Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
File: YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft (raw, json)
Hash identifier: Ih6VrgBT22euTsp7pCpuzZa/Ibr2xZ3iqqT1deMEO5c=
Subject key identifier: A8:94:9C:5A:EE:E4:33:A8:E0:22:F6:54:4C:35:E8:E5:22:35:79:B0
Authority key identifier: 60:B2:8E:27:23:95:5A:3F:63:E4:7B:32:30:31:7E:AE:92:92:FF:32
Certificate issuer: /CN=60b28e2723955a3f63e47b3230317eae9292ff32
Certificate serial: 01A17C5FE728EDA6A3FA852D8C1AA49660F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLKOJyOVWj9j5HsyMDF-rpKS_zI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
Manifest number: 1796
Signing time: Tue 27 Oct 2026 08:00:22 +0000
Manifest this update: Tue 27 Oct 2026 08:00:22 +0000
Manifest next update: Wed 28 Oct 2026 08:00:22 +0000
Files and hashes: 1: BD2ZmB5rSja_kZITrzXPI22Piww.roa (hash: XlOMlSw4i/XGorHygY9Vhf1MrDCgaP31EVtyPn5p+tU=)
2: YLKOJyOVWj9j5HsyMDF-rpKS_zI.crl (hash: jLFNsYSultNmH63rHG8HrYhLhyKOdQPASVClVDJKjDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLKOJyOVWj9j5HsyMDF-rpKS_zI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:5f:e7:28:ed:a6:a3:fa:85:2d:8c:1a:a4:96:60:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b28e2723955a3f63e47b3230317eae9292ff32
Validity
Not Before: Oct 27 08:00:22 2026 GMT
Not After : Oct 28 08:00:22 2026 GMT
Subject: CN=a8949c5aeee433a8e022f6544c35e8e5223579b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7c:c5:e3:ad:46:12:ef:49:66:fd:7e:78:98:
80:ca:a3:8d:ad:8d:bb:8f:98:a7:23:39:2c:37:6e:
f1:3c:b2:35:89:3d:19:4f:1b:68:ce:01:49:06:62:
b7:56:1f:8e:0b:9d:ce:44:d9:d2:7c:22:af:3c:aa:
36:3f:0c:4e:c2:8b:07:23:6c:58:9f:ce:7b:89:3d:
4e:3a:4c:d4:63:48:f6:60:b1:5e:64:8d:5e:26:4d:
5d:4e:55:8d:65:6b:16:e0:4b:5c:f3:4d:1a:87:4b:
8f:93:8a:b1:10:59:93:af:50:ce:57:77:67:4a:8b:
4d:af:4c:b2:86:8c:84:dc:46:cc:8a:17:17:cb:f4:
33:e6:c3:35:ab:ab:6a:48:5b:08:af:2c:82:59:c3:
95:55:7f:d7:0e:d3:fb:dd:49:a1:01:c7:3f:b4:bb:
fc:9b:fd:68:e8:72:4f:52:56:48:d5:41:fc:27:3e:
e1:6c:9a:3f:bb:44:34:7d:6a:d1:79:a4:31:ad:5f:
a4:a7:8f:6c:33:14:9d:1b:d4:e2:98:27:f9:82:62:
04:b4:65:01:78:b0:89:8e:23:3f:cf:b2:15:32:e5:
24:07:7f:1e:fb:23:22:4b:da:b5:0e:4a:58:06:28:
76:31:c7:1d:0f:c4:bc:88:05:06:b2:78:aa:0c:a8:
50:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:94:9C:5A:EE:E4:33:A8:E0:22:F6:54:4C:35:E8:E5:22:35:79:B0
X509v3 Authority Key Identifier:
keyid:60:B2:8E:27:23:95:5A:3F:63:E4:7B:32:30:31:7E:AE:92:92:FF:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLKOJyOVWj9j5HsyMDF-rpKS_zI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:75:ac:d6:f9:7a:9d:10:8d:2e:e4:2c:be:83:ab:1a:d7:c5:
dc:bf:b5:97:57:99:4b:04:f3:1c:f0:de:5f:9f:35:3b:bb:ad:
cb:73:38:75:ce:41:7c:e2:1c:36:81:26:e5:3d:ee:3d:c1:b0:
ac:d3:ba:5f:6e:28:07:a5:dd:24:6b:b7:fe:35:65:e3:71:8e:
9f:14:58:60:96:7f:42:31:b6:68:b0:cb:15:12:20:24:1f:7b:
a7:e8:5f:78:13:82:87:d4:46:03:3a:22:d8:13:5c:72:51:b1:
24:14:0c:52:37:22:da:a2:89:c4:42:cf:08:d4:14:dd:1b:f0:
9c:28:c2:47:2a:95:60:b0:4a:43:fe:33:8d:48:ff:bc:d7:8c:
bc:50:21:10:34:b3:8e:3c:51:30:68:43:8d:38:6d:dc:c0:0d:
87:a5:30:59:e0:72:42:91:ea:d7:fa:d5:33:d4:7a:c0:e5:7a:
19:44:59:13:67:6b:ec:ac:a6:25:9c:e4:23:87:9a:d5:f5:25:
87:30:a0:45:8e:10:7f:a4:4b:57:c9:ad:14:18:e6:04:46:45:
57:74:6a:4a:60:99:73:b4:b4:bc:64:0c:e4:74:5f:fd:6d:d6:
d9:3e:a8:ac:5d:d5:82:0c:a5:fd:6a:8d:a3:d2:59:fc:56:2c:
40:3d:d1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:32:42 2026 by rpki-client