
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
File: ysmhVQ09sawK6xHBbWPkimg7ygM.mft (raw, json)
Hash identifier: Z9bW3kCNKjETwR4tD3MMzsrHk2UMbDjA4z6LJwUKlt8=
Subject key identifier: CC:3F:BB:69:33:5B:4A:12:0E:3E:11:3E:FD:F3:56:02:EA:14:AC:DD
Authority key identifier: CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
Certificate issuer: /CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Certificate serial: 01A17C97D9B472B016E15D5AF623A68D4C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
Manifest number: 0820
Signing time: Tue 27 Oct 2026 09:01:28 +0000
Manifest this update: Tue 27 Oct 2026 09:01:28 +0000
Manifest next update: Wed 28 Oct 2026 09:01:28 +0000
Files and hashes: 1: TuLRBXz6EERScy5OEhGKTfByxKY.roa (hash: 4zWLjSSgQ/CzE+D8xtj4xcI0MuMoMFUDlb+Cl92io8o=)
2: ysmhVQ09sawK6xHBbWPkimg7ygM.crl (hash: B46mx++HdPzkVXENkRtay1PZpaBpGHKOOwYgQm8NP1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:d9:b4:72:b0:16:e1:5d:5a:f6:23:a6:8d:4c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Validity
Not Before: Oct 27 09:01:28 2026 GMT
Not After : Oct 28 09:01:28 2026 GMT
Subject: CN=cc3fbb69335b4a120e3e113efdf35602ea14acdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a1:4b:a4:73:0c:e8:ea:e6:84:ce:03:00:2c:
3a:8c:5f:94:28:c6:c7:d3:25:28:14:6a:bb:ca:92:
80:cd:ce:95:ec:d2:64:ca:c3:ff:98:1e:9e:99:ec:
5f:42:a1:f4:36:2a:6d:d0:1d:3d:3f:85:3b:44:4e:
f1:3a:b0:69:35:70:dd:6b:9c:5a:7e:78:71:f7:a4:
22:22:94:48:08:b2:89:aa:b5:b1:b1:be:cd:40:90:
f1:01:60:96:db:04:e8:57:6b:2b:d4:2b:64:0b:e0:
26:a1:93:a6:72:62:b4:73:34:95:f7:9e:9f:b6:fc:
93:d4:38:2b:94:a3:00:67:c7:21:69:63:29:29:c8:
c0:5e:9e:05:bb:9b:d5:37:e9:05:1f:3c:ff:d2:d8:
f6:09:48:47:7a:e3:31:ab:92:d9:ba:2a:b7:fd:61:
2f:d4:a3:0f:eb:cc:35:c5:5e:8f:26:86:0c:59:a5:
d7:2b:b8:8b:3d:e9:5f:b6:c5:c5:c0:43:f8:7f:5f:
ff:08:89:6e:db:22:88:8c:05:d9:f1:53:19:98:9c:
52:90:f3:b4:d4:6e:93:03:71:32:71:1e:d2:cf:da:
a6:b3:a3:e2:72:98:00:50:7e:a2:3a:b1:c8:f5:b4:
d5:9f:33:5b:4e:22:e8:f0:43:c6:4e:69:52:1c:9f:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3F:BB:69:33:5B:4A:12:0E:3E:11:3E:FD:F3:56:02:EA:14:AC:DD
X509v3 Authority Key Identifier:
keyid:CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:da:04:52:1d:05:3d:eb:1b:dc:45:82:c9:cb:7a:da:c4:1c:
71:29:92:7f:28:e8:ca:d7:93:36:1f:67:d2:63:eb:c9:f0:e8:
03:6f:6b:e0:82:56:6b:40:69:f5:08:f9:ed:90:94:19:73:18:
7c:9c:44:b2:2d:f7:97:31:4a:7d:63:7a:1c:b6:b2:40:fb:38:
70:3c:69:5c:ef:3f:66:e4:6e:d0:0b:1a:f7:9b:25:ca:b6:f6:
3b:8c:ae:07:72:9f:30:7f:0f:9d:df:5e:50:1b:a6:1a:01:61:
a4:76:5e:1c:ad:0e:89:8c:43:16:f1:07:7a:02:90:45:23:76:
33:89:92:6a:0d:57:18:47:19:ce:af:5e:54:71:74:af:b5:54:
73:77:00:3b:8e:6d:c7:d2:14:45:fb:94:e9:3d:9e:f8:08:25:
b6:f6:01:2f:78:48:bd:6b:a6:0a:ec:b5:cb:0a:e1:cc:87:c4:
81:eb:96:be:db:c7:96:eb:ce:c4:90:01:23:92:61:2d:ed:0c:
21:5e:2b:89:28:35:26:a1:72:e2:e7:95:27:3b:48:22:1d:c0:
76:b4:e6:a8:ef:72:67:5d:d8:ce:23:e9:75:ce:e3:49:0d:44:
22:dd:78:53:57:1e:f4:00:72:55:d7:2d:9e:52:b9:5c:9d:ed:
5e:65:1a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:23:33 2026 by rpki-client