Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
File: Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft (raw, json)
Hash identifier: hj24W9WQCkA/USJr9zejyX5xkOvNDlCeBcRzM2UKNeo=
Subject key identifier: 09:17:80:84:BA:11:52:DD:11:0F:0D:BB:B9:1D:D2:8E:B3:93:DE:29
Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
Certificate issuer: /CN=61e6ea83926bc478c785471d805a5c1210a8c993
Certificate serial: 01A160B2144D7D362D8283E7E3A1D7326242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
Manifest number: 1AC0
Signing time: Wed 21 Oct 2026 23:00:45 +0000
Manifest this update: Wed 21 Oct 2026 23:00:45 +0000
Manifest next update: Thu 22 Oct 2026 23:00:45 +0000
Files and hashes: 1: 2dU_Wx7maoKES4uWBmISrFThyIU.roa (hash: ffH0TAg9XSxzOXt+6AV+6sDEvW+c8igbg9XX2e6NJUY=)
2: HZb22Oio0r0dOkO7Ylc22UNpmkI.roa (hash: 4bxPJ8gmL9NMrQNM+ipouVsdrPbO9cdpsR6HkCC+6eM=)
3: Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl (hash: cHpHvyFr7g5VooCsfIWXCvtAxhlA18hFjgC3X6051ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:b2:14:4d:7d:36:2d:82:83:e7:e3:a1:d7:32:62:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993
Validity
Not Before: Oct 21 23:00:45 2026 GMT
Not After : Oct 22 23:00:45 2026 GMT
Subject: CN=09178084ba1152dd110f0dbbb91dd28eb393de29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a6:8a:0a:00:c0:40:4a:9d:e7:4d:0f:c0:ec:
fb:7b:ad:77:99:49:33:d3:a1:eb:a0:b3:08:a1:01:
ef:9c:a7:2d:c7:5a:8f:68:7b:cf:14:62:3b:2c:2f:
42:f6:05:66:25:dd:2a:23:81:4e:be:ad:41:f8:56:
10:29:a9:61:6c:13:0f:53:59:9f:0c:39:3e:bc:8f:
f7:c6:c4:0a:88:17:ad:10:e3:16:83:38:44:20:8b:
18:95:8b:0a:d5:64:df:ec:fa:db:d1:44:9e:bd:af:
3e:99:d2:cf:f0:b6:b8:a3:72:75:fe:ff:f4:ed:c0:
a5:13:64:77:eb:44:54:4d:5a:ea:28:8f:48:3e:30:
74:d3:e4:56:b5:13:62:a4:1d:7b:d1:a0:72:23:8c:
b1:11:0a:e7:b5:49:d7:45:61:25:ff:55:92:2e:b1:
0c:0e:c2:a1:ee:65:ef:1a:5a:17:04:d8:9d:b5:81:
5e:63:d9:f5:c4:aa:d8:fd:df:33:6b:b7:d9:03:02:
51:1e:cb:ba:fd:ad:fe:8e:db:f7:f7:24:1b:21:af:
e8:40:a8:a6:a2:2d:18:e1:d6:fc:23:af:35:80:42:
39:80:d2:40:8d:74:c6:68:5b:b6:ae:f9:a6:b6:a6:
44:54:b8:22:fe:7d:09:dc:22:bb:cd:18:68:58:2b:
5c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:17:80:84:BA:11:52:DD:11:0F:0D:BB:B9:1D:D2:8E:B3:93:DE:29
X509v3 Authority Key Identifier:
keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0e:be:df:d8:43:ad:fe:f1:66:e0:35:7a:71:58:bb:c5:31:
cc:74:c5:66:3a:1c:2f:de:c3:ce:f9:8f:d4:a7:5e:08:f1:8e:
83:e0:61:a3:a3:4e:43:99:d6:16:21:29:e6:b7:aa:47:43:73:
77:28:ab:6b:67:46:62:0f:9b:a4:6c:ea:a0:01:cb:c0:86:f7:
69:2a:7b:fe:08:1f:b9:ac:b3:23:30:90:e1:35:3a:48:65:35:
8c:c0:71:35:bf:0d:f4:58:63:31:56:86:f5:a2:16:73:d7:7f:
58:6d:1a:83:09:45:c5:9f:5f:9a:64:85:0b:be:c9:88:4c:a8:
11:0e:d4:c3:36:fa:83:c8:ba:eb:0a:7b:25:eb:fc:9e:00:f1:
29:ba:2d:8e:b8:d2:d8:50:99:61:6e:2b:77:63:7d:86:a0:3d:
b1:ed:e9:14:54:79:4d:7b:e4:8b:94:3b:65:bb:6b:e2:f7:27:
f6:78:86:57:48:9b:13:3e:d0:d7:a0:15:a2:38:67:d1:db:21:
02:fb:f1:44:c2:a0:d5:8d:bd:e9:c5:16:ce:cc:ca:5d:50:14:
77:cf:89:4d:e5:c1:1a:bc:0f:c9:18:b4:6a:86:5f:49:c2:9e:
a8:0d:3b:ae:58:01:41:5d:38:4f:fb:88:f5:ca:3c:26:3e:77:
ea:51:fb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 05:54:25 2026 by rpki-client