Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
File: YC8n-tkkUqJUswoGDtODsTx1jtY.mft (raw, json)
Hash identifier: X/0wjr86z8KhFHtS9YLurt7JKxZUu65AU7FEB28zVpU=
Subject key identifier: D0:00:20:67:AD:52:F8:5D:12:EA:05:BE:3A:28:6D:85:CE:A5:21:95
Authority key identifier: 60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6
Certificate issuer: /CN=602f27fad92452a254b30a060ed383b13c758ed6
Certificate serial: 01A17A3A9A68149E9654CD99E79D9B61C5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
Manifest number: 0D28
Signing time: Mon 26 Oct 2026 22:00:23 +0000
Manifest this update: Mon 26 Oct 2026 22:00:23 +0000
Manifest next update: Tue 27 Oct 2026 22:00:23 +0000
Files and hashes: 1: YC8n-tkkUqJUswoGDtODsTx1jtY.crl (hash: 0fx5khBe+alMSJm/GChm+rCxvE/05feLi4y0O0gdOB8=)
2: yjdYp8YMAtj2_Dytxy6NEaoV14M.roa (hash: /wldluyAt2xqR07lomlO0CgTxaAUVhzs9ZM3VW1cPGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:9a:68:14:9e:96:54:cd:99:e7:9d:9b:61:c5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602f27fad92452a254b30a060ed383b13c758ed6
Validity
Not Before: Oct 26 22:00:23 2026 GMT
Not After : Oct 27 22:00:23 2026 GMT
Subject: CN=d0002067ad52f85d12ea05be3a286d85cea52195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:7e:26:a6:8e:a1:bc:09:63:c8:ef:9a:63:
33:9f:97:5f:b2:ca:0a:02:e1:69:cc:de:63:7a:e5:
be:42:06:c7:33:72:8d:7a:6c:0d:8c:73:be:39:1a:
70:d9:4c:0e:b0:e0:f1:c5:d8:81:03:35:9c:9f:14:
6b:56:bd:98:51:14:ad:64:0e:bc:c6:de:ff:d5:1e:
04:21:83:f0:85:24:34:fa:47:1c:dc:4d:5c:48:7c:
68:3c:b8:77:32:ed:22:f8:03:97:b8:c5:5b:5f:dd:
3c:c9:84:4d:89:df:80:d5:ca:28:f1:c7:e7:c3:ad:
70:99:7b:4b:72:1a:0a:ab:3a:0a:39:95:14:87:68:
cc:24:da:9c:f6:bd:62:58:89:c5:9b:b5:ca:eb:0d:
1b:8b:64:d8:0b:b5:08:eb:be:cf:3b:90:a5:51:dc:
39:8b:68:3c:ae:ea:e2:46:28:4b:b3:b8:bb:10:34:
69:f1:18:f7:18:f8:4c:a1:6f:f4:5b:3b:13:32:81:
61:2c:9f:bd:36:0b:c4:4b:ed:f1:58:7d:a1:58:52:
b2:85:75:0c:17:63:03:87:7f:21:34:20:b1:8e:0d:
cb:4d:6e:20:5c:45:bb:cb:30:9f:c8:5c:00:70:44:
1e:b4:1c:e1:a2:ec:0b:dc:fc:90:93:1e:5b:da:37:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:00:20:67:AD:52:F8:5D:12:EA:05:BE:3A:28:6D:85:CE:A5:21:95
X509v3 Authority Key Identifier:
keyid:60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:67:67:5c:86:53:6b:c4:7b:a2:45:9f:c1:cf:c9:32:c6:a5:
e2:f7:67:11:95:ec:9c:ab:69:1f:f1:69:6f:6e:c0:e0:c6:79:
