Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
File: YC8n-tkkUqJUswoGDtODsTx1jtY.mft (raw, json)
Hash identifier: Yihx8ENcmI66+6rKIex2FF7xZu8OeHyklvM1m3aCiW4=
Subject key identifier: C2:D5:DE:50:B4:F6:F1:19:94:B6:38:B4:AF:0F:8D:3B:EE:18:12:E5
Authority key identifier: 60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6
Certificate issuer: /CN=602f27fad92452a254b30a060ed383b13c758ed6
Certificate serial: 01A06DCC2FB2C56F57B9A27E944E3D5E0B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
Manifest number: 0C9D
Signing time: Fri 04 Sep 2026 19:01:32 +0000
Manifest this update: Fri 04 Sep 2026 19:01:32 +0000
Manifest next update: Sat 05 Sep 2026 19:01:32 +0000
Files and hashes: 1: YC8n-tkkUqJUswoGDtODsTx1jtY.crl (hash: fYlQRUSD4CdFyTS1XY3BQKuib51exD1zcOCan0SCopc=)
2: yjdYp8YMAtj2_Dytxy6NEaoV14M.roa (hash: /wldluyAt2xqR07lomlO0CgTxaAUVhzs9ZM3VW1cPGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cc:2f:b2:c5:6f:57:b9:a2:7e:94:4e:3d:5e:0b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602f27fad92452a254b30a060ed383b13c758ed6
Validity
Not Before: Sep 4 19:01:32 2026 GMT
Not After : Sep 5 19:01:32 2026 GMT
Subject: CN=c2d5de50b4f6f11994b638b4af0f8d3bee1812e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:41:9d:83:ca:f5:4f:c8:51:1f:3c:d7:84:
45:ed:1c:b6:b6:11:8a:b3:ac:46:f2:f5:8b:07:87:
29:2f:99:38:e5:1d:49:f6:4c:f4:2e:69:9c:c1:11:
c3:59:2a:52:55:4b:a3:d0:b4:06:5d:08:f5:f0:f8:
8e:7a:a2:d3:48:ec:1a:a7:35:46:bd:dd:6d:25:ce:
f7:21:8d:ee:ad:4d:95:c4:c6:03:d6:6c:fd:e3:dd:
13:6d:ae:35:ad:1d:fb:52:4e:cf:07:73:10:32:22:
11:c4:99:b1:78:50:b9:11:77:b0:32:b8:b7:fa:de:
64:96:c7:ee:4d:3d:8b:4a:ea:b2:dd:1b:f2:1c:a2:
f6:40:0b:cf:db:24:b8:2d:7a:9c:ac:03:ee:11:bc:
ab:1f:2d:3e:e5:7d:eb:48:06:06:4e:bd:dc:de:d7:
1e:24:75:e2:aa:4a:9a:11:4f:c1:c6:60:f0:68:da:
66:0e:f0:46:ff:00:28:cb:b8:a9:a2:36:e6:1d:82:
20:70:11:2b:d3:f9:29:13:04:0c:5f:a5:fe:a1:7d:
d6:91:10:29:31:33:ea:3e:ac:2e:80:48:07:e9:a6:
79:56:f0:fe:64:8e:d9:0b:2a:79:95:6c:1a:42:49:
a7:51:4a:34:a8:26:d3:29:19:12:3a:bf:3e:74:e3:
e6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D5:DE:50:B4:F6:F1:19:94:B6:38:B4:AF:0F:8D:3B:EE:18:12:E5
X509v3 Authority Key Identifier:
keyid:60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c5:c9:74:e3:66:6e:5b:c0:0e:cc:98:06:77:1f:99:fa:95:
44:8a:25:d2:22:86:b8:06:24:54:52:96:9a:24:45:8f:2e:8a:
33:02:42:78:fc:78:cf:cc:d5:9c:9a:95:65:31:83:ce:21:e8:
db:84:ae:4a:16:a5:53:ec:0d:71:19:eb:e3:0b:8b:31:db:21:
d1:42:ee:23:41:a9:57:5e:3b:a3:20:86:ae:bb:9e:b3:fe:da:
3c:80:3f:aa:1d:3b:aa:e1:74:84:15:70:de:ef:78:2e:36:93:
4b:ba:f9:cc:9d:6d:8c:c5:7c:d7:fb:7f:d3:8e:17:d2:a6:a0:
a8:c3:28:9c:6a:dc:b4:26:14:84:ad:99:d6:27:01:b1:fa:e7:
bd:51:67:6a:ec:a2:cd:40:51:7b:c5:c6:bf:a3:cf:ec:31:fc:
f1:2c:21:c3:38:a2:2b:5d:37:fc:a7:6f:ea:62:c3:17:04:0a:
47:f4:e4:06:c3:a5:0f:0f:db:7f:8f:a5:28:88:06:7d:a2:b6:
66:0b:75:3d:bd:13:eb:61:17:95:b7:27:71:08:c9:60:c4:b4:
fd:70:74:1b:c5:f2:e6:41:e7:31:67:9c:01:04:2b:db:0a:57:
92:31:c7:78:78:48:2d:aa:3c:5b:cd:30:52:a9:57:42:82:71:
82:7d:3d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:43:50 2026 by rpki-client