Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
File: YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json)
Hash identifier: 71YjOFGdNtidoDL4vHojDx3gb8/Cc3IYvdwx68xt8wA=
Subject key identifier: 69:D7:EE:4D:4B:40:F1:60:69:8A:3D:B9:DF:55:B6:FB:B4:93:7B:DC
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 01A11CE4042CD92497047D62499F05166F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
Manifest number: 14FA
Signing time: Thu 08 Oct 2026 19:01:07 +0000
Manifest this update: Thu 08 Oct 2026 19:01:07 +0000
Manifest next update: Fri 09 Oct 2026 19:01:07 +0000
Files and hashes: 1: OmKYv-eBNTYluusfNr4dZe7zC_c.roa (hash: w1Hd7iJpZYHQEo80iQwx2qNAI2ou5wncgHu/GLia0Tg=)
2: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: lUiCYv3faWpfSeuKJ+xANra0YmW9whmaE5M3zjWV2a8=)
3: l-QyBKePUGvgwvLYQ39xVIrG-Xc.roa (hash: BEyQW94VrHgV1DUmSXCji9F0XD6RgtTzxouMSqJBF3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:e4:04:2c:d9:24:97:04:7d:62:49:9f:05:16:6f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Oct 8 19:01:07 2026 GMT
Not After : Oct 9 19:01:07 2026 GMT
Subject: CN=69d7ee4d4b40f160698a3db9df55b6fbb4937bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a5:3c:a0:77:f2:2b:11:e2:c8:ab:08:17:6b:
54:fe:d8:c9:60:d7:2e:b4:c6:20:4f:bc:0b:2b:54:
8a:63:0c:a5:0b:0b:cb:f8:16:74:7c:d4:97:b2:28:
e3:b5:4e:26:33:80:72:26:07:69:8c:64:7a:af:eb:
bb:07:97:af:4a:a3:b3:30:d9:4a:a5:80:61:8a:68:
3e:2a:93:4b:88:ee:ec:b0:74:d5:f5:90:a8:c8:05:
83:e9:fc:c4:ce:5a:ad:f6:03:d0:f7:57:b2:d2:ae:
15:8a:84:92:f2:4e:d5:86:67:63:ab:72:5d:5b:3f:
51:b7:ca:92:c5:16:49:db:7f:e2:c9:94:ef:83:cb:
5f:27:ee:5b:ab:19:b3:1d:7b:cb:f3:b1:ac:6d:ab:
dd:7a:d0:1f:19:4f:72:4b:c8:17:f3:0b:06:e2:48:
20:2d:b0:9e:5f:e5:8c:45:d1:45:a0:32:38:0d:46:
ea:cf:5b:36:8a:b3:6b:c0:48:fa:36:b8:18:8b:06:
e7:5f:fe:4d:64:a9:3c:21:71:55:de:da:2c:4b:61:
0e:c0:73:7a:c5:07:c8:90:2e:07:4f:39:68:dd:39:
f4:a1:ef:b2:8e:6e:28:44:64:c7:03:6b:8c:f0:52:
f0:ec:be:8d:11:ea:e9:f4:76:de:8e:af:8e:e2:de:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D7:EE:4D:4B:40:F1:60:69:8A:3D:B9:DF:55:B6:FB:B4:93:7B:DC
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:70:9b:b3:bf:ff:9d:3d:ac:ab:70:bc:2b:c1:1a:f2:79:ec:
97:f2:e0:90:48:e2:43:b4:2f:4e:41:59:8d:b0:4e:ad:3f:55:
f5:13:90:13:d0:de:54:74:50:59:22:a0:90:74:f6:36:69:07:
2a:b4:ca:2f:26:50:a5:3a:66:16:dd:dd:d1:33:2e:4b:96:46:
96:30:16:81:84:4c:84:35:31:34:bc:42:19:44:9b:4b:30:7e:
e9:5c:2b:02:b7:f3:44:74:f2:5a:21:73:da:48:8b:e6:e7:03:
09:23:50:17:1c:ae:29:63:b8:e5:d8:78:9f:59:73:f6:61:42:
ec:83:2b:e7:c9:ba:51:26:a5:00:66:02:77:21:75:0e:91:69:
53:35:db:53:a6:44:70:ef:f2:64:6a:bd:ee:79:8e:b9:b7:7f:
49:9d:27:ae:15:e7:89:e7:cf:af:6b:43:9f:ea:2a:ad:29:df:
4d:37:28:b8:d6:f6:b5:6b:c1:88:f0:1e:af:4f:a6:89:7d:96:
7a:62:9a:4a:b1:21:90:91:55:75:e3:3d:11:0a:c5:d9:8f:8e:
fe:2e:a7:7a:67:10:04:32:56:a8:a5:26:e9:e4:42:3b:82:f3:
74:4a:59:7e:ce:05:ab:46:b3:c6:86:d5:6c:88:51:d6:60:f8:
68:69:74:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEc5AQs2SSXBH1iSZ8FFm8pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZTVlYzlkZjRkZDAzYjlmNTAwYTZhMDk0N2QxNDdiNmVk
MjE2NjYwHhcNMjYxMDA4MTkwMTA3WhcNMjYxMDA5MTkwMTA3WjAzMTEwLwYDVQQD
Eyg2OWQ3ZWU0ZDRiNDBmMTYwNjk4YTNkYjlkZjU1YjZmYmI0OTM3YmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqU8oHfyKxHiyKsIF2tU/tjJYNcu
tMYgT7wLK1SKYwylCwvL+BZ0fNSXsijjtU4mM4ByJgdpjGR6r+u7B5evSqOzMNlK
pYBhimg+KpNLiO7ssHTV9ZCoyAWD6fzEzlqt9gPQ91ey0q4VioSS8k7Vhmdjq3Jd
Wz9Rt8qSxRZJ23/iyZTvg8tfJ+5bqxmzHXvL87GsbavdetAfGU9yS8gX8wsG4kgg
LbCeX+WMRdFFoDI4DUbqz1s2irNrwEj6NrgYiwbnX/5NZKk8IXFV3tosS2EOwHN6
xQfIkC4HTzlo3Tn0oe+yjm4oRGTHA2uM8FLw7L6NEerp9Hbejq+O4t6YRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnX7k1LQPFgaYo9ud9Vtvu0k3vcMB8GA1UdIwQY
MBaAFGLl7J303QO59QCmoJR9FHtu0hZmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hN2NlMDMtMWYxNS00ZGJjLTlhOGQt
YTgxNTQ0ZWE1YjY3LzEvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hN2NlMDMtMWYxNS00ZGJjLTlhOGQtYTgxNTQ0ZWE1YjY3
LzEvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHCbs7//
nT2sq3C8K8Ea8nnsl/LgkEjiQ7QvTkFZjbBOrT9V9ROQE9DeVHRQWSKgkHT2NmkH
KrTKLyZQpTpmFt3d0TMuS5ZGljAWgYRMhDUxNLxCGUSbSzB+6VwrArfzRHTyWiFz
2kiL5ucDCSNQFxyuKWO45dh4n1lz9mFC7IMr58m6USalAGYCdyF1DpFpUzXbU6ZE
cO/yZGq97nmOubd/SZ0nrhXniefPr2tDn+oqrSnfTTcouNb2tWvBiPAer0+miX2W
emKaSrEhkJFVdeM9EQrF2Y+O/i6nemcQBDJWqKUm6eRCO4LzdEpZfs4Fq0azxobV
bIhR1mD4aGl0+Q==
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:55:46 2026 by rpki-client