e0:af:f5:e1:5c:83:0d:78:c7:d1:3f:9a:43:ee:6e:df:be:f7:
b7:a1:a2:86:dc:d1:bc:46:0b:d7:3c:b8:64:c3:d4:cf:9d:2d:
65:c7:57:d4:0e:47:9c:27:c7:5c:93:72:0f:4f:26:46:d5:de:
02:04:50:ed:0a:9d:49:88:29:b5:35:9e:7d:5d:47:3e:23:03:
6e:81:cd:b6:0c:dc:e0:eb:7a:0f:4c:00:3b:08:bd:4f:c1:5d:
6e:04:fc:ea:2e:42:c2:84:15:f9:aa:2a:27:e8:ab:dc:fa:67:
ee:2f:10:2e:54:c0:4a:4c:7e:b7:ea:71:6e:15:10:d9:79:23:
6d:05:7e:96:6b:21:79:b0:6c:ff:ae:be:b5:5a:91:28:98:1a:
b3:e2:2e:4f:d3:d8:98:ac:ae:5a:88:b6:fa:dc:9d:a0:12:bb:
79:24:e0:f4:d9:4c:25:25:16:3b:c9:f9:13:6f:a0:ca:03:79:
e1:65:98:24:54:95:05:a3:47:b5:aa:3a:96:30:de:35:ac:11:
1d:69:ed:a6:79:af:df:d8:18:7e:3a:b3:6a:9d:12:78:51:d7:
c0:2e:6e:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6OppoFJ6WVM2Z552bYcXKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMmYyN2ZhZDkyNDUyYTI1NGIzMGEwNjBlZDM4M2IxM2M3
NThlZDYwHhcNMjYxMDI2MjIwMDIzWhcNMjYxMDI3MjIwMDIzWjAzMTEwLwYDVQQD
EyhkMDAwMjA2N2FkNTJmODVkMTJlYTA1YmUzYTI4NmQ4NWNlYTUyMTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYV+JqaOobwJY8jvmmMzn5dfssoK
AuFpzN5jeuW+QgbHM3KNemwNjHO+ORpw2UwOsODxxdiBAzWcnxRrVr2YURStZA68
xt7/1R4EIYPwhSQ0+kcc3E1cSHxoPLh3Mu0i+AOXuMVbX908yYRNid+A1coo8cfn
w61wmXtLchoKqzoKOZUUh2jMJNqc9r1iWInFm7XK6w0bi2TYC7UI677PO5ClUdw5
i2g8ruriRihLs7i7EDRp8Rj3GPhMoW/0WzsTMoFhLJ+9NgvES+3xWH2hWFKyhXUM
F2MDh38hNCCxjg3LTW4gXEW7yzCfyFwAcEQetBzhouwL3PyQkx5b2jf+jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAAIGetUvhdEuoFvjoobYXOpSGVMB8GA1UdIwQY
MBaAFGAvJ/rZJFKiVLMKBg7Tg7E8dY7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUM4bi10a2tVcUpVc3dvR0R0T0RzVHgxanRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8yZjY3YjktNDkwYi00M2VmLWIwODgt
NGFiMzk3MzUwMmZiLzEvWUM4bi10a2tVcUpVc3dvR0R0T0RzVHgxanRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8yZjY3YjktNDkwYi00M2VmLWIwODgtNGFiMzk3MzUwMmZi
LzEvWUM4bi10a2tVcUpVc3dvR0R0T0RzVHgxanRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGdnXIZT
a8R7okWfwc/JMsal4vdnEZXsnKtpH/Fpb27A4MZ54K/14VyDDXjH0T+aQ+5u3773
t6GihtzRvEYL1zy4ZMPUz50tZcdX1A5HnCfHXJNyD08mRtXeAgRQ7QqdSYgptTWe
fV1HPiMDboHNtgzc4Ot6D0wAOwi9T8FdbgT86i5CwoQV+aoqJ+ir3Ppn7i8QLlTA
Skx+t+pxbhUQ2XkjbQV+lmshebBs/66+tVqRKJgas+IuT9PYmKyuWoi2+tydoBK7
eSTg9NlMJSUWO8n5E2+gygN54WWYJFSVBaNHtao6ljDeNawRHWntpnmv39gYfjqz
ap0SeFHXwC5u5w==
-----END CERTIFICATE-----
Generated at Tue Oct 27 02:32:12 2026 by rpki-client