Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
File: YEBzL9vKpSkA2yRiB1v07xUVlpU.mft (raw, json)
Hash identifier: XWO/bABiepzK8nDFDNLU/fIXHbMAejU7/Q7olVml3y0=
Subject key identifier: C0:50:36:31:FC:93:ED:8F:59:BA:5B:BE:E9:47:1A:45:26:34:B7:27
Authority key identifier: 60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
Certificate issuer: /CN=6040732fdbcaa52900db2462075bf4ef15159695
Certificate serial: 01A187F6A523746AE072FC67798D701BCBB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
Manifest number: 097B
Signing time: Thu 29 Oct 2026 14:00:50 +0000
Manifest this update: Thu 29 Oct 2026 14:00:50 +0000
Manifest next update: Fri 30 Oct 2026 14:00:50 +0000
Files and hashes: 1: PUDvpR_aiNzuJCBLk51UIXHyhYI.roa (hash: Sq53LfucALVr4BVz660/k9ccPDQx9/Vh4c8LAplhshQ=)
2: YEBzL9vKpSkA2yRiB1v07xUVlpU.crl (hash: TsxAXIzX6/ZzBK08US/yd7HjtpUO862oe2rkY20H8NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:f6:a5:23:74:6a:e0:72:fc:67:79:8d:70:1b:cb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6040732fdbcaa52900db2462075bf4ef15159695
Validity
Not Before: Oct 29 14:00:50 2026 GMT
Not After : Oct 30 14:00:50 2026 GMT
Subject: CN=c0503631fc93ed8f59ba5bbee9471a452634b727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3d:eb:ab:ba:0d:20:fd:36:c8:ae:3e:a1:2c:
07:b3:db:27:51:7c:71:b2:65:01:3f:78:84:b4:bf:
44:6b:26:ef:2d:1f:2e:42:c7:ef:8f:d5:65:c3:21:
93:9b:a6:ab:51:54:e0:1e:b3:e9:f2:39:00:cd:1f:
21:0d:5e:81:f9:8e:56:4f:56:2f:6d:d4:e5:17:2c:
2d:b3:18:00:ec:9d:a1:6c:af:22:e5:29:cd:b5:e0:
51:c4:73:ee:06:0e:e1:45:23:f8:5a:ad:59:0d:b0:
12:9c:a6:e5:19:9e:6b:cd:60:d0:aa:1c:40:31:79:
0b:5a:fe:fb:d3:10:f4:79:93:43:87:af:a0:40:a5:
e9:29:dc:7b:1a:58:68:a0:75:a8:b3:50:d2:57:2c:
94:1c:82:6a:be:e5:8d:1b:e3:d1:18:6a:f0:cb:33:
ab:35:f6:be:bc:63:a4:da:53:85:24:2d:41:22:24:
4c:5b:ff:24:68:84:be:ab:a0:60:d4:c8:62:d3:a9:
06:e7:df:01:ab:8b:d4:1f:6c:22:a1:f9:f8:6a:8a:
0b:46:10:b5:14:eb:d9:94:e7:66:0c:bb:d2:7d:53:
94:e0:56:de:23:55:e6:85:95:ad:77:ae:50:68:b0:
7f:d1:6c:60:30:e2:53:d2:b9:ed:83:4e:a6:8a:6a:
02:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:50:36:31:FC:93:ED:8F:59:BA:5B:BE:E9:47:1A:45:26:34:B7:27
X509v3 Authority Key Identifier:
keyid:60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:91:ce:16:db:fe:b5:5a:ae:13:8d:b4:e6:d3:98:ca:b6:3a:
37:d6:26:dc:32:fc:e1:66:5f:1e:2a:a2:57:f2:70:39:ab:ca:
c6:29:d6:da:1d:6e:9b:00:ff:94:6d:47:69:36:df:f9:5e:0f:
27:be:53:fd:86:cc:5b:5a:90:57:90:32:56:3d:b3:4b:bf:e3:
9f:54:5d:75:d9:9c:23:f8:12:9e:04:58:3f:87:cf:c6:20:6f:
af:9f:32:10:fd:94:f5:c3:1a:ab:1e:c6:41:5c:79:10:19:e5:
bd:18:30:1e:07:55:a4:ad:b4:43:62:27:7b:dd:61:b0:5b:f9:
50:96:b4:06:08:82:9d:c6:9a:e9:b8:92:79:c9:63:d5:aa:e6:
ce:65:11:92:6c:e5:59:73:97:d0:d1:61:2e:41:5d:bc:47:bc:
f4:4d:65:c6:66:5d:d3:f2:a6:9e:68:56:32:6c:37:36:56:a7:
48:bb:7d:f3:68:74:63:40:6e:6e:f9:44:19:6d:41:66:f5:8f:
2c:75:11:9b:35:d5:4f:37:35:08:7e:5d:13:78:ae:37:2c:12:
01:76:10:de:d1:b2:69:8a:9d:2c:88:c3:9b:88:87:f0:35:57:
b8:34:18:5b:36:73:79:ba:c2:2e:04:55:e8:a9:a3:07:96:89:
5d:1f:31:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 16:02:21 2026 by rpki-client