Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json)
Hash identifier: /zmH5t79cagWm2zOfv4iYuOGB25AMOIpa7k0KkJ1iYw=
Subject key identifier: B1:C8:7C:BC:D2:39:3A:E5:91:DF:E8:A4:61:8D:F8:B7:E5:0A:50:3D
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial: 01A16BDA38D73C0BA9367FEBCCF4C672A6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
Manifest number: 0A20
Signing time: Sat 24 Oct 2026 03:00:25 +0000
Manifest this update: Sat 24 Oct 2026 03:00:25 +0000
Manifest next update: Sun 25 Oct 2026 03:00:25 +0000
Files and hashes: 1: An9tSo9g-Gy9Up4GlPHJ27LvWXs.roa (hash: v2Ll6SU0terKek9jzeeagy8cmeBNdj6wWNsYdp2V7sU=)
2: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: FktpbGZSC5hUK2K9D7xqo8QfG+OjTh6nuhFB3qRj/hI=)
3: slyTkpHxsHHbymiBgxBnw2OM_JE.roa (hash: C2RqSAQP0bQ9sirjpml2aDPA2kjBI0WnlaU7NuMnd5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:da:38:d7:3c:0b:a9:36:7f:eb:cc:f4:c6:72:a6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Validity
Not Before: Oct 24 03:00:25 2026 GMT
Not After : Oct 25 03:00:25 2026 GMT
Subject: CN=b1c87cbcd2393ae591dfe8a4618df8b7e50a503d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:41:bb:87:e9:2c:cb:ae:0d:39:76:13:4e:
c1:8c:11:22:97:00:2b:b9:66:86:83:05:7a:42:36:
d1:9b:0a:93:98:6a:58:6b:20:e0:d0:df:42:05:8f:
63:6a:78:e0:47:e3:bf:37:c2:ec:ae:68:13:87:1a:
ff:c6:b9:d6:26:88:d8:a3:ad:52:e4:7c:bc:fd:eb:
ff:6d:34:c0:0a:09:c6:4f:06:b0:14:c6:5f:25:7d:
40:b5:76:fa:5a:45:8a:2d:06:ef:40:07:27:39:37:
6f:29:ed:2b:82:f3:42:73:58:41:bc:ff:a0:9d:3f:
dc:5a:1e:6d:6e:e5:d3:40:11:17:b7:61:5a:89:57:
81:7d:2c:39:7c:8a:ac:fd:e4:7b:97:66:43:39:65:
de:bf:51:47:57:70:54:d7:4c:ee:76:d0:d2:9f:33:
94:61:74:37:7e:7e:75:d6:52:e0:2b:88:ad:bc:56:
25:5d:77:4d:b7:c6:a9:7a:29:db:1c:a0:b3:69:f6:
9c:35:d4:f1:a1:eb:66:f3:41:ae:ad:20:f1:93:25:
8e:16:00:40:b7:67:d9:55:86:13:cf:99:3a:52:87:
40:a5:8a:55:d8:d3:2a:d2:a7:ff:c2:e2:a5:55:b8:
db:c8:65:4e:1b:e8:c2:84:a8:15:c1:6c:5a:a1:e6:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C8:7C:BC:D2:39:3A:E5:91:DF:E8:A4:61:8D:F8:B7:E5:0A:50:3D
X509v3 Authority Key Identifier:
keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:34:dd:2e:32:e1:41:3b:b5:8c:74:f0:51:35:e6:8f:e1:f5:
23:68:4c:d4:97:35:4c:d1:58:49:75:1c:bf:7e:f3:4a:ed:e6:
62:45:44:51:f8:a6:7f:78:41:c2:e2:11:4a:a8:9d:34:93:8b:
16:10:1c:fc:43:60:10:6f:25:8b:d1:2d:13:f9:6f:be:cf:aa:
8e:1c:b5:3b:df:c5:c7:b0:ca:08:8d:06:7c:cf:f6:e7:11:5c:
4d:72:a2:5a:9e:05:8a:1d:df:6d:c5:a7:aa:59:1c:7f:88:5d:
bc:49:d9:3d:cb:42:8e:ea:08:14:e7:91:f3:47:6b:b0:45:87:
4e:97:87:91:d0:ac:9d:4b:32:08:0c:5e:b3:7c:0f:cb:01:21:
77:ba:c4:d4:5f:a9:86:91:a3:3f:1d:61:af:97:af:33:83:7b:
2a:0b:20:1a:f3:6f:03:ac:35:7e:07:cc:1f:bd:46:36:13:5a:
c7:09:2d:fd:6c:70:a2:9c:2d:42:7c:26:21:af:85:3f:d4:b3:
7d:04:66:a6:ce:0e:18:fb:d4:14:59:c3:51:ef:ce:b5:17:21:
3a:8f:38:7f:c5:e9:38:d1:73:46:a4:98:93:d9:de:a9:60:61:
a7:cb:d3:dc:a1:bd:bd:e7:4e:dc:48:fd:b2:f1:67:27:cf:d6:
fb:66:9d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:19:20 2026 by rpki-client