Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
File: YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft (raw, json)
Hash identifier: VXq2NnlNnjKflOzqLYwRx99OaHSQAwdKC9GuDTdpcXA=
Subject key identifier: 15:09:7F:E1:B4:E9:32:F6:A0:63:47:BB:61:F4:77:56:F7:6B:E3:ED
Authority key identifier: 62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
Certificate issuer: /CN=62719c6d8b9950378a7489315fb078111a18ad55
Certificate serial: 01A15F68723143BADC6C4F8FB6B2B93B45E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
Manifest number: 03D0
Signing time: Wed 21 Oct 2026 17:00:42 +0000
Manifest this update: Wed 21 Oct 2026 17:00:42 +0000
Manifest next update: Thu 22 Oct 2026 17:00:42 +0000
Files and hashes: 1: 2iC8kbXKFjWmx_dbdVyppAM0-6Y.roa (hash: tmWp7mxjB9vdgjX2gtWUKioc5qEfAmveNcok4dIUQAo=)
2: GRea9lk1vceom4TFm3UHffkyQH8.roa (hash: 7sx9fKJ6zSwa6txM9tmVfdAR/9hActQM7paLbf+Thbw=)
3: YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl (hash: LYrApGUees18pI8eRwg8/qTDTGmFGfhQEf+hoDASMb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:68:72:31:43:ba:dc:6c:4f:8f:b6:b2:b9:3b:45:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62719c6d8b9950378a7489315fb078111a18ad55
Validity
Not Before: Oct 21 17:00:42 2026 GMT
Not After : Oct 22 17:00:42 2026 GMT
Subject: CN=15097fe1b4e932f6a06347bb61f47756f76be3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:79:2d:24:be:6f:02:a2:ef:64:f7:0e:77:ec:
71:ea:8b:5d:55:88:7f:0b:99:81:7a:98:12:ee:4e:
4c:c6:b8:1d:22:f5:24:7f:66:98:18:a3:29:16:66:
11:3a:9c:94:df:65:fd:80:d8:83:a5:b4:96:47:d7:
0a:76:e3:51:74:8a:94:58:20:70:7a:e3:d7:6d:a0:
8a:96:d6:77:72:1c:78:a1:c9:10:7e:7b:34:ca:57:
b2:54:06:20:d7:b1:52:56:3e:7e:79:25:1f:95:d9:
a0:ea:11:07:4f:1f:38:66:cf:2f:73:26:69:5d:e1:
98:02:88:d1:4a:d7:0b:9b:70:1c:4f:82:70:93:19:
41:4e:d6:08:8e:cf:25:cb:40:31:fd:56:e7:ce:19:
bf:f0:ff:24:35:ba:7c:d0:ea:52:10:9e:01:ec:ab:
14:6a:b1:46:b3:03:6b:34:40:42:ff:db:b0:77:18:
53:5f:5d:27:a3:92:bd:a4:42:0c:95:de:60:48:23:
27:21:81:4b:7e:4a:83:44:12:75:82:18:ca:86:f2:
25:e5:25:39:b9:96:ef:a6:18:5c:6c:e1:dc:21:dd:
be:09:40:79:49:11:54:fd:1f:3e:2c:71:d6:2b:74:
8f:fc:0a:7c:5a:ab:34:96:7e:4b:2b:fc:8c:b0:c6:
15:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:09:7F:E1:B4:E9:32:F6:A0:63:47:BB:61:F4:77:56:F7:6B:E3:ED
X509v3 Authority Key Identifier:
keyid:62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:65:f1:4d:36:10:6b:5e:84:b0:19:3f:45:37:b8:07:95:a0:
a1:c7:86:ec:99:98:f6:d3:f5:8f:2d:de:4c:39:26:0e:d8:6c:
b2:8e:bf:bd:de:bd:5d:fe:1f:03:5e:f0:3e:89:18:e7:6f:6c:
b3:62:58:f9:e4:14:36:ed:ce:1d:3f:b0:d2:c3:b0:19:fa:8f:
dc:98:cc:ea:59:14:29:6d:35:29:f6:ad:36:8e:c1:f3:c9:65:
6f:5b:01:86:c2:22:90:1d:e3:a2:61:65:05:91:e6:25:f4:ae:
f0:1f:ba:99:e8:af:a1:50:ab:ac:1c:fc:9a:84:ed:44:cb:12:
96:7c:b2:12:7b:3e:ce:bd:43:cd:3a:1a:c8:72:1a:d5:3f:b0:
b6:57:a3:e4:b2:e2:4d:d3:4c:40:6e:86:23:e9:9f:a0:f3:d7:
4d:62:b3:31:60:17:b9:d5:b1:97:23:29:f7:03:35:6c:a2:6b:
40:fa:48:9d:1b:93:c2:1a:59:3b:55:34:82:64:2e:ba:da:0b:
5d:b7:4c:6c:9e:cb:7f:87:eb:63:7c:fb:b8:d7:22:a5:cc:4d:
01:2b:6f:df:cc:a7:84:76:c9:36:64:8e:2a:7d:92:d2:44:68:
9d:f4:3d:a0:af:b6:b5:02:c0:30:f5:f4:1f:46:97:52:5a:97:
6b:2f:cc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 00:11:05 2026 by rpki-client