Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
File: ylmb3Bz8eujML7oV_NgMoRc3hGc.mft (raw, json)
Hash identifier: OvAlXzyeg8Amm3h/X1tNdRAXsKau7OnDP8IRz1MiWOI=
Subject key identifier: 24:59:9A:8A:25:50:E0:F2:EF:3E:D1:33:0A:40:0E:F5:98:D9:4F:E0
Authority key identifier: CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
Certificate issuer: /CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Certificate serial: 01A13B5C264806A14282880DF0D3BD6CF84F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
Manifest number: 06BB
Signing time: Wed 14 Oct 2026 17:00:57 +0000
Manifest this update: Wed 14 Oct 2026 17:00:57 +0000
Manifest next update: Thu 15 Oct 2026 17:00:57 +0000
Files and hashes: 1: hLDJZ-V17lQ1uYy4Yb_7EyNt5EY.roa (hash: 0stvy4uT+ZzDa9Ceq2lwui9WwwpxCgyyC5wsX5cUjjE=)
2: ylmb3Bz8eujML7oV_NgMoRc3hGc.crl (hash: 0/VPcAPQFExISeaEVrAOe6wawyXjAe4d50yIE3tUpfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:5c:26:48:06:a1:42:82:88:0d:f0:d3:bd:6c:f8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Validity
Not Before: Oct 14 17:00:57 2026 GMT
Not After : Oct 15 17:00:57 2026 GMT
Subject: CN=24599a8a2550e0f2ef3ed1330a400ef598d94fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8e:a6:48:85:72:7a:c5:ba:0d:d1:a6:37:21:
d9:7d:9c:29:d0:fc:c0:22:d5:66:27:45:93:30:35:
7d:7e:4e:ef:ea:be:b8:4a:d2:bb:02:58:b4:fe:7b:
08:d9:0a:c4:65:87:93:f5:18:5d:d9:1b:8a:e7:2f:
1c:cb:36:67:6b:52:be:32:9d:df:e3:23:5a:fb:ed:
9d:36:3e:a3:7f:e7:c8:62:4f:ae:ca:e6:ac:64:f3:
e1:ed:55:1c:6a:80:ed:81:24:58:a1:20:6e:b0:c5:
e6:17:29:ff:5a:12:d1:af:01:8f:d1:68:cb:69:43:
2c:c0:e5:e3:ba:f9:00:22:ad:a2:f3:f1:82:4a:f9:
45:b3:74:ae:1b:da:2e:7c:28:cf:53:4f:34:78:0a:
57:59:e1:18:77:3b:88:7b:d8:39:18:e1:62:0b:79:
2b:bc:29:51:b7:36:f0:2b:c7:41:47:0d:32:30:dc:
14:75:b0:7c:57:dc:0b:40:43:07:4c:f7:90:8f:02:
39:84:cf:ca:c5:bf:77:65:b9:bb:28:9d:4e:9a:75:
e9:6f:e1:f6:e3:89:65:20:b6:09:fe:2d:a6:ed:82:
15:92:d0:3f:a7:88:85:ff:59:c9:3b:10:8a:61:d9:
55:37:82:cd:8d:2f:5e:1f:ba:49:b3:7f:7b:1d:8e:
6e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:59:9A:8A:25:50:E0:F2:EF:3E:D1:33:0A:40:0E:F5:98:D9:4F:E0
X509v3 Authority Key Identifier:
keyid:CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6c:72:d6:ba:df:d3:f9:f1:19:2f:43:c5:e3:ac:26:3b:b2:
6c:f5:c5:8e:d3:58:96:aa:cb:a6:c7:40:3e:09:65:a6:d2:1f:
60:f2:44:b5:76:9d:21:3b:e6:db:d4:5b:61:97:2e:00:48:66:
b6:78:3e:9e:db:79:22:68:1b:1d:aa:45:e5:18:d2:5a:71:25:
4f:07:8f:42:a4:5e:7d:db:c2:dc:c2:93:45:10:82:4f:27:7f:
dc:67:51:9e:0a:3a:af:9f:06:47:61:f4:dd:aa:a6:ed:6b:60:
c2:50:c7:ac:1c:46:bb:59:47:d1:7e:76:40:8b:74:26:51:9c:
f2:1b:fa:99:2c:36:5c:65:df:48:70:a6:70:2a:f0:34:90:d4:
3d:0c:28:46:1a:4d:c0:2b:f4:57:73:e8:b2:96:98:10:b7:88:
c8:69:ea:fd:56:a6:b9:fb:04:32:11:c1:2b:f1:42:18:0d:70:
a6:73:f1:c9:e9:24:eb:c3:e8:91:bc:cf:30:b3:34:40:35:23:
82:46:8a:5d:3b:36:05:e5:6c:73:40:86:32:b1:7b:42:d6:42:
84:fc:4c:be:27:b6:81:c2:4b:a8:c8:9f:6e:2e:f8:84:34:1d:
de:ab:dd:2f:14:9d:ff:1a:c8:ec:0e:d5:e9:d4:cd:07:f1:e3:
96:cc:9b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:19:43 2026 by rpki-client