Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/YT1iXtVQfkgOTUPcl45x6IHmIic.mft
File: YT1iXtVQfkgOTUPcl45x6IHmIic.mft (raw, json)
Hash identifier: kTP81zieMXHou1Qbnexr3xFW+5d0zhzo7ZLfXny5Fcw=
Subject key identifier: 0A:36:B9:A5:3F:A9:AB:C4:26:2F:1A:59:8E:04:30:AC:BA:0C:C5:B5
Authority key identifier: 61:3D:62:5E:D5:50:7E:48:0E:4D:43:DC:97:8E:71:E8:81:E6:22:27
Certificate issuer: /CN=613d625ed5507e480e4d43dc978e71e881e62227
Certificate serial: 01A02055CECF4A84B61E0DA11B1A578BCC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT1iXtVQfkgOTUPcl45x6IHmIic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/YT1iXtVQfkgOTUPcl45x6IHmIic.mft
Manifest number: 8A
Signing time: Thu 20 Aug 2026 18:01:29 +0000
Manifest this update: Thu 20 Aug 2026 18:01:29 +0000
Manifest next update: Fri 21 Aug 2026 18:01:29 +0000
Files and hashes: 1: FL2UbXKyeZL1YiGrBFn3kVEsgxU.roa (hash: E+Ndns34wiS59u4o367M86KWyuekLi03oafxk6qO++c=)
2: YT1iXtVQfkgOTUPcl45x6IHmIic.crl (hash: u6huKkFJu56oFtU71W0/CMTCidAG0+8RevHiqUvcqmo=)
3: kSpW6w_RI8cHoJwPPES6uFJxrFs.roa (hash: PkH8DgRX6ZznesT2KjH8tRRwLjLMw49bu5CbwIvnoFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/YT1iXtVQfkgOTUPcl45x6IHmIic.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/YT1iXtVQfkgOTUPcl45x6IHmIic.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT1iXtVQfkgOTUPcl45x6IHmIic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:55:ce:cf:4a:84:b6:1e:0d:a1:1b:1a:57:8b:cc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d625ed5507e480e4d43dc978e71e881e62227
Validity
Not Before: Aug 20 18:01:29 2026 GMT
Not After : Aug 21 18:01:29 2026 GMT
Subject: CN=0a36b9a53fa9abc4262f1a598e0430acba0cc5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:f8:bf:4c:b7:2e:e1:69:74:29:e3:8a:04:
4b:22:7f:bd:54:9c:ca:d1:1c:e3:f4:ed:6f:af:0e:
14:a2:86:6d:78:8d:1f:7b:91:56:6c:bb:90:9b:4c:
47:28:55:d5:65:85:81:d9:ae:3c:4e:cc:d0:e9:6d:
08:0b:3f:f6:ca:4c:cc:d7:d3:f6:88:5e:41:7e:fe:
d6:6d:93:16:c0:e4:e1:02:bd:ac:97:80:73:c9:b5:
b8:79:16:be:66:b8:d6:3c:bb:f9:19:e4:c8:8a:d0:
58:43:68:4d:8f:19:54:a0:3f:d5:fb:09:04:e3:5c:
5f:52:22:99:48:e0:df:a2:c7:a2:61:c4:cd:97:c9:
2c:a4:1e:82:a4:f0:53:c7:2e:14:78:1e:de:cc:d6:
2c:4e:a0:e1:3d:2d:34:aa:e3:4b:37:4b:54:b4:49:
21:6c:b5:76:8c:76:30:9a:4b:8f:24:9d:4f:0e:14:
08:eb:c0:42:98:a3:c6:ea:73:fb:d0:3c:e6:d6:7c:
b9:cb:2b:43:b6:27:7b:16:94:76:93:ff:3c:45:ad:
b0:77:9a:cc:68:51:c3:1b:a0:dc:25:71:68:2c:b6:
ce:fc:58:59:87:67:bd:37:5f:39:2a:c3:36:ad:ee:
eb:4e:76:c5:44:25:4c:2a:78:8c:47:9f:07:d9:55:
9c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:36:B9:A5:3F:A9:AB:C4:26:2F:1A:59:8E:04:30:AC:BA:0C:C5:B5
X509v3 Authority Key Identifier:
keyid:61:3D:62:5E:D5:50:7E:48:0E:4D:43:DC:97:8E:71:E8:81:E6:22:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1iXtVQfkgOTUPcl45x6IHmIic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/YT1iXtVQfkgOTUPcl45x6IHmIic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/YT1iXtVQfkgOTUPcl45x6IHmIic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a8:ef:71:6e:d3:73:25:aa:e4:e2:18:6b:96:03:2c:8a:44:
3e:be:ee:4a:72:12:b8:e0:34:15:5f:2a:f2:01:dd:b0:2c:01:
f2:d2:c4:f4:a1:99:46:15:52:2b:46:d5:9c:ec:d9:c0:d9:bf:
8d:65:5e:c9:d8:a4:6c:d4:9e:f8:4e:93:83:8c:b1:80:84:d5:
60:8d:0a:80:e0:6d:f8:1b:38:db:5d:33:66:2d:43:57:40:31:
86:08:e6:e1:08:c9:8c:7c:1f:70:8a:96:e8:2e:11:ba:e4:36:
68:cb:a2:73:61:63:0f:e5:15:7a:40:cf:ed:a5:14:b9:40:b0:
ad:9d:73:a1:a0:12:38:f2:bc:49:81:90:ee:64:a2:34:5b:51:
8d:be:f7:c7:08:e9:7c:7c:9f:ba:a4:2a:81:ed:5d:87:78:3c:
27:75:2d:8b:4c:d9:7d:eb:d6:ef:cd:5d:33:62:57:5a:68:92:
3f:60:c8:f0:22:f0:4f:2b:67:97:dc:0f:78:b1:71:4a:4e:9d:
2f:2c:43:86:4f:bd:6b:e3:dc:ea:15:37:ad:15:5a:b5:66:0f:
d1:85:1a:b2:c1:af:e4:ba:d8:65:62:84:34:af:2a:4b:4a:c9:
35:b9:58:56:b9:6e:80:59:d8:ca:35:be:13:65:5e:97:21:5a:
d2:dd:7b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:19:03 2026 by rpki-client