Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json)
Hash identifier: VaSWPo4ViVc/Sz+lvaj7y+Pd+7x3sCOYlV7i7120ONM=
Subject key identifier: 38:88:04:9B:90:EA:6B:A2:88:4C:5A:42:64:A9:AE:EA:E0:DC:1C:B1
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial: 01A09A0029FBF2D08E4CF742D706E3E851E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
Manifest number: 0961
Signing time: Sun 13 Sep 2026 09:01:36 +0000
Manifest this update: Sun 13 Sep 2026 09:01:36 +0000
Manifest next update: Mon 14 Sep 2026 09:01:36 +0000
Files and hashes: 1: 1xRS3NEJjEx5UZbwpqmlKAt2jws.roa (hash: js9Axf4ESCujTVZU7VYFjkx4kXDlOUsMLJ+P9IJ0OBk=)
2: FGHSySotSpOKaNLpsAxEZbVXQws.roa (hash: nxZE3ZEDAfrFSYoAOUMwq235qoOhi9CvADpYdOkFcZU=)
3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: y6oel9otglDL75Odl4GsvcjBLoKZ8Gj80QIpB37M1c4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 09:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:00:29:fb:f2:d0:8e:4c:f7:42:d7:06:e3:e8:51:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Validity
Not Before: Sep 13 09:01:36 2026 GMT
Not After : Sep 14 09:01:36 2026 GMT
Subject: CN=3888049b90ea6ba2884c5a4264a9aeeae0dc1cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:45:fc:b4:91:e0:d5:d1:71:78:73:7f:5a:
80:9f:99:46:4c:e8:f8:ee:5f:05:f7:fe:3f:08:f1:
0c:04:d3:c0:74:41:18:5a:93:ce:7d:3f:26:75:e8:
44:a0:e9:d6:98:ab:ec:82:26:d2:8d:15:c0:c8:c5:
50:50:4f:0e:17:80:db:0c:cf:8a:f2:54:11:7b:20:
96:8a:be:7a:d6:a0:28:05:8f:00:ce:ef:d6:de:51:
5f:5a:f0:e9:c3:d3:83:4f:7f:b8:21:a0:2e:ad:6e:
41:34:45:d0:dd:e6:dc:fd:44:08:48:32:3d:31:c9:
5a:b5:6c:dd:49:ae:a0:6a:72:47:31:f3:fa:d7:7d:
e3:d9:c9:39:7d:71:5c:02:0a:7a:ec:96:f5:f7:19:
57:23:76:59:e2:88:26:22:9d:22:af:bd:b5:be:c3:
00:a0:92:0a:ff:6b:54:d4:99:7f:6b:4a:46:88:11:
8f:a7:03:b9:45:3f:47:9e:18:14:f8:66:8b:72:a0:
4f:16:65:87:d1:1e:e7:3c:0f:ed:fc:86:60:7b:38:
83:83:d5:78:fb:86:3e:2d:52:9c:f3:98:03:bb:44:
ce:c7:93:49:94:9a:d9:21:c3:29:5d:25:fb:3e:bf:
4f:42:87:a4:a3:44:25:f8:5d:b2:95:5f:b1:6d:33:
76:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:88:04:9B:90:EA:6B:A2:88:4C:5A:42:64:A9:AE:EA:E0:DC:1C:B1
X509v3 Authority Key Identifier:
keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a1:c3:b5:b5:c0:2d:de:a5:26:65:1d:37:b8:31:62:07:bf:
9e:6e:5c:00:d4:c7:84:83:4e:8d:70:b5:97:5e:f4:35:3e:26:
ff:d5:b9:a4:ad:59:23:ef:63:29:24:0a:ed:7d:5d:6c:47:b6:
36:d9:66:e5:47:da:d6:3e:e2:37:54:b8:2e:ab:c0:83:12:fe:
b7:bd:04:53:99:4e:f6:2c:e7:48:4d:4e:69:13:eb:78:0d:ac:
4b:b2:8c:0e:59:8a:10:ba:60:81:21:53:37:d4:a1:fa:df:2f:
62:8f:e0:2d:3c:18:e3:cd:03:1c:42:b2:7e:b1:0b:93:e9:6d:
f0:1d:f7:f0:ce:16:c1:b4:c9:bf:4e:8a:bf:08:60:db:d8:69:
b5:1d:6f:8a:cc:4b:88:f7:a4:18:4c:d2:d9:c9:4f:51:44:fe:
13:13:51:f8:ec:18:02:86:33:94:1e:c3:cb:b4:c3:d0:f8:ab:
e2:9b:9c:ae:f8:bf:73:e7:d4:99:db:cf:f1:61:79:35:79:3d:
75:b9:c1:89:44:e5:32:1f:fe:a0:99:2d:08:7f:94:19:d3:48:
05:4f:cc:2b:27:d1:cc:35:ea:cf:54:ce:b4:30:56:6b:fd:74:
97:0b:5c:2f:51:54:18:5d:25:30:56:d6:73:76:8a:77:1d:a9:
57:72:f4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 17:24:10 2026 by rpki-client