Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
File: YhoTCpDLA344A_6gv0ZaoIL-NJg.mft (raw, json)
Hash identifier: 5FQietngp3pSROosQHs+6lwHmSM8Tt/aPuXKSlAzc9I=
Subject key identifier: CA:1E:C6:BD:FD:D9:60:71:20:82:88:F4:4B:56:99:58:C9:1A:38:23
Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
Certificate issuer: /CN=621a130a90cb037e3803fea0bf465aa082fe3498
Certificate serial: 01A135233EEAE4BE432820F60B9C5D5A79D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
Manifest number: 08C8
Signing time: Tue 13 Oct 2026 12:01:04 +0000
Manifest this update: Tue 13 Oct 2026 12:01:04 +0000
Manifest next update: Wed 14 Oct 2026 12:01:04 +0000
Files and hashes: 1: Rmbqki6sfeVONmSCUKVbSwnLV2w.roa (hash: m02OGs1ERDq2Tep5VBBDirUwK9M85zv/SGcl5/T9Gng=)
2: YhoTCpDLA344A_6gv0ZaoIL-NJg.crl (hash: EXBLZTyqMiWled6PE96bq+wo6yCPpnUnEMcPZshlYPM=)
3: YrjDjaI3_Q6KPQ90f8RoYBEvTqI.roa (hash: VmD17BnA3G7W1dMkZraFPy0h1sdRJ/jQerJj3HVgUI8=)
4: mEMBpqCiAZX-66IM2v28OLBYmaU.roa (hash: D0q/tQQJTMQWefAkqZBJ1Tlw8AdCPKqxL86ZtoZ1fgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:23:3e:ea:e4:be:43:28:20:f6:0b:9c:5d:5a:79:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498
Validity
Not Before: Oct 13 12:01:04 2026 GMT
Not After : Oct 14 12:01:04 2026 GMT
Subject: CN=ca1ec6bdfdd96071208288f44b569958c91a3823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:38:80:94:c7:f9:2c:b0:fa:f3:0c:2e:a5:
17:12:40:0a:f0:e2:33:09:b9:1d:91:5e:6a:2d:e4:
b0:fe:e0:5d:fe:2c:fd:2d:9d:59:08:7f:a9:37:29:
ef:a3:72:76:4e:fd:9d:dc:83:7d:3b:8e:a2:de:37:
76:f2:c8:f5:5b:d8:99:43:98:8c:90:66:fb:54:7e:
b3:51:b7:48:5d:fd:80:c1:ae:d6:99:65:ee:2a:69:
97:c8:0e:80:f7:0f:ac:27:0c:7e:b6:9b:a7:78:a2:
d8:98:a6:4f:4b:63:8e:a5:f9:e4:fa:de:6a:36:bc:
a6:f1:bd:c6:13:1a:4d:4b:18:fa:38:b8:9b:d4:93:
1c:6f:2b:e0:3e:ac:30:a6:0e:c0:44:cf:60:1b:e9:
c9:ec:c7:71:85:30:2c:ac:9b:f3:28:b1:73:1c:2b:
68:f1:65:29:75:34:80:c1:e6:24:3e:3b:8b:13:10:
49:1e:06:7a:19:8a:01:1f:cc:b2:d9:f4:b2:d8:c0:
3a:70:5b:5d:b4:b3:80:48:b4:21:72:e7:ff:f3:45:
14:7a:40:18:e3:d6:10:f2:2c:38:e1:ae:b5:0b:1a:
b8:c7:1d:dc:ba:1a:a0:ca:33:3e:4e:2c:94:32:ae:
a9:7a:dd:7f:35:36:5a:28:1f:67:f8:a4:a2:d5:e9:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1E:C6:BD:FD:D9:60:71:20:82:88:F4:4B:56:99:58:C9:1A:38:23
X509v3 Authority Key Identifier:
keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d5:f9:28:a3:ad:96:a0:9b:f7:8b:74:8b:09:09:04:cd:76:
1d:66:e6:c8:fe:c2:6f:6f:76:0a:0f:40:06:81:cