Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
File: YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft (raw, json)
Hash identifier: 41rheRMLsrUb/+3Ww9KPilNSb4v96hbiq4+J+6JgRbc=
Subject key identifier: CC:2F:0D:C3:52:50:45:EE:C7:A2:30:EC:F2:FA:90:73:0C:6D:94:06
Authority key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
Certificate issuer: /CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Certificate serial: 01A116AAB33F53676F837472BCC6942C2FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
Manifest number: 1A8F
Signing time: Wed 07 Oct 2026 14:00:48 +0000
Manifest this update: Wed 07 Oct 2026 14:00:48 +0000
Manifest next update: Thu 08 Oct 2026 14:00:48 +0000
Files and hashes: 1: YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl (hash: inkFIzgPn+3gFqgqs6ZRNEO4TA2hXI5vrZg6xZR4jT8=)
2: gGpmcsWE1eZyNMee1NRlA1nhhvY.roa (hash: /R+1mDGIJPwiUjgMqzEayU7QgZR187J1ACp6m3yLtqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:aa:b3:3f:53:67:6f:83:74:72:bc:c6:94:2c:2f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Validity
Not Before: Oct 7 14:00:48 2026 GMT
Not After : Oct 8 14:00:48 2026 GMT
Subject: CN=cc2f0dc3525045eec7a230ecf2fa90730c6d9406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c0:d0:ee:b7:33:c6:7d:a1:28:c2:b4:ea:7b:
9b:e3:2c:d6:90:84:f6:ee:26:55:b3:e6:64:24:1f:
49:19:5d:7f:fb:9e:c9:ad:2b:e8:6f:1a:9f:2a:05:
2c:2b:49:31:6b:6f:16:52:fe:95:fa:e5:0b:6b:2d:
a3:f9:77:26:fa:0c:ac:69:2c:ee:3a:d2:f5:2b:9e:
86:31:db:67:fe:34:08:7d:5a:30:11:2e:de:7c:a9:
86:84:f1:34:68:c8:93:c4:8a:0e:40:80:b4:5a:ee:
aa:74:9d:4e:35:50:5d:14:20:b6:e3:91:55:b3:33:
a4:1c:19:7f:f1:5e:67:d4:48:2c:d5:aa:64:1d:7c:
56:de:bd:4e:db:48:37:e8:74:0b:88:81:a3:9a:af:
a3:a3:19:78:dc:7f:57:fd:d7:b8:72:9c:5d:f0:bf:
e3:5f:8a:f3:c5:69:6a:38:68:dd:3d:f7:d4:8a:45:
e5:3e:f6:7a:d3:bc:ec:eb:7f:00:5c:d9:44:45:6b:
b1:37:89:b2:f2:43:dc:fd:5d:d9:71:31:d7:43:da:
87:d3:87:21:cb:b1:b1:23:74:ad:7b:36:7a:3c:ab:
e2:fe:ca:f8:c6:9d:0c:22:03:b2:01:84:9e:f1:37:
15:15:8d:43:df:83:9d:d1:78:9b:cf:56:a2:22:00:
e9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2F:0D:C3:52:50:45:EE:C7:A2:30:EC:F2:FA:90:73:0C:6D:94:06
X509v3 Authority Key Identifier:
keyid:60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:16:74:ba:6d:26:c9:fd:03:79:a3:d0:ab:8e:ad:ff:1c:b6:
a3:fe:c2:e3:78:a7:0f:1c:80:91:74:df:20:f4:e0:57:df:3b:
68:e8:67:2b:c9:99:75:82:f6:92:e9:5c:bd:cd:37:a6:3f:5f:
65:6a:56:35:7e:3f:d3:95:11:3e:e4:b3:21:22:ff:a1:dd:a4:
e4:da:43:96:2e:88:63:13:96:3a:0d:41:4a:d4:fc:17:61:b1:
9b:e5:98:c6:27:bf:85:76:1c:2a:c0:18:9d:85:ee:0d:79:cb:
0f:39:8f:c1:87:1f:3b:69:62:fa:e1:64:c6:05:89:a8:ca:20:
97:05:9a:6f:1e:de:63:cd:e9:60:f9:af:5e:c5:ab:68:81:9d:
2f:7c:30:bc:d5:ac:83:8c:19:bd:3f:60:86:0b:22:f0:c3:a2:
79:57:03:e0:05:59:16:77:a6:58:6a:99:4d:0a:c0:90:91:fc:
94:27:25:ad:5f:10:7f:14:55:32:08:bb:7a:69:7f:d2:9c:b2:
a9:f5:1c:40:c7:69:8e:e5:95:34:17:c9:ad:36:bb:52:ad:8f:
06:5c:3e:36:1a:04:66:13:71:af:c0:0a:4f:cb:45:b0:27:37:
7d:81:bb:f9:45:88:9a:1d:4f:25:c5:db:8c:ca:cb:77:32:f4:
a2:24:78:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:22:16 2026 by rpki-client