
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
File: ynSM0AzX_mohdVr2QtiBuN2aOfc.mft (raw, json)
Hash identifier: gi2p0aCC6V5gdB11uWbfRgNi9bFv7by3d1E49/kYBIU=
Subject key identifier: 8C:DB:4A:98:DD:A1:1C:7B:E3:8D:2D:8F:1C:65:87:81:43:D2:43:25
Authority key identifier: CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7
Certificate issuer: /CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
Certificate serial: 01A187F6C170C6C81A66C442B1BAA45E5131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
Manifest number: 1ACC
Signing time: Thu 29 Oct 2026 14:00:57 +0000
Manifest this update: Thu 29 Oct 2026 14:00:57 +0000
Manifest next update: Fri 30 Oct 2026 14:00:57 +0000
Files and hashes: 1: gVEq3NnVdt_2WnJ5HkFKQbFF6gI.roa (hash: PhtT91kBJsBi6v+NJo/OC9S74yakm+F5W9I39PDYLyk=)
2: ynSM0AzX_mohdVr2QtiBuN2aOfc.crl (hash: IdkeFsuM/Xd/NQcCxNQoMjAPgZZnMpo0mV7ktCXIgkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:f6:c1:70:c6:c8:1a:66:c4:42:b1:ba:a4:5e:51:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
Validity
Not Before: Oct 29 14:00:57 2026 GMT
Not After : Oct 30 14:00:57 2026 GMT
Subject: CN=8cdb4a98dda11c7be38d2d8f1c65878143d24325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bb:84:aa:c4:15:44:f5:0a:09:2e:23:83:e5:
31:0d:18:18:99:82:a0:d2:ce:60:3f:0c:a6:b0:d1:
b1:0f:e5:8d:0b:ba:58:da:de:d0:e5:bb:44:00:42:
11:69:48:99:13:e4:79:41:68:fa:ef:bc:89:00:fa:
e5:12:b7:51:fc:60:3b:08:66:31:8c:9d:1a:59:45:
1e:31:2f:a9:f3:5b:f9:9d:74:61:d5:e0:5e:61:da:
08:3f:d3:4e:b7:46:ee:f1:58:20:00:8c:74:f4:4a:
c4:e1:a4:4f:ce:c7:5a:e0:84:7d:d9:2b:88:13:e6:
c1:4e:9e:9c:28:e3:21:e3:61:46:2b:ca:63:24:ad:
48:54:b1:db:46:4f:7c:37:f1:f7:b2:5f:c1:16:09:
e8:96:34:22:ad:16:d8:07:9a:92:24:85:9b:b7:c5:
cb:6b:ee:d7:48:85:13:c0:03:a5:13:2f:8c:2d:68:
1d:d3:74:fd:74:d3:b9:5c:70:1f:d1:57:76:f6:46:
fa:b8:4e:85:29:1a:29:d0:19:45:59:5d:1b:c3:f9:
56:a9:ad:6a:5a:68:ef:3a:4f:3a:c5:1f:97:b9:4f:
7f:2c:0b:11:0a:ef:a7:12:18:42:9a:51:3e:b0:0f:
27:f6:32:e4:7d:3c:77:7b:81:07:eb:43:50:70:bf:
90:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DB:4A:98:DD:A1:1C:7B:E3:8D:2D:8F:1C:65:87:81:43:D2:43:25
X509v3 Authority Key Identifier:
keyid:CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9a:c6:9d:de:53:9a:df:1f:63:fc:28:bf:1e:95:96:cf:4e:
87:94:13:20:b4:94:15:ff:56:dd:8a:60:b1:3c:25:c1:c1:75:
b9:00:b9:63:9e:75:3a:2c:2d:28:53:59:af:b9:7b:ab:81:dc:
2a:96:80:5a:1c:62:bc:03:05:4f:46:04:b7:3c:cf:e2:91:11:
d0:9b:d1:8f:73:98:0b:6e:48:8d:83:c0:24:bd:19:61:5c:a3:
f9:26:2b:20:7c:d6:ff:3a:59:2c:6c:a9:85:88:6a:a6:ed:85:
df:2a:c1:30:7e:8c:78:90:d9:f0:b4:79:99:17:35:67:c3:23:
8c:40:a0:6f:85:dc:14:89:c8:b3:68:cd:21:b8:31:ea:69:88:
ce:fc:4e:d6:22:b4:3d:db:63:10:4e:f7:a7:cb:cd:65:1f:7a:
3f:48:ed:39:66:77:2d:b7:bb:99:09:3e:a1:c2:ac:20:2d:ea:
28:f6:85:ce:03:79:7c:f1:7c:17:10:d8:93:cd:f7:4f:23:43:
d7:8a:a4:5c:73:6b:06:02:e8:e8:ff:cb:f0:6e:c5:b5:95:67:
0c:66:25:e2:d1:ad:ac:d8:33:ca:fb:96:b6:6a:11:a9:77:35:
6e:14:81:90:e6:29:87:7d:aa:1c:14:57:ce:40:64:0c:77:27:
54:47:53:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:57:20 2026 by rpki-client