Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
File: YlK_stYtvrdoczSHSHy2BMrvw5Q.mft (raw, json)
Hash identifier: UwEjWhZTYAeunHOSB6JIDI8SH0iynwR6LZBhqAcbgD4=
Subject key identifier: AD:C6:80:B7:A7:F1:D3:84:0C:A3:95:FE:3C:DB:71:74:E9:70:34:48
Authority key identifier: 62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
Certificate issuer: /CN=6252bfb2d62dbeb768733487487cb604caefc394
Certificate serial: 01A12BB1E2AB455A551EC2B05A6578D47A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
Manifest number: A6
Signing time: Sun 11 Oct 2026 16:00:40 +0000
Manifest this update: Sun 11 Oct 2026 16:00:40 +0000
Manifest next update: Mon 12 Oct 2026 16:00:40 +0000
Files and hashes: 1: LuU8gJ-fjPSUdy9FvX0CGcbhjvY.roa (hash: aGdXmYk3UJO5PBiGQxDG95DNI1OlCf0Xm3vAt2dRzTk=)
2: U83JSwoM78SuBci4bIU3yu1Tbcs.roa (hash: k9vZJbHYBx/dA8DMjVNa9LWbnCs+aqKaVz9gU9NnF8k=)
3: YlK_stYtvrdoczSHSHy2BMrvw5Q.crl (hash: hT4rL8QxJC6XuQc/84cb4o4WXhKKbRVq5XtY3fBAZhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b1:e2:ab:45:5a:55:1e:c2:b0:5a:65:78:d4:7a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6252bfb2d62dbeb768733487487cb604caefc394
Validity
Not Before: Oct 11 16:00:40 2026 GMT
Not After : Oct 12 16:00:40 2026 GMT
Subject: CN=adc680b7a7f1d3840ca395fe3cdb7174e9703448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8b:05:e5:5c:ca:55:4d:cb:a3:6a:1f:32:37:
bc:f7:ee:09:c7:21:92:11:69:87:de:50:a5:bf:27:
db:3b:42:ce:83:1e:81:50:15:46:58:2d:6f:a6:77:
4f:3f:4a:50:a6:24:b8:cb:97:77:a1:1b:b4:e9:d5:
2d:8b:d0:25:9f:c1:d7:10:1f:fc:e5:00:ac:64:ce:
9d:02:11:9c:59:39:44:27:32:da:f1:5b:58:e0:50:
9c:60:2f:67:8a:f1:c0:c5:3b:81:18:12:af:06:4e:
9f:56:a0:5c:72:89:92:12:40:e0:7e:26:81:b7:68:
4b:e9:0e:a2:7b:6f:4f:49:a9:55:82:98:f5:e0:19:
6b:48:25:e1:93:8c:5f:ae:d7:ab:61:11:e9:c3:dd:
81:1f:11:33:26:bb:06:24:d5:5f:53:5c:c7:fc:5d:
d6:c3:b8:52:8c:6f:79:f4:a8:25:06:e3:ca:8c:11:
25:94:09:7f:94:09:bf:bf:28:cd:27:53:7c:bc:a7:
a1:3c:08:46:cd:d4:64:33:3a:14:f5:7c:69:cd:af:
29:77:38:bb:3d:7c:8e:69:95:35:77:a5:7f:fb:66:
85:3b:e1:1e:90:90:ea:0f:18:a3:7a:6f:c1:3c:30:
90:08:9d:b7:14:0a:bd:7c:fb:f3:3f:e3:9f:e2:96:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C6:80:B7:A7:F1:D3:84:0C:A3:95:FE:3C:DB:71:74:E9:70:34:48
X509v3 Authority Key Identifier:
keyid:62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:06:8e:b7:9f:32:6a:10:2e:c9:fd:f9:ab:7c:7a:ef:d6:7d:
93:52:e3:68:a7:1a:05:ab:00:08:62:33:62:54:2b:0b:9b:dd:
95:9e:3a:eb:2e:87:70:39:01:a3:3e:e1:8e:1d:38:0f:1d:c3:
67:5b:48:84:a9:30:02:a4:7d:e9:1b:6a:17:da:3c:3f:fb:24:
e6:b7:6b:fd:56:38:3e:84:5d:3e:5f:37:05:28:74:73:9e:72:
70:2d:de:37:95:75:bc:7e:80:5c:7f:9e:11:1b:29:82:ef:9b:
a0:af:ab:e8:f1:76:30:e4:aa:7b:ab:9b:0e:50:f2:0a:4b:bf:
fe:df:ee:12:eb:ff:95:5b:1c:18:0b:3e:c9:a0:ac:af:d7:15:
32:8f:16:21:05:97:3b:2f:1d:a0:52:0f:0f:2f:2f:44:92:d3:
2c:7d:4c:ab:02:8d:9e:79:51:e5:45:bf:4b:01:f4:08:a2:6c:
c8:5c:34:33:2e:b6:fd:93:8b:47:1c:35:c8:0e:88:ba:27:e4:
3f:ce:ad:d8:6a:66:8d:5b:71:66:c9:e8:63:97:73:8d:a6:10:
04:4f:3d:eb:57:c9:9a:a9:df:69:27:a9:91:0b:1b:59:2e:02:
43:9b:74:9c:7f:2c:79:e7:9b:81:16:3f:23:25:ec:a6:42:49:
55:c9:e3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:19:59 2026 by rpki-client