Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
File: YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json)
Hash identifier: dMVr2o6kvp4i24p2Dy41TdmejDklAv2ywrjrRBZqJG8=
Subject key identifier: C4:BE:C7:84:40:71:D5:0B:25:F8:9A:8D:BD:01:E1:6C:43:C1:95:42
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 01A18FB01A74EB66D31DDB76BEDA49683046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
Manifest number: 0B36
Signing time: Sat 31 Oct 2026 02:00:45 +0000
Manifest this update: Sat 31 Oct 2026 02:00:45 +0000
Manifest next update: Sun 01 Nov 2026 02:00:45 +0000
Files and hashes: 1: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: jqdxa8eU4wSw2S69djk6iOaX1vI9UQM3VdtVKCvrC0A=)
2: Z82rG6_S6tuaECr9XCpjrA6MXBY.roa (hash: b7wehsai3YBico5JtbrGo9m6dNte7f4BVY42wHZn7pY=)
3: _3UUxWfdIKjZ94RP_R__5_MA69o.roa (hash: xEub+d4iGHet4J1D7KwTY4kCPRXkdFvIc+V+yAPzmjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:b0:1a:74:eb:66:d3:1d:db:76:be:da:49:68:30:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Oct 31 02:00:45 2026 GMT
Not After : Nov 1 02:00:45 2026 GMT
Subject: CN=c4bec7844071d50b25f89a8dbd01e16c43c19542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:df:2f:62:0e:b0:1a:c4:59:5a:e1:cb:8d:
71:47:d7:9f:73:ca:93:f6:17:b3:72:07:f3:a1:7f:
b1:c5:c4:59:f2:6d:d4:79:d3:86:20:3d:6f:70:41:
32:bc:a7:45:d4:bc:82:ce:9b:11:cf:43:33:3f:b1:
2f:e2:d7:61:1b:71:2f:21:b0:88:32:0f:1a:d6:4b:
2d:e2:c9:7c:6b:90:af:fa:d9:72:da:a3:04:61:a1:
b9:c7:6e:63:28:a6:37:52:0a:df:f1:64:84:b0:7c:
a7:34:8c:39:a1:12:5b:04:27:6e:0e:37:27:f1:84:
f2:85:4a:ff:13:1e:37:27:6c:6f:16:2d:ea:5b:e5:
90:f8:5b:aa:25:10:95:1a:3b:de:ff:3a:cd:57:89:
2c:b7:26:17:65:e2:79:60:f7:17:79:ff:01:81:4a:
0b:0d:1d:5d:96:9f:9a:f2:1f:35:6d:e1:66:5e:c9:
a5:0a:12:2b:bc:48:4b:ba:6d:65:97:9d:f8:87:3c:
15:be:c2:8d:47:94:b8:44:ae:0d:39:87:01:93:7a:
fa:a2:84:6a:1d:dc:85:3b:cd:9e:11:8d:9f:38:0c:
c8:54:fb:e5:46:0a:2d:bd:ac:b0:07:a4:78:b2:a5:
ef:64:c3:0c:ea:55:f6:14:f5:5a:d7:f3:43:c5:da:
24:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BE:C7:84:40:71:D5:0B:25:F8:9A:8D:BD:01:E1:6C:43:C1:95:42
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:bc:7b:3b:d1:a6:03:c1:a8:15:d2:8e:e6:9d:2b:2b:b4:62:
b8:a7:bc:91:c9:11:a2:6e:05:34:bf:0d:d3:b9:f1:6e:49:b2:
89:43:70:6e:c3:dc:d2:77:aa:2b:c1:13:c4:d0:6a:cf:dd:d6:
ed:9b:9f:31:98:d1:51:4e:aa:dc:5a:c3:d4:44:4f:eb:ac:03:
36:fd:71:c2:60:9d:b4:37:35:68:32:96:9b:f5:2a:03:49:06:
4c:8b:41:49:2b:62:aa:39:c0:45:26:69:4f:3c:49:55:91:4a:
1e:a9:b1:44:a0:31:7f:ea:ed:be:ef:3c:69:bf:13:04:ec:af:
07:bf:82:9e:02:67:b7:13:a7:89:d1:2f:d3:00:fb:b0:e4:54:
69:5b:28:96:aa:0a:0e:42:25:31:4e:91:3f:32:41:32:75:bd:
d9:e6:48:a4:3e:af:45:eb:4c:7c:38:56:41:dc:40:14:8c:ef:
f9:62:31:b9:70:0f:7f:90:08:ed:e0:79:95:52:53:15:cd:ba:
ac:5f:85:0c:02:d6:2f:ba:b6:7c:3d:7d:4a:de:0e:e3:ef:84:
e6:ba:11:ad:0f:d5:d0:7d:a7:1d:e3:f7:c9:af:0d:ae:f2:80:
9c:14:d0:2d:be:7a:94:78:8b:2b:1d:e2:0f:54:a2:cd:f7:b8:
b9:dc:38:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGPsBp062bTHdt2vtpJaDBGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMDgyZDZkM2ExZGM1MDE3OTU3Mzc1MzdjYTc0ZDI3YTgw
MjY1YTIwHhcNMjYxMDMxMDIwMDQ1WhcNMjYxMTAxMDIwMDQ1WjAzMTEwLwYDVQQD
EyhjNGJlYzc4NDQwNzFkNTBiMjVmODlhOGRiZDAxZTE2YzQzYzE5NTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbHfL2IOsBrEWVrhy41xR9efc8qT
9hezcgfzoX+xxcRZ8m3UedOGID1vcEEyvKdF1LyCzpsRz0MzP7Ev4tdhG3EvIbCI
Mg8a1kst4sl8a5Cv+tly2qMEYaG5x25jKKY3Ugrf8WSEsHynNIw5oRJbBCduDjcn
8YTyhUr/Ex43J2xvFi3qW+WQ+FuqJRCVGjve/zrNV4kstyYXZeJ5YPcXef8BgUoL
DR1dlp+a8h81beFmXsmlChIrvEhLum1ll534hzwVvsKNR5S4RK4NOYcBk3r6ooRq
HdyFO82eEY2fOAzIVPvlRgotvaywB6R4sqXvZMMM6lX2FPVa1/NDxdok8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMS+x4RAcdULJfiajb0B4WxDwZVCMB8GA1UdIwQY
MBaAFGMILW06HcUBeVc3U3ynTSeoAmWiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMt
YzE4YWQzNmE3YjMwLzEvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMtYzE4YWQzNmE3YjMw
LzEvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrx7O9Gm
A8GoFdKO5p0rK7RiuKe8kckRom4FNL8N07nxbkmyiUNwbsPc0neqK8ETxNBqz93W
7ZufMZjRUU6q3FrD1ERP66wDNv1xwmCdtDc1aDKWm/UqA0kGTItBSStiqjnARSZp
TzxJVZFKHqmxRKAxf+rtvu88ab8TBOyvB7+CngJntxOnidEv0wD7sORUaVsolqoK
DkIlMU6RPzJBMnW92eZIpD6vRetMfDhWQdxAFIzv+WIxuXAPf5AI7eB5lVJTFc26
rF+FDALWL7q2fD19St4O4++E5roRrQ/V0H2nHeP3ya8NrvKAnBTQLb56lHiLKx3i
D1Sizfe4udw4qw==
-----END CERTIFICATE-----
Generated at Sat Oct 31 07:38:44 2026 by rpki-client