
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
File: YO9KF7jv9Fugs51HSWVX44j__lI.mft (raw, json)
Hash identifier: KJvtD0OinpmBchD8nHYnpNpHZkhjFIVswyR2VlE5e3s=
Subject key identifier: C9:EF:CB:D3:59:D6:2F:3C:28:9C:55:DC:21:D1:AE:FD:BD:9C:44:E2
Authority key identifier: 60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52
Certificate issuer: /CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
Certificate serial: 01A178F0FBBADEDFD1367B058A4722808A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
Manifest number: 05A8
Signing time: Mon 26 Oct 2026 16:00:21 +0000
Manifest this update: Mon 26 Oct 2026 16:00:21 +0000
Manifest next update: Tue 27 Oct 2026 16:00:21 +0000
Files and hashes: 1: YO9KF7jv9Fugs51HSWVX44j__lI.crl (hash: 8ECEP41UBSJIbOOA77HhC0daMiPEmHEIJK1CcDZgQuQ=)
2: bqQFNJsrG869RK3Nfbwr65mLsd0.roa (hash: lGIgTiJR2g5VC3z+XfnzZ2hEM7gGKI2STx8vdvlyfrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f0:fb:ba:de:df:d1:36:7b:05:8a:47:22:80:8a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
Validity
Not Before: Oct 26 16:00:21 2026 GMT
Not After : Oct 27 16:00:21 2026 GMT
Subject: CN=c9efcbd359d62f3c289c55dc21d1aefdbd9c44e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:35:9f:99:a2:ef:f7:35:67:39:de:6e:64:
d5:6e:95:b2:f0:06:8f:1f:40:45:24:6d:b9:49:ea:
1b:a4:26:c5:64:1d:a3:58:e6:08:5e:17:d5:27:33:
75:28:00:0b:fb:7a:25:61:cd:a7:48:84:b4:2b:50:
e6:c8:37:c0:e1:91:de:14:d7:dc:53:d5:f6:de:49:
ee:73:2b:5a:ea:c1:c8:f7:b6:8f:9a:ca:8e:41:4b:
5d:a5:f2:b2:8e:4a:08:9b:d7:08:fc:38:12:d1:cb:
55:7f:27:c3:0e:f1:cc:3e:c6:02:26:1e:4f:8a:ad:
12:91:a6:a0:64:91:86:e6:61:5e:e4:9b:dc:94:e0:
ef:ed:37:22:e5:2e:38:b6:38:4c:11:b8:fd:a8:03:
8a:3d:ed:85:1e:9f:12:b7:7f:3a:ee:5d:3b:6b:17:
5f:8f:c5:c9:d4:c9:ab:2b:3f:fe:eb:0a:99:e0:68:
33:30:bc:66:9d:42:f2:ac:86:ba:0f:4a:38:b0:b7:
51:ee:88:9f:8c:d8:e7:2c:fd:f0:d5:ae:74:cc:10:
02:57:6b:fe:ec:a9:51:48:76:7d:fa:b3:68:16:04:
03:57:d5:77:33:a8:15:cc:e2:94:fd:d7:5b:38:36:
bd:4b:9f:8f:81:67:1a:c1:0b:7a:80:c0:53:ea:ae:
2e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EF:CB:D3:59:D6:2F:3C:28:9C:55:DC:21:D1:AE:FD:BD:9C:44:E2
X509v3 Authority Key Identifier:
keyid:60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b7:d0:e2:b7:9f:30:40:fd:e9:34:b1:fe:ca:e1:07:64:49:
84:64:64:1e:b8:ca:f8:53:b9:94:68:14:4d:f1:f7:ab:14:8a:
33:a0:26:99:f5:4a:f0:34:ce:83:be:b0:32:7a:da:30:14:9b:
11:7d:c2:32:6e:78:62:60:70:35:e4:01:d6:c2:cc:d6:c8:44:
a3:32:27:2f:65:c1:f3:27:93:d0:7a:ab:a1:98:50:e4:71:9e:
d7:e1:ff:fd:c5:bc:d3:af:db:ec:d9:aa:28:69:da:18:b5:32:
05:4e:38:32:4f:a6:70:92:d0:68:bf:48:8d:4c:a4:5a:74:df:
bf:45:a4:3e:98:3c:1e:a3:4b:95:00:bd:f9:17:03:1c:d1:5c:
5b:f8:68:b4:4e:c7:68:0d:0c:42:85:96:23:3d:f6:59:7b:d4:
0a:fa:40:58:bb:a9:d6:b4:f8:65:fd:54:69:9a:89:eb:a9:5a:
01:ee:46:f5:f9:a6:e0:17:6e:99:0b:c7:30:b7:a5:27:c2:e4:
ce:c3:e8:5c:4e:92:d6:a6:8c:56:20:cc:d3:a8:76:11:7b:87:
fe:4b:25:2b:28:e0:95:c1:eb:54:43:d8:9e:17:f2:b6:d5:c7:
41:37:ce:5d:99:37:2a:35:e5:7d:af:3a:4c:4c:ed:9a:7b:c6:
94:14:61:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:51:06 2026 by rpki-client