Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
File: YGhXxDyh3wTLaaSgqshim98ydWs.mft (raw, json)
Hash identifier: An8YSAt9nv0wzXfx20PGCcVi5dgfCyUqdsyvItgjLXI=
Subject key identifier: CF:CA:75:ED:B7:CB:53:A2:3A:3D:2F:A1:48:32:8B:D6:56:DA:8C:61
Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
Certificate issuer: /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Certificate serial: 01A11A509B20EB132C8FFC2088B1ED9B4777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
Manifest number: 1749
Signing time: Thu 08 Oct 2026 07:00:52 +0000
Manifest this update: Thu 08 Oct 2026 07:00:52 +0000
Manifest next update: Fri 09 Oct 2026 07:00:52 +0000
Files and hashes: 1: YGhXxDyh3wTLaaSgqshim98ydWs.crl (hash: vdy29WQvGkkaQOQCVhdZn8ckm59YrNDzUvCDa2pwlmM=)
2: r07b59Kbc0tU4fUroKjDGDeksk4.roa (hash: VbjM5vBRkz4uK7ac3fSu6tjCMa1PBV229HM3K4xTekY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:50:9b:20:eb:13:2c:8f:fc:20:88:b1:ed:9b:47:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Validity
Not Before: Oct 8 07:00:52 2026 GMT
Not After : Oct 9 07:00:52 2026 GMT
Subject: CN=cfca75edb7cb53a23a3d2fa148328bd656da8c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:03:7d:a0:f5:b6:79:e5:87:52:1a:c3:97:5a:
f7:72:9e:fb:41:32:46:b6:c3:b8:a1:29:ea:15:bc:
62:7c:f1:0f:fe:01:75:43:84:b9:ab:a9:b4:2a:c5:
2d:55:67:8f:1f:b2:34:4c:e7:b7:ea:0a:fa:aa:4f:
c9:ac:b3:eb:78:a8:13:2a:ce:35:02:5d:80:aa:8c:
ac:50:b1:ea:8d:e8:91:6f:b1:04:0d:1a:39:c5:1d:
67:8d:b6:67:d5:5a:47:38:3c:b5:25:75:d3:3b:1b:
d3:f6:5c:0d:13:ac:9c:a3:5c:38:06:12:d8:d4:f2:
69:a5:5a:f9:ce:f2:99:42:0a:54:df:62:09:b6:4d:
b7:57:0a:38:e1:d5:f6:f1:78:b3:d7:3a:4a:f6:89:
b4:1e:38:44:93:6b:fa:f1:fc:fe:33:a5:2e:d9:a2:
07:e3:df:3b:1d:04:90:5e:08:19:a6:7a:21:27:10:
18:c1:c5:bb:af:44:76:22:c6:de:32:34:29:ae:2b:
29:17:ee:d0:74:9d:34:b1:79:6e:8d:42:6c:c6:a5:
0a:d3:a9:ee:8f:2f:d5:06:8b:9e:2b:b9:94:eb:9d:
66:7c:f7:77:26:f9:f7:3e:95:07:56:ed:9d:c8:02:
f8:3a:80:15:c6:e6:24:e1:b9:48:ea:26:aa:04:1a:
ed:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CA:75:ED:B7:CB:53:A2:3A:3D:2F:A1:48:32:8B:D6:56:DA:8C:61
X509v3 Authority Key Identifier:
keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2b:dc:0e:b2:77:bf:42:3b:38:8d:5a:29:31:d2:10:ae:6d:
11:44:2e:cb:09:cf:3e:56:76:2a:41:e3:17:b8:be:51:64:6e:
a0:2a:c2:3b:39:dd:2e:47:da:8c:bb:46:02:c5:ef:e2:71:ba:
2a:31:b4:4e:8e:30:92:46:73:01:10:70:2a:e9:ce:dd:af:b9:
d0:95:67:3b:ec:f8:bb:2e:91:bf:cf:28:f5:8e:3a:09:e1:82:
0a:5f:56:e2:a7:1f:f7:db:7a:26:e8:0d:9f:e1:35:05:72:53:
54:4e:91:f3:f3:0a:56:4e:84:3d:9d:40:ec:8d:6a:aa:b1:9b:
2c:cc:98:84:6b:d0:5c:67:cd:25:62:cb:55:64:b0:29:dd:bd:
14:cd:e2:98:0a:c7:fc:d9:22:8c:0e:5d:8c:a6:de:94:a1:09:
e0:53:79:7b:5b:6e:1e:d3:62:30:c4:a3:71:b0:a3:cd:cd:23:
ea:fa:a9:fa:ac:0c:5a:f0:2d:0a:ea:21:34:3a:c9:13:22:22:
a6:40:ce:f8:e9:49:91:89:c9:53:f5:8c:0a:5d:b5:db:63:98:
8b:5c:41:fa:66:b7:60:8f:31:59:e0:b3:0d:da:fc:13:5a:ac:
6b:8f:c3:26:1a:16:2d:79:20:c7:86:f1:fa:95:e3:7b:48:33:
a1:af:85:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:06:18 2026 by rpki-client