Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
File: Ym0k1r81OWP-WvolsKWWZxUqhtA.mft (raw, json)
Hash identifier: DV98Gf+QFm0FIYN8MW1QPtWbK0qrvdx3nrDfUYyv91E=
Subject key identifier: 06:B9:05:88:EF:A1:E6:59:1B:4F:C8:07:04:1D:06:E7:06:F1:3C:BB
Authority key identifier: 62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
Certificate issuer: /CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Certificate serial: 01A06F83F31275391025B057F391F81E844C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
Manifest number: 11C9
Signing time: Sat 05 Sep 2026 03:01:53 +0000
Manifest this update: Sat 05 Sep 2026 03:01:53 +0000
Manifest next update: Sun 06 Sep 2026 03:01:53 +0000
Files and hashes: 1: BOEi7NrSCNnbOJagz6PacwPyCow.roa (hash: gcJkZ8tsvtRiMSl8JsUfBFpQEizMhx1qFKi60dWgXD0=)
2: Ym0k1r81OWP-WvolsKWWZxUqhtA.crl (hash: 5N1fde9eg+cUl5cDpb9a3XdWfs4LeUVX9VB45CVPwFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:83:f3:12:75:39:10:25:b0:57:f3:91:f8:1e:84:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Validity
Not Before: Sep 5 03:01:53 2026 GMT
Not After : Sep 6 03:01:53 2026 GMT
Subject: CN=06b90588efa1e6591b4fc807041d06e706f13cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:9d:7e:f2:3a:45:b0:66:f8:15:57:9f:ee:
0a:9c:b5:10:c5:0d:35:ff:eb:16:61:dc:fe:1a:c5:
43:12:18:2e:82:12:08:58:72:d0:67:17:55:b1:cc:
7c:f3:6d:eb:77:83:a8:17:2d:cb:1b:95:e8:fd:ce:
b1:cf:99:5a:bb:0a:ba:7f:a6:1e:c7:83:f7:5f:86:
ce:6f:a1:5b:85:3e:b5:e0:3a:3c:53:24:6b:ae:5e:
2f:69:f5:eb:56:91:de:d5:9f:e6:9b:f8:69:22:b0:
d2:e8:df:db:fe:9b:23:f2:14:b0:0c:b0:98:81:70:
e1:4e:f9:d4:6c:17:55:d0:df:02:bb:8c:8d:14:44:
fe:aa:75:65:34:24:3c:4f:ae:ad:11:51:45:71:18:
93:07:34:e1:93:eb:17:dd:c5:d6:1b:98:ac:5c:d4:
c5:98:1e:5d:6a:0e:08:f4:2f:ec:73:72:9e:ed:42:
33:ca:f3:0e:b0:4a:30:ca:03:82:01:37:e4:d4:ad:
f3:54:eb:d0:b8:f9:9f:a0:72:56:a0:fd:27:a7:23:
f6:e1:01:5e:b9:45:f2:a6:48:36:54:82:eb:b1:0b:
20:0f:8d:c3:14:f9:93:91:f1:4d:73:60:34:23:4e:
f4:6c:78:8b:1d:36:7a:35:81:e8:87:33:ce:a5:c8:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B9:05:88:EF:A1:E6:59:1B:4F:C8:07:04:1D:06:E7:06:F1:3C:BB
X509v3 Authority Key Identifier:
keyid:62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8b:3b:dc:b4:71:cd:31:fc:ef:df:f1:b5:97:8c:6b:f9:17:
ca:36:77:84:31:50:4d:c9:c4:88:1d:54:a7:73:b5:77:74:89:
6b:ae:d5:41:73:39:c6:d3:b0:d3:ea:62:77:69:b2:33:51:fa:
5e:ba:8e:53:b1:c1:81:9b:fd:52:9c:ec:e3:24:c2:bf:ec:a2:
69:63:a8:85:5d:2e:8c:48:16:51:f8:75:4b:58:1d:92:81:6e:
b9:8c:b1:a0:b4:6a:bf:91:37:67:3c:c7:b1:ef:fb:af:e3:85:
84:4f:2c:57:19:de:dd:4e:9f:cd:7d:3d:09:67:ed:54:2f:82:
c2:7e:85:f5:db:c4:63:6a:a7:50:d2:aa:7e:45:a2:3f:3f:14:
7a:12:be:1e:ac:ae:c7:f9:5b:59:81:98:fb:ca:e3:2a:fc:eb:
8e:c7:8f:6c:20:7a:d1:20:2b:1e:08:06:e4:7d:73:94:5c:f2:
57:e6:b1:69:83:03:b1:9e:c5:0f:88:a3:97:6d:7c:73:1b:86:
95:c8:cd:b0:62:b8:d1:1b:ec:89:84:37:39:71:eb:09:19:8a:
1f:4e:79:50:fe:fb:01:0d:ba:72:57:d4:fa:7c:c7:64:d2:5b:
08:b9:d4:b4:bd:b5:66:63:7e:d2:c9:15:36:97:64:d5:a1:ad:
c5:b2:be:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:34:05 2026 by rpki-client