:d7:5d:a8:04:5e:70:13:0f:59:f7:
31:7b:89:39:9f:07:53:fc:27:ed:ef:a2:9d:0c:c8:
d0:58:d5:66:8a:d9:7f:a1:ce:49:87:fd:28:59:e7:
97:a5:3d:09:05:85:cc:ac:05:da:ef:27:0c:fc:f4:
81:44:f6:8f:8e:61:2c:1a:fa:ba:3d:cd:e3:78:04:
0c:9c:57:8f:52:71:47:ca:a4:4a:29:d5:eb:f0:6e:
00:00:36:23:c1:4f:5c:8e:86:20:cd:1f:b5:36:9a:
d3:7d:5e:28:41:1d:41:39:32:de:38:15:72:2e:99:
51:d6:56:f0:33:73:95:e9:67:6a:c7:63:16:2b:5b:
aa:36:8a:d0:56:e5:b4:ed:e8:7a:9a:d1:cc:aa:d1:
78:00:21:37:9c:b3:65:c3:50:4d:f3:84:d4:8e:33:
61:7b:ad:a5:6f:9d:a7:b2:9f:e1:2c:f0:97:83:af:
62:46:4a:c9:97:46:c1:f6:f9:4d:d7:89:d7:ec:1c:
eb:ae:cd:b8:12:cb:63:d7:ea:a0:30:8d:1f:7f:db:
0f:da:36:f1:84:31:c7:f3:18:78:82:ba:0e:ad:52:
b5:0d:fd:b2:07:85:2a:a6:66:f6:87:aa:d3:8d:f0:
2e:6f:5e:09:7e:27:91:e2:98:84:a7:e9:b4:9e:5c:
1f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B9:DF:6F:A6:B8:0E:2E:06:9D:A0:CE:E3:85:23:3A:5B:3F:95:8F
X509v3 Authority Key Identifier:
keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a5:dd:ed:37:4e:2d:96:aa:64:52:ce:58:b1:62:db:84:09:
de:c4:5f:9b:a9:2c:c8:e6:2c:4d:93:3c:1b:01:91:6e:85:9a:
19:5c:5c:2d:1a:2b:07:b0:aa:39:d8:db:a8:17:a0:fc:dd:33:
ff:84:43:c8:74:8e:96:cb:e0:4d:7f:e4:41:e1:71:f1:e6:fc:
5b:fa:0d:08:95:53:75:2c:82:f1:c7:8c:7c:49:b1:3f:8d:d7:
21:2e:a1:80:47:3f:0a:e1:05:43:1a:f4:11:b6:01:b7:57:4e:
2d:96:41:fa:f1:b4:cc:d5:03:46:d0:a4:52:97:b0:0b:84:f6:
e0:67:f7:49:9c:8b:a7:6f:b2:d5:71:76:21:e2:38:db:7d:85:
12:a9:18:d2:6f:f3:60:c1:d5:3b:ea:7d:02:aa:dd:da:70:62:
82:a8:ca:33:ea:35:56:42:ce:8d:dd:80:32:66:75:ed:9e:2f:
d6:d5:85:67:a1:b3:4a:2f:72:0e:e7:98:07:b2:37:a5:1c:a5:
e6:6a:d9:7b:2d:12:bb:45:bf:d4:b8:a2:a7:3b:ff:2c:14:a0:
16:b6:3b:92:00:08:52:83:db:9b:0e:26:3d:ef:65:32:24:96:
45:cf:7e:09:84:7b:2b:02:96:ed:03:f3:47:ad:f5:de:88:b6:
a9:96:51:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGikm8nK/HAjdxADX6RT8jhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MTEwMjk2ODZiMmM4MGE3ZjA0NjBiNmM2ZWYxYjkwODY3
MjgwOTcwHhcNMjYxMTAzMTgwMTA4WhcNMjYxMTA0MTgwMTA4WjAzMTEwLwYDVQQD
EygyNGI5ZGY2ZmE2YjgwZTJlMDY5ZGEwY2VlMzg1MjMzYTViM2Y5NThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMjdg9ddqARecBMPWfcxe4k5nwdT
/Cft76KdDMjQWNVmitl/oc5Jh/0oWeeXpT0JBYXMrAXa7ycM/PSBRPaPjmEsGvq6
Pc3jeAQMnFePUnFHyqRKKdXr8G4AADYjwU9cjoYgzR+1NprTfV4oQR1BOTLeOBVy
LplR1lbwM3OV6Wdqx2MWK1uqNorQVuW07eh6mtHMqtF4ACE3nLNlw1BN84TUjjNh
e62lb52nsp/hLPCXg69iRkrJl0bB9vlN14nX7Bzrrs24Estj1+qgMI0ff9sP2jbx
hDHH8xh4groOrVK1Df2yB4Uqpmb2h6rTjfAub14JfieR4piEp+m0nlwfzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCS532+muA4uBp2gzuOFIzpbP5WPMB8GA1UdIwQY
MBaAFMgRApaGssgKfwRgtsbvG5CGcoCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZmNmNjQtMDA1MS00ZGE3LTliMTIt
NTBlMzMzMzg0NjY5LzEveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hZmNmNjQtMDA1MS00ZGE3LTliMTItNTBlMzMzMzg0NjY5
LzEveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqXd7TdO
LZaqZFLOWLFi24QJ3sRfm6ksyOYsTZM8GwGRboWaGVxcLRorB7CqOdjbqBeg/N0z
/4RDyHSOlsvgTX/kQeFx8eb8W/oNCJVTdSyC8ceMfEmxP43XIS6hgEc/CuEFQxr0
EbYBt1dOLZZB+vG0zNUDRtCkUpewC4T24Gf3SZyLp2+y1XF2IeI4232FEqkY0m/z
YMHVO+p9Aqrd2nBigqjKM+o1VkLOjd2AMmZ17Z4v1tWFZ6GzSi9yDueYB7I3pRyl
5mrZey0Su0W/1Liipzv/LBSgFrY7kgAIUoPbmw4mPe9lMiSWRc9+CYR7KwKW7QPz
R6313oi2qZZRWQ==
-----END CERTIFICATE-----
Generated at Wed Nov 4 01:14:48 2026 by rpki-client