Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
File: YGVg4D7ogzLu-_ppROvRA4rg6rg.mft (raw, json)
Hash identifier: 0UnSunRQXrXbOjXCFm0j8uA2/FLglYrKrDMDUWU0toY=
Subject key identifier: DC:25:D2:96:1E:39:60:D5:E6:76:14:8B:D5:28:CC:F3:7E:87:3D:C8
Authority key identifier: 60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
Certificate issuer: /CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Certificate serial: 01A17A71E901036A6060724D7F089BF9EC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
Manifest number: 129D
Signing time: Mon 26 Oct 2026 23:00:47 +0000
Manifest this update: Mon 26 Oct 2026 23:00:47 +0000
Manifest next update: Tue 27 Oct 2026 23:00:47 +0000
Files and hashes: 1: 9nPguctHaB_7gscvVC8bMWUEEhg.roa (hash: tgJSmONimeZaLDAFkdP2njX6XOWmQAy8RBHAeP1bFuM=)
2: YGVg4D7ogzLu-_ppROvRA4rg6rg.crl (hash: YClmWHKWcezj0OpBRW/7Y1kJUz+h/WnpjU2qLGy9j90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:e9:01:03:6a:60:60:72:4d:7f:08:9b:f9:ec:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Validity
Not Before: Oct 26 23:00:47 2026 GMT
Not After : Oct 27 23:00:47 2026 GMT
Subject: CN=dc25d2961e3960d5e676148bd528ccf37e873dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fa:b9:8f:c9:00:93:c3:09:fb:87:1a:37:c8:
70:32:8d:ef:a5:09:ca:de:da:7a:fb:6d:bd:60:be:
a1:db:41:e0:c1:a6:62:0f:49:a6:2e:d1:65:86:1b:
e5:b3:f4:6c:64:d7:71:a0:ce:63:57:5d:33:93:9f:
fe:13:7b:cb:bf:1e:83:c4:a2:f3:11:da:0a:c4:de:
d8:05:19:d9:e9:c2:c5:63:6c:ee:18:37:87:27:7b:
5b:92:08:f0:52:8b:49:f7:37:39:dc:89:d4:48:e4:
21:fe:d4:44:1a:4c:11:ab:15:1e:07:c0:2f:9c:b1:
a0:87:83:67:7e:8b:c1:a3:0c:90:d2:25:c6:1b:a0:
fe:68:2c:91:b1:51:8f:0c:4c:cc:e2:81:2d:9f:52:
b7:ba:1e:43:d1:87:8f:46:93:55:03:e4:34:29:64:
a1:be:7a:39:f9:91:a8:20:3e:c7:8a:6d:22:2b:ac:
3b:e3:f1:2b:86:0c:ab:9c:0c:f2:7e:73:f8:f8:10:
f5:6a:45:d9:99:3e:f6:1a:18:fa:8a:d0:b9:b6:bd:
0d:71:a6:9e:69:19:6b:01:3f:1b:cb:ed:82:37:d4:
57:28:a6:3e:b8:73:b4:bf:a5:c7:3e:82:57:85:39:
90:2d:5b:73:be:35:75:a4:6c:8e:7d:7d:83:ef:fd:
be:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:25:D2:96:1E:39:60:D5:E6:76:14:8B:D5:28:CC:F3:7E:87:3D:C8
X509v3 Authority Key Identifier:
keyid:60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:83:39:bb:82:18:c3:ad:ba:e8:e6:2e:ba:1a:37:61:9e:4b:
77:e8:2c:4f:a6:cd:d7:54:ba:24:fb:3d:0b:8d:75:97:49:ea:
6b:0a:76:25:64:74:cf:77:5d:28:10:4a:6c:72:d0:be:22:7a:
b8:12:c2:4b:10:7d:87:cd:f4:02:aa:d7:99:65:4c:6c:56:ea:
5f:ea:ae:b0:ff:11:d3:62:c2:df:9d:4e:c0:a0:4d:28:60:a4:
e8:18:47:ef:b6:c8:6c:69:c1:84:8e:4f:df:6e:66:aa:9e:f7:
07:bb:2a:67:e0:42:40:54:55:51:3c:51:4e:73:cc:f4:8d:79:
c4:a4:8c:af:b6:d9:08:a6:6b:1d:09:d4:1b:73:37:54:d3:91:
26:33:66:35:9d:52:fa:a5:e5:2a:27:c4:fc:0e:1f:fd:dd:31:
e3:82:0c:6b:84:d4:5e:00:10:13:f8:54:2d:db:3c:ef:95:fb:
f6:a7:2b:9f:3d:7a:c7:75:10:ab:4b:2d:e8:01:06:26:06:4d:
9d:bc:e7:01:cd:f8:24:a5:c3:c5:49:83:7a:4b:90:ea:dd:23:
7a:d6:ed:0d:63:eb:92:6f:ca:76:31:e9:fe:b8:1c:c6:0a:39:
fe:98:7d:79:ee:ec:2e:4c:fa:d7:81:6e:3b:11:9f:bb:8f:9c:
3a:b5:f2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:01:53 2026 by rpki-client