Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
File: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft (raw, json)
Hash identifier: QMBuAe5jDu9vvnpjyOKrv96WJ3nBplAZ/TVKRcGRTxE=
Subject key identifier: 1B:55:E1:F4:60:7A:43:07:BB:EB:0F:22:9C:45:44:97:E9:AB:41:FC
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 01A106CA8FD7111D32E584F69E5265E8FFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
Manifest number: 1AA4
Signing time: Sun 04 Oct 2026 12:01:40 +0000
Manifest this update: Sun 04 Oct 2026 12:01:40 +0000
Manifest next update: Mon 05 Oct 2026 12:01:40 +0000
Files and hashes: 1: 5o6k6rNuid97Qh-4yx5_yoP0grk.roa (hash: fdMkIWOquD1CiccVguV8cwles53g42rbkdlJp+WKaT4=)
2: F6t7dXWGexiyzLX5kVZtDM5udZk.asa (hash: ko4uj/o7b8JpGfIUKzTEj20oKF5zgcG3rYZFJmMYz6c=)
3: FUZBk4RoMMAKOt4FuxEe4m54_Y0.roa (hash: 4AO2Rr40bs3bWeKfynW3DiZx1+Y9YCS4Bf+omFYvnyU=)
4: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl (hash: JSMCQ8n8KNZDkWQOrfazJ2s7onWQbhtQndohzjX8owc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:ca:8f:d7:11:1d:32:e5:84:f6:9e:52:65:e8:ff:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Oct 4 12:01:40 2026 GMT
Not After : Oct 5 12:01:40 2026 GMT
Subject: CN=1b55e1f4607a4307bbeb0f229c454497e9ab41fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:71:05:d2:f4:34:d0:73:ea:dd:b9:d0:9c:
cd:67:15:9c:42:6f:6f:7b:d1:59:6a:4f:fd:c2:94:
24:d6:e9:40:a6:c7:eb:5b:63:a2:0c:18:ac:39:1c:
88:c1:30:cb:82:e2:38:da:f8:14:77:de:84:a5:87:
fa:d2:09:14:0f:04:0e:18:90:8c:7f:6d:ff:ce:0a:
06:86:c2:b3:bc:37:c1:fe:bc:96:f4:5c:76:a2:c1:
2a:d2:ee:96:97:e7:de:18:7d:6d:8f:7a:dd:5a:77:
4c:72:9f:ac:54:5f:15:c6:4d:34:dc:9e:68:39:ef:
f8:5f:24:35:e2:60:2a:89:51:d4:e8:fc:4e:73:39:
8a:6d:1d:3c:8b:37:bf:9a:77:17:57:a2:63:8b:4a:
10:bd:e2:76:d8:32:66:69:b5:1c:44:95:da:a5:32:
9b:50:e8:74:57:50:e2:af:4f:0e:54:9d:8b:29:1e:
01:2e:ea:86:7f:c6:b1:c2:53:20:70:87:de:42:6c:
22:0f:a3:0d:62:05:40:be:61:97:d9:1c:1c:01:c7:
b0:63:6f:6c:d2:c2:87:f8:9d:c9:b0:7b:b9:6f:f2:
52:63:2f:d0:50:0d:30:46:cf:23:5e:89:70:a6:a4:
a2:70:d2:ea:38:d9:c0:ba:12:ed:8f:ec:80:26:f7:
7f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:55:E1:F4:60:7A:43:07:BB:EB:0F:22:9C:45:44:97:E9:AB:41:FC
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0f:81:16:70:9f:1d:9f:fe:11:7d:8f:1e:96:c1:9a:aa:26:
73:72:7d:41:f1:70:a7:e7:0e:60:cb:13:5a:2d:e7:78:80:4f:
30:9f:1e:09:1b:cf:1c:f5:76:1b:a9:bd:35:42:9c:de:ab:90:
22:10:a2:3c:01:94:0f:cf:32:ce:c0:8c:52:7a:4f:9d:6f:9d:
7d:61:44:b0:0a:22:0e:45:e2:63:a0:9e:97:30:18:7c:ec:88:
40:76:b9:fc:fd:e3:ee:c3:89:6d:91:9f:13:d0:38:d2:8e:c5:
58:f9:e2:fb:de:96:e4:48:70:7f:1c:50:49:0d:7c:7a:25:1b:
6d:08:8d:3e:4f:f0:43:af:28:65:1b:bb:2f:89:10:8f:67:eb:
b5:99:7e:f8:c0:75:a3:fd:2c:53:4f:c5:3b:2d:46:ef:2c:d4:
86:b8:a6:56:3c:32:96:a2:ca:c9:d8:43:3c:13:e3:ca:cf:45:
73:22:bc:cc:51:7d:51:5f:a6:a1:e1:bc:6b:d4:a3:74:8b:f6:
ec:98:d4:fe:cb:bf:14:23:df:cc:48:46:c9:42:26:14:9d:b2:
f8:6e:11:65:c3:7e:74:9b:f8:8b:a5:23:22:bd:04:44:a2:c0:
24:74:5e:79:d2:f4:ca:de:c9:ac:89:9e:37:98:3c:68:ef:44:
69:be:1d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:00:10 2026 by rpki-client