Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
File: YWAUEB_7zmdROc1MAroAY0rYbgI.mft (raw, json)
Hash identifier: xOku4xM/C2C12shdDuyX/EMSDGZlbD6YTvgPCzK0dOs=
Subject key identifier: A8:2C:94:1A:03:9A:95:73:36:B8:8C:FF:42:33:B7:05:CB:D3:D6:28
Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Certificate issuer: /CN=616014101ffbce675139cd4c02ba00634ad86e02
Certificate serial: 01A08AFA3D58B746C92E93FC4360DBDFF9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
Manifest number: 19DB
Signing time: Thu 10 Sep 2026 11:00:50 +0000
Manifest this update: Thu 10 Sep 2026 11:00:50 +0000
Manifest next update: Fri 11 Sep 2026 11:00:50 +0000
Files and hashes: 1: RF-tJIO2NICablpWJ0rxXstB-5E.roa (hash: B2eozTRe5cg7SctioXDuhV7y1QMBLlq9hEQ1DOOBwlc=)
2: YWAUEB_7zmdROc1MAroAY0rYbgI.crl (hash: c3NFJjoeFqGopUvMeyvcdVjCsfCbqasjsD90x/nRe4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:3d:58:b7:46:c9:2e:93:fc:43:60:db:df:f9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02
Validity
Not Before: Sep 10 11:00:50 2026 GMT
Not After : Sep 11 11:00:50 2026 GMT
Subject: CN=a82c941a039a957336b88cff4233b705cbd3d628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6a:5e:e2:b2:77:ac:15:7a:de:59:c4:21:58:
b7:4a:98:4c:56:9e:88:f1:1e:e2:36:2a:53:17:23:
17:81:6c:00:34:da:34:2b:d6:1b:e6:6f:cf:bd:bb:
c3:ad:55:64:c8:6e:b2:30:ef:b1:08:f5:48:71:aa:
3a:90:50:af:b8:d4:9a:f6:a0:2c:4c:34:6a:8b:ce:
90:12:de:51:f8:f1:3e:49:9f:66:dd:62:48:a5:d6:
e4:c0:9c:f6:80:3e:2a:f2:89:4d:c1:d6:98:6e:7b:
3c:7e:be:19:d6:17:7a:5c:12:bb:b5:91:7c:12:e4:
34:d0:69:a9:1c:ef:db:cb:05:2f:ae:fe:28:86:57:
c8:03:63:29:df:bf:c5:6a:65:51:9f:a4:d4:d2:ba:
74:66:ed:24:6b:48:04:c1:13:82:6f:11:b0:34:6a:
fb:fe:7d:48:e4:c0:a4:d9:ea:74:05:63:f1:c2:2e:
68:90:d5:77:02:fd:07:6d:3a:9b:c7:5c:71:1e:6d:
02:2b:6a:12:0b:6a:0f:cc:f8:e4:2d:cf:bd:96:d4:
ae:70:6d:fb:36:da:0b:c2:fa:ba:01:6c:6c:56:5d:
15:23:ba:c4:72:1a:76:dc:1c:5f:4b:a7:b8:ea:37:
13:1a:86:57:69:57:e4:0a:57:4e:12:ef:b5:c0:d1:
98:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2C:94:1A:03:9A:95:73:36:B8:8C:FF:42:33:B7:05:CB:D3:D6:28
X509v3 Authority Key Identifier:
keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a0:19:c4:48:17:fb:01:ef:b7:61:95:89:33:e0:26:5a:22:
c6:68:6c:eb:ba:c7:0a:d8:78:2c:db:4a:ce:58:96:24:e1:fe:
54:c1:82:a9:33:35:52:d5:a1:a4:61:39:8d:05:0a:34:79:60:
b1:aa:8d:61:eb:bf:0b:6f:08:dc:63:7f:c2:5f:87:01:cc:db:
99:34:e4:8d:de:eb:64:c3:55:63:af:5b:66:e6:70:fc:c2:93:
d2:f6:f7:8e:b2:4e:44:1e:7e:23:3d:96:b6:a9:17:2e:5a:9a:
9e:74:88:6e:f0:91:05:35:00:52:ba:d3:8a:ad:91:57:f0:e9:
d2:e5:da:8e:52:34:fa:ca:81:96:5c:3d:68:d2:2c:21:ec:a2:
e1:fb:30:44:fe:4d:de:5c:d8:67:c9:0a:cf:f6:f5:fc:f5:35:
29:be:58:2e:8e:ce:0a:b8:65:45:76:42:a9:cc:4e:89:77:1e:
03:2d:cd:35:f9:04:26:25:d5:64:37:6b:9b:a7:64:66:0a:b2:
9b:1a:ac:9e:d3:93:30:5e:ae:9f:8a:6a:bd:90:86:a3:5a:fb:
9b:5a:4d:d4:03:85:57:2b:33:4d:a0:8f:c4:bd:af:c1:d7:fc:
9d:23:5e:08:c4:3e:e0:43:65:54:f6:84:21:1a:6d:04:15:44:
6d:d1:94:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:09:10 2026 by rpki-client