Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
File: YOdz2_t1lX8Mxchj_M52ylijkwg.mft (raw, json)
Hash identifier: RLcJCyONOkiFePEnt5sX+W0zMLATlE6X8Yw7xBeRB7A=
Subject key identifier: 49:28:6D:83:77:77:A7:D9:81:52:B7:15:FB:66:E7:D7:CD:41:BD:B8
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Certificate issuer: /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial: 01A176CC63155624AD79EDF596F5137C1E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
Manifest number: 0D91
Signing time: Mon 26 Oct 2026 06:01:08 +0000
Manifest this update: Mon 26 Oct 2026 06:01:08 +0000
Manifest next update: Tue 27 Oct 2026 06:01:08 +0000
Files and hashes: 1: FaiCCLCJ_22L37bTLhekiTS6xWk.roa (hash: 0rF76R7VaTqT7h2AWynmZ6U6C8XdF6nPrpTOFBQQBKw=)
2: YOdz2_t1lX8Mxchj_M52ylijkwg.crl (hash: hOn4Wx46LJbvme1GSb+ItVXEOB2ANU+BBClWzj8m4iY=)
3: fbVmVDZSr2N5vEu2YR2iNEUtIwY.roa (hash: XF+oa0yHniCseXwIDuAlr+pULGrTcD83gldJXfm1CQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:cc:63:15:56:24:ad:79:ed:f5:96:f5:13:7c:1e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Validity
Not Before: Oct 26 06:01:08 2026 GMT
Not After : Oct 27 06:01:08 2026 GMT
Subject: CN=49286d837777a7d98152b715fb66e7d7cd41bdb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:52:48:40:1b:b4:62:05:f0:3c:47:91:cf:
e6:bd:f4:da:84:76:a9:28:4d:d1:32:65:9d:90:24:
49:e4:e4:d2:4a:c3:82:9d:52:a4:56:b6:ec:21:9f:
99:ea:72:3a:31:6f:fd:f3:93:4d:c2:75:7b:c2:05:
2a:84:a8:d1:f8:4b:5e:ba:71:18:f7:55:c0:c6:e3:
ac:f6:c8:7d:8c:2e:a4:c3:28:7c:e4:e4:66:3e:6c:
ef:79:41:54:85:77:6c:48:62:7a:ed:e9:58:1c:a8:
eb:65:3d:ca:d2:aa:da:8b:77:d1:2c:8c:e6:2e:43:
aa:1c:65:a5:26:07:12:e0:0a:d1:a5:68:fd:e7:93:
0e:83:4b:8f:4c:6e:7c:c9:6c:d8:50:c2:38:3f:54:
6d:4d:58:a7:5c:58:19:41:17:29:90:8b:50:ac:62:
8d:65:41:43:b8:30:09:b0:1b:21:4d:da:0f:a2:3c:
10:03:ed:53:13:9d:72:67:41:47:5e:60:8e:73:7f:
8d:6d:3b:1e:dc:10:9b:99:14:f6:46:b5:1d:a5:19:
41:78:0d:49:c0:81:fd:01:dc:5b:46:f3:6c:10:b1:
f0:ad:ed:db:ea:03:20:6e:d9:9b:ec:25:c1:3c:a6:
76:fc:04:dd:5e:b7:0f:ed:ba:17:bd:df:38:74:b2:
dd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:28:6D:83:77:77:A7:D9:81:52:B7:15:FB:66:E7:D7:CD:41:BD:B8
X509v3 Authority Key Identifier:
keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4b:03:1b:bf:43:dd:a8:6f:34:5d:07:31:0a:0e:50:91:65:
cb:1c:cb:14:b6:2d:8e:46:af:47:6d:ea:69:c0:87:d5:c3:81:
35:cd:59:5c:75:1b:13:79:d8:af:a2:45:7c:24:ef:ca:15:e9:
f2:b9:f2:a7:60:6e:58:fc:54:7b:66:1e:e8:d1:35:af:5c:27:
ea:78:57:1e:58:f7:6d:27:34:84:0e:d8:bf:43:34:a9:9c:e7:
30:1b:ae:28:d6:64:4c:a4:11:10:88:cc:08:61:08:73:dc:21:
47:ab:e9:3c:2a:9f:de:9f:0a:0b:b4:59:e1:e5:18:1b:d6:d7:
b6:65:ed:a4:65:0e:ac:1a:2f:29:a4:b6:bc:81:71:bf:04:8a:
e9:33:89:51:da:df:aa:87:98:5c:0e:56:58:2d:eb:1f:63:3d:
73:cf:35:55:b9:dc:b1:63:70:06:8d:f8:85:90:ef:e3:53:ac:
e8:80:16:1f:b0:0b:82:6d:14:f7:df:99:4a:0a:33:cc:95:03:
78:03:d0:9e:28:8a:4e:14:5f:8f:28:51:7a:08:ba:99:68:5b:
62:50:0b:a5:f2:77:0e:0f:6d:51:03:87:f9:59:18:e1:ce:37:
3a:ff:57:ea:1a:98:05:dd:56:05:0c:8d:4d:f6:eb:7c:d1:a1:
5f:66:c1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:27:49 2026 by rpki-client