Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/YYRce2CqISgFuetE6qCMSJI6oxg.mft
File: YYRce2CqISgFuetE6qCMSJI6oxg.mft (raw, json)
Hash identifier: rZuC2hkRasmOp84sQSfWABLzydS6mtu9gSWDPXRJcz4=
Subject key identifier: D6:B5:E9:BD:E7:D7:C8:6C:54:B3:7E:B7:04:4B:58:B0:CB:1F:EB:8D
Authority key identifier: 61:84:5C:7B:60:AA:21:28:05:B9:EB:44:EA:A0:8C:48:92:3A:A3:18
Certificate issuer: /CN=61845c7b60aa212805b9eb44eaa08c48923aa318
Certificate serial: 01A1174F2B6395CB3892B738AA1667555EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYRce2CqISgFuetE6qCMSJI6oxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/YYRce2CqISgFuetE6qCMSJI6oxg.mft
Manifest number: 011F
Signing time: Wed 07 Oct 2026 17:00:26 +0000
Manifest this update: Wed 07 Oct 2026 17:00:26 +0000
Manifest next update: Thu 08 Oct 2026 17:00:26 +0000
Files and hashes: 1: HV2CsrLzF-S1qWZ8J3VTBgO48nw.roa (hash: JHxkLJgnelaG3bki3cyYxVvS6B7h4MLCjzZfELjOxNs=)
2: YYRce2CqISgFuetE6qCMSJI6oxg.crl (hash: NclaI3zcgjxbzqhmWvnAd2awctOUuxWCSw4d8hcnh5Q=)
3: gPKYb1y3p90DD8s9LQ44ZKdg_4c.roa (hash: rXUw5uswj+GLfE3zjLQScTc804q2vCvOdnuuFsFGwhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/YYRce2CqISgFuetE6qCMSJI6oxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/YYRce2CqISgFuetE6qCMSJI6oxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYRce2CqISgFuetE6qCMSJI6oxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:4f:2b:63:95:cb:38:92:b7:38:aa:16:67:55:5e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61845c7b60aa212805b9eb44eaa08c48923aa318
Validity
Not Before: Oct 7 17:00:26 2026 GMT
Not After : Oct 8 17:00:26 2026 GMT
Subject: CN=d6b5e9bde7d7c86c54b37eb7044b58b0cb1feb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3b:e6:0f:ad:4d:6d:0a:bb:19:0c:96:8e:47:
fd:48:81:8a:b2:47:8f:e1:fd:de:ed:bb:00:4c:39:
99:e0:c4:b1:c4:87:11:df:fe:07:f3:87:b4:28:93:
9b:8c:aa:27:7a:2c:aa:bd:b1:07:5d:44:f7:ff:2a:
ba:f4:b1:c1:f3:3d:48:71:17:dc:de:e5:20:de:e9:
16:ed:8a:b4:37:be:86:5e:80:a0:89:bf:28:0a:21:
10:1f:78:d8:a0:d0:df:42:0c:b8:d5:96:62:b6:fc:
57:86:51:a1:3d:62:9b:a5:cc:50:74:55:d3:d3:a1:
7f:ab:38:6f:d6:03:3d:78:92:32:70:cf:d9:c7:59:
d4:e4:6e:de:c2:32:99:5a:56:ee:84:cc:40:59:ba:
ac:df:7a:71:d5:4b:f9:69:af:fa:0c:92:9b:83:87:
ed:36:85:a5:42:27:2a:4d:dd:32:e1:89:89:52:9b:
36:d4:5f:bc:a0:2d:cb:a1:99:a3:d1:4f:2c:c4:b2:
c1:1a:34:79:f9:6e:06:45:6b:53:59:d7:7f:f6:e6:
08:52:2b:f6:73:e2:40:94:c5:30:71:c7:ac:db:83:
d9:6a:cf:72:04:86:ea:b8:a6:62:80:5c:b8:3d:62:
50:80:a6:3f:a2:74:48:b9:53:e6:8d:ad:d2:46:5e:
cd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B5:E9:BD:E7:D7:C8:6C:54:B3:7E:B7:04:4B:58:B0:CB:1F:EB:8D
X509v3 Authority Key Identifier:
keyid:61:84:5C:7B:60:AA:21:28:05:B9:EB:44:EA:A0:8C:48:92:3A:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYRce2CqISgFuetE6qCMSJI6oxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/YYRce2CqISgFuetE6qCMSJI6oxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/YYRce2CqISgFuetE6qCMSJI6oxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:77:c7:71:ac:da:8c:5b:e3:9f:07:93:b5:1a:18:22:51:71:
0a:45:4a:1e:b4:6f:1d:8d:65:84:6e:f2:fc:0d:2b:b8:cc:82:
d5:35:0a:8f:09:6f:3d:17:6a:7e:f3:35:2e:16:2f:0c:c7:b4:
a5:c1:21:bb:44:0f:f2:3c:aa:9f:19:da:91:72:ee:91:c9:66:
d6:e4:cf:df:0c:e7:34:b2:fc:39:6d:4e:cf:a6:e3:42:b3:64:
27:08:ed:85:c5:58:aa:ee:89:fe:7f:84:e0:da:2e:6f:f2:c8:
d6:5d:05:d9:41:f7:49:ca:07:ef:e6:bd:4d:ec:23:cb:6d:67:
6f:7e:2f:18:95:4c:e1:02:62:c5:7f:f9:1f:0d:8e:6a:c2:ba:
c4:8d:2f:22:12:48:19:9c:a9:b5:26:1f:7f:cd:3e:bc:3d:ee:
0a:a7:97:d3:4c:22:31:4f:3d:5e:3e:18:25:05:1f:57:46:81:
72:ff:dc:37:08:c2:0c:46:1e:5a:6e:00:43:07:4d:04:82:eb:
1a:37:12:5a:67:a1:48:31:65:0a:47:8e:09:0c:ae:03:34:4a:
a3:f6:7d:5f:83:c8:d0:d7:da:fe:9e:4d:da:aa:c4:e9:8d:7e:
a1:7e:8f:65:0e:be:54:50:e9:32:17:d8:bb:9c:2f:44:1c:c0:
06:30:b2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:21:11 2026 by rpki-client