Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
File: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft (raw, json)
Hash identifier: qcbdDm71/k9djv/EX3NJJcNl4DYWUxm1Ft/2G/n8O5I=
Subject key identifier: 10:C8:92:5E:82:09:E6:1F:AD:86:E3:E3:79:73:47:C9:79:62:DD:2B
Authority key identifier: 61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
Certificate issuer: /CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Certificate serial: 01A17E17E01F808D7FAC675FD340032B4892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
Manifest number: 0CD6
Signing time: Tue 27 Oct 2026 16:00:56 +0000
Manifest this update: Tue 27 Oct 2026 16:00:56 +0000
Manifest next update: Wed 28 Oct 2026 16:00:56 +0000
Files and hashes: 1: 2filITtLre0aS9h7s_J0lG8o9ac.roa (hash: tB33DYQNO/bXVdc5HAElPMFace/IjhKVV8TRM5FqCbw=)
2: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl (hash: 84RyHmyqW2XopxG/85e0aVaCoDSnWad5CTJaB8MhDSQ=)
3: qebm1HnOnmQZcMHnLu3dqkHA5nQ.roa (hash: e345WxTWzVBJ85lJWbHPeY1YmwF+VFHc7cHG1I1//LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:17:e0:1f:80:8d:7f:ac:67:5f:d3:40:03:2b:48:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Validity
Not Before: Oct 27 16:00:56 2026 GMT
Not After : Oct 28 16:00:56 2026 GMT
Subject: CN=10c8925e8209e61fad86e3e3797347c97962dd2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:e2:a9:04:79:f6:8c:5a:6f:59:3f:83:a5:
52:aa:3e:13:05:0c:a2:7c:6a:e0:87:53:fb:cd:14:
33:86:0c:c7:a3:16:53:36:e6:9e:35:4a:1a:d0:01:
91:ea:e3:9f:da:1c:7a:6e:aa:c2:81:d1:6b:c0:35:
6d:70:2c:ac:77:18:cb:1a:4b:95:93:7d:eb:63:b3:
92:02:b8:80:1c:46:35:69:b7:f9:c0:d4:77:cc:de:
64:be:8e:6b:9e:02:9a:f0:08:47:5b:e5:5f:86:5f:
82:bc:cb:7d:1a:72:10:d8:1f:ea:85:3a:09:10:49:
f5:3d:99:f3:b7:c1:ca:da:09:8a:3a:fa:35:f8:15:
c2:be:35:4f:28:ed:11:be:d1:65:dc:8a:1d:20:fd:
89:62:f7:50:0b:9f:fc:e6:a6:aa:34:bc:4f:de:01:
6f:4d:13:27:2a:c0:e4:ed:45:73:54:87:12:3d:08:
09:de:31:71:31:f6:d7:f8:a2:fd:e5:eb:bf:a6:0f:
d0:a3:61:48:bd:59:7a:71:06:72:86:bb:cb:35:40:
e3:fd:7e:a9:3b:60:ff:94:6e:52:c7:79:9b:89:f5:
03:22:da:67:b3:59:2f:44:c5:f5:fc:62:a7:d1:52:
f7:28:26:9c:70:ca:10:21:d2:87:69:b9:90:b3:0f:
89:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C8:92:5E:82:09:E6:1F:AD:86:E3:E3:79:73:47:C9:79:62:DD:2B
X509v3 Authority Key Identifier:
keyid:61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f7:ef:53:79:2c:02:74:d4:76:e9:95:80:cd:4b:00:a7:3c:
21:39:6d:b0:6e:4c:3c:e4:d3:0c:65:21:0e:50:7d:7b:73:7e:
79:e9:6b:bc:06:40:3b:fd:a8:30:ac:ba:d4:6a:ca:6a:a5:27:
7f:56:9a:b3:e3:b7:e2:c0:d4:44:d4:ec:1e:4a:54:fd:1c:0b:
e3:70:57:e0:1f:3d:65:88:45:e5:4b:92:b2:73:96:b7:c7:ec:
f5:cb:81:9c:8e:5a:c6:8b:01:e2:7d:52:61:2c:94:94:d3:cd:
13:08:4c:9d:a4:05:a4:3e:8a:42:e9:7a:e0:f1:16:1b:86:f4:
19:8d:2c:01:8d:af:ce:f7:7d:ba:b8:1e:0b:46:85:5d:e5:13:
81:0a:f7:27:17:8e:b5:47:e3:6d:b6:d0:78:93:e2:bc:53:ab:
2f:6e:a0:06:89:85:ce:5d:0c:3f:59:b7:9f:e3:3c:1f:2a:d1:
69:d6:3a:8f:94:b3:4b:45:9e:ba:1c:8e:5d:88:f1:41:71:f0:
ed:01:03:76:a4:15:de:86:09:15:90:e5:14:2a:48:df:45:ab:
ca:1d:7e:5c:23:58:58:6b:c8:11:e7:08:92:73:c9:78:51:aa:
f1:fc:a5:35:a1:50:6e:19:7f:24:c3:36:7e:c0:1d:fa:0e:24:
58:98:0d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:27:11 2026 by rpki-client