Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
File: ytx04QgwQh1O7qmCRM_RtBGQN_8.mft (raw, json)
Hash identifier: 9F7yiy15V4uKuHuFZJB2x5JFBHUaL8lxwgW8hxzfKrk=
Subject key identifier: 13:42:9A:63:95:89:65:2B:6E:DB:1D:C8:0B:37:66:04:97:0C:92:32
Authority key identifier: CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF
Certificate issuer: /CN=cadc74e10830421d4eeea98244cfd1b4119037ff
Certificate serial: 01A1859AC8191CBA64B4423A2AD391853494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
Manifest number: 1ACA
Signing time: Thu 29 Oct 2026 03:01:15 +0000
Manifest this update: Thu 29 Oct 2026 03:01:15 +0000
Manifest next update: Fri 30 Oct 2026 03:01:15 +0000
Files and hashes: 1: DDllGy-0gN7gn7wR05GXGFPsqY0.roa (hash: 56XqjX/8wAHrfEweKci5I2st8Uu/z5VPWpGUoclsXrc=)
2: ytx04QgwQh1O7qmCRM_RtBGQN_8.crl (hash: tz/3M07MIXdjN7yiaFjEMr73sWDFRTHRxZPKlvf06PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:9a:c8:19:1c:ba:64:b4:42:3a:2a:d3:91:85:34:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cadc74e10830421d4eeea98244cfd1b4119037ff
Validity
Not Before: Oct 29 03:01:15 2026 GMT
Not After : Oct 30 03:01:15 2026 GMT
Subject: CN=13429a639589652b6edb1dc80b376604970c9232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4d:b8:a9:04:2b:76:27:e7:50:8c:2e:76:5e:
7d:8d:5b:57:ea:dc:b0:db:8a:ec:01:cc:f9:88:aa:
b7:d1:ed:4d:1b:4d:88:03:4e:da:94:88:96:7e:22:
11:e1:75:18:b0:4a:33:d9:2c:70:93:3e:c5:05:46:
f4:72:89:0f:3c:08:b5:5d:c4:d7:47:0e:d5:25:c6:
ee:d7:f3:6a:c6:79:bc:f1:4f:4f:b1:76:8d:96:43:
89:d1:ac:53:f7:b2:e7:b1:c6:23:1e:02:d0:c1:d8:
de:35:9b:c7:55:5b:2e:d4:0d:32:dc:3a:5a:7f:48:
6b:13:56:b1:d4:41:7b:83:80:ba:91:08:ef:a7:69:
df:d8:7f:fc:4f:39:55:c9:93:75:cf:cd:24:02:37:
3c:5d:e1:20:1e:22:b4:f6:55:56:9e:e2:ab:4c:36:
62:8c:61:d9:41:dd:22:96:89:77:dd:d5:ec:cc:b2:
f4:e9:17:d6:ed:25:a4:76:35:dd:0e:2d:5d:91:02:
60:b9:b9:87:5d:7c:ce:e1:5c:dc:95:c2:0c:37:b4:
38:93:3f:92:d3:bf:8c:42:84:0b:ba:2a:f3:20:c0:
45:51:53:4c:6f:5f:92:4c:f6:88:de:e2:3c:8d:7f:
fb:ee:01:da:41:a9:d0:56:88:73:99:85:87:89:b1:
6c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:42:9A:63:95:89:65:2B:6E:DB:1D:C8:0B:37:66:04:97:0C:92:32
X509v3 Authority Key Identifier:
keyid:CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4e:54:e6:98:1e:ad:e4:24:3b:14:29:9d:71:86:ee:af:1e:
d3:58:a0:1b:af:03:f8:cb:ba:13:ba:97:81:b4:f3:0a:e5:87:
a6:72:3e:07:04:94:ba:3a:da:35:76:b1:8a:97:ab:75:e5:0c:
9b:91:50:b9:20:0f:36:7d:98:93:9f:5d:08:7d:fd:1b:70:59:
aa:75:f6:c6:17:4f:47:7e:dc:a6:53:3a:26:f3:08:83:11:94:
8a:b3:f9:8a:f7:33:f3:c0:36:a7:0f:b3:dc:09:72:e4:2c:f9:
32:4f:89:16:0e:e2:fa:29:50:ef:56:b2:e6:1c:86:65:aa:22:
7d:39:c5:ed:c7:5b:bc:ef:97:df:94:75:eb:49:29:5e:cc:fe:
fe:39:f7:f5:8c:83:90:85:4c:0c:f8:bd:d3:7f:d2:85:a6:db:
b1:03:46:5c:fe:56:de:ce:cb:e9:c1:73:eb:cb:d2:95:c4:38:
07:e1:e5:7d:33:1e:55:a5:de:14:ed:45:f1:86:63:ce:d5:41:
c6:e6:3a:e0:a7:96:11:6e:00:a6:5f:ae:b2:32:96:56:72:40:
0d:96:01:b1:90:b9:22:a4:e0:4f:c7:4e:59:a5:ba:43:71:71:
bd:d0:11:e8:f9:36:46:cc:78:e9:e5:02:e3:8a:88:5a:03:6a:
66:4c:67:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 06:09:09 2026 by rpki-client