Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
File: ygAblIWVvOJJE_gRr_cePM5F1lY.mft (raw, json)
Hash identifier: nq+7/vXDsWL7oKLlz5NPCwnoOkxmgMTEb/KAEn6frQ8=
Subject key identifier: E3:04:BA:91:79:2D:67:09:96:DB:A8:D7:B5:ED:6C:2A:6E:3B:9B:D8
Authority key identifier: CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
Certificate issuer: /CN=ca001b948595bce24913f811aff71e3cce45d656
Certificate serial: 01A03E600E4BBA2D3257076D1CF7BCDEEAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
Manifest number: 1A24
Signing time: Wed 26 Aug 2026 14:01:17 +0000
Manifest this update: Wed 26 Aug 2026 14:01:17 +0000
Manifest next update: Thu 27 Aug 2026 14:01:17 +0000
Files and hashes: 1: 1-n4qoDeH_AFoIM1FMICyUPczB5Q.asa (hash: D4WVSyy2uZCferDWc9Gow+tNKkPdq4P9+8uq/V2yGyw=)
2: _xsLd4qUBjb6_7VD2WkixJfaVoY.roa (hash: nohQUdIFn7a7lR0P0bYRkbo26wNDU405wKs7TmIgPaA=)
3: ygAblIWVvOJJE_gRr_cePM5F1lY.crl (hash: u5oSRZteEpfJhkntEfLACmBlXVNoHFbX2NnchkpRZBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:60:0e:4b:ba:2d:32:57:07:6d:1c:f7:bc:de:ea:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca001b948595bce24913f811aff71e3cce45d656
Validity
Not Before: Aug 26 14:01:17 2026 GMT
Not After : Aug 27 14:01:17 2026 GMT
Subject: CN=e304ba91792d670996dba8d7b5ed6c2a6e3b9bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:96:0e:06:c0:ab:41:a9:1c:47:f2:60:f4:49:
e7:c1:94:df:d3:f3:73:51:b8:0b:24:55:45:db:ba:
75:44:c4:a6:25:cc:fa:92:5f:7e:7c:4f:4e:6c:1b:
1e:33:f7:c8:ca:2c:21:9b:73:d9:1e:05:90:c3:86:
64:2c:cd:11:cf:33:3c:d7:dc:0f:80:ac:97:d8:00:
b8:e6:a5:e1:ce:de:4f:c4:87:c3:18:5a:f0:ef:ef:
6c:a2:11:13:b8:36:c9:85:96:cf:2d:21:61:55:c9:
2f:ac:c1:c0:d7:74:b0:f6:61:fc:ea:41:66:62:a8:
e0:bf:cb:65:04:9b:54:93:9c:6e:0d:88:7f:ad:8c:
00:3a:15:33:ff:87:c1:78:76:7e:39:d5:30:f7:38:
0b:49:14:a2:09:61:76:ca:4e:ab:7d:a4:e5:e0:56:
46:09:e1:4f:17:e5:75:9e:c7:bb:a7:1d:e3:9c:23:
10:24:2f:0d:46:13:50:09:40:ca:5a:00:88:c5:f5:
cd:9e:a1:90:ea:42:de:d1:69:1a:89:14:b7:e3:b1:
ed:84:c0:1e:25:58:05:90:8a:95:d6:20:29:29:02:
e4:04:98:02:b1:f0:50:e5:d4:81:e2:c2:89:a3:a8:
d1:55:a4:f9:b2:ba:53:10:64:03:26:38:46:5e:88:
a3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:04:BA:91:79:2D:67:09:96:DB:A8:D7:B5:ED:6C:2A:6E:3B:9B:D8
X509v3 Authority Key Identifier:
keyid:CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d9:ba:e8:32:d6:15:06:dd:70:d2:98:6d:c5:48:6e:66:42:
f9:31:df:24:e2:f9:d6:6e:4d:a1:19:00:5c:be:61:c6:8f:34:
d3:34:be:8b:ea:e5:a0:ec:ed:24:c4:84:40:69:e9:3b:b3:2a:
27:b8:5e:0a:22:20:6e:f5:c6:6d:d1:6b:91:27:68:3b:93:6e:
a4:db:29:bf:9e:3b:79:ea:39:7c:4c:db:16:5d:36:9c:6f:53:
db:e2:e9:d7:ba:b8:57:3f:bc:1b:c7:d8:2c:24:8d:64:a3:25:
ae:84:ee:c6:07:19:ee:38:61:ed:b7:bb:69:ab:b6:a0:cd:fe:
c4:36:0e:f8:82:71:e0:39:1b:a7:20:2c:62:dc:3f:2a:07:6a:
9e:f9:39:49:5f:9b:5f:b0:bc:b6:04:34:a3:45:80:17:28:79:
50:27:e9:50:3b:a9:4c:0b:50:3f:d5:ed:47:ad:56:bd:f7:0d:
49:f4:80:bb:33:e8:7e:07:6d:cd:f4:0f:13:08:c0:f6:ce:7a:
83:4d:e5:6c:61:6f:e6:b7:8a:b9:12:5c:55:5a:f8:0c:8f:b0:
c4:a2:5a:d5:d8:bd:8b:b7:de:c5:0d:09:02:92:0d:f2:0c:70:
ea:08:37:3a:73:21:1c:7d:6e:1f:62:13:9c:e1:e8:70:7e:95:
3a:b8:0c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:02:48 2026 by rpki-client