Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier: twjyS8PNzp2eW4MYLQ2rc40MMqAkBrX94l+E8WUNIzo=
Subject key identifier: 8B:B9:FD:62:1C:70:8C:D6:8A:71:FB:63:67:2B:5B:6A:3B:56:23:32
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: 01A11CAC61931FED652AB801590B89C9CBD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number: 128A
Signing time: Thu 08 Oct 2026 18:00:21 +0000
Manifest this update: Thu 08 Oct 2026 18:00:21 +0000
Manifest next update: Fri 09 Oct 2026 18:00:21 +0000
Files and hashes: 1: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: byEKS0Y9iyB6mbyk6JjGKt1MItiufTP27FxjucR90no=)
2: iliXSfFW9CmHSeqMey9o5nQh8YE.roa (hash: Fb6bIsCY/5XAoXMXg9zGQmjVCnZpfmN1KdROzLuLLmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:ac:61:93:1f:ed:65:2a:b8:01:59:0b:89:c9:cb:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: Oct 8 18:00:21 2026 GMT
Not After : Oct 9 18:00:21 2026 GMT
Subject: CN=8bb9fd621c708cd68a71fb63672b5b6a3b562332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:69:1e:08:e2:db:47:ff:f1:17:94:d9:f6:
04:81:cd:cb:53:3e:68:ba:d9:ac:1f:66:c4:a8:d0:
65:8c:47:0e:27:79:62:32:ee:52:3e:d4:6b:5c:4e:
c9:fe:3b:50:cd:e3:90:2d:ba:a5:62:5e:10:62:04:
9f:2c:05:03:58:a9:78:82:aa:e4:f9:04:d8:37:90:
18:25:fc:4e:7a:fd:13:b9:8b:93:5b:f5:6e:29:4f:
f3:8a:be:c1:f8:69:ce:e8:7c:d4:e4:78:be:20:1a:
21:ca:58:2c:7c:58:2f:f0:d2:f8:19:3b:39:19:65:
df:9a:48:46:a6:ab:4c:ab:10:6a:cf:cc:92:00:fb:
5f:1d:45:af:4e:9a:8b:a5:e4:05:6e:85:f8:92:ee:
2a:64:3a:d1:7d:36:57:ec:4e:83:02:9f:c2:61:f0:
88:3e:47:eb:df:57:48:a4:c3:d4:62:85:70:ae:91:
6a:9e:1c:b2:9f:8c:c7:4a:ca:89:02:7c:f9:5b:aa:
fb:40:63:3a:af:95:fa:fe:a5:d1:51:d1:c0:94:2b:
65:9c:f8:cf:12:6a:ad:75:35:bc:ae:61:2b:f3:17:
22:70:45:d7:cb:3e:27:5f:85:a1:bd:58:a5:0f:27:
7d:24:51:43:0b:48:cb:07:cc:41:18:50:0e:9a:3a:
d6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B9:FD:62:1C:70:8C:D6:8A:71:FB:63:67:2B:5B:6A:3B:56:23:32
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:51:34:3c:77:d1:4f:28:3a:c3:c5:6f:f8:b0:69:4a:65:69:
4b:e9:e7:e0:6d:5e:ba:79:4c:41:ae:a4:86:45:0d:58:3a:af:
b3:fb:dd:13:e9:c1:af:b1:a1:e5:67:19:92:4a:32:6c:c2:8d:
d3:ce:8e:a5:44:84:58:02:c2:ca:04:47:48:04:2a:5a:5f:94:
86:24:49:ab:07:88:ce:9a:e5:ab:d2:26:6b:7a:e7:f5:58:f9:
36:9f:52:c7:31:c9:7b:64:4c:9a:4f:6b:df:d8:ec:6e:a8:3d:
5d:19:93:a8:1e:50:4c:8e:0d:c9:9f:73:28:5b:d3:4b:c4:28:
d0:14:76:52:df:08:a1:bc:23:e2:9b:a9:4c:e5:0f:e7:74:97:
69:52:d6:e2:25:27:4b:22:84:54:6d:31:2f:bd:b4:44:be:44:
4a:bc:d7:47:fd:e6:fa:ce:d3:4e:9f:e3:5e:5e:ac:71:dc:15:
f4:28:ac:e0:e6:dd:e1:17:b0:78:5c:0d:28:62:0b:de:85:4b:
38:d1:cb:64:2a:d3:ff:d7:e2:13:a0:3a:7b:d5:51:32:80:75:
26:24:03:4f:60:27:b5:23:be:53:d2:c3:c5:ca:e4:e1:2a:8a:
16:da:85:7c:f3:22:c2:98:0e:29:2b:0c:39:91:67:0f:31:d2:
28:48:70:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:28:50 2026 by rpki-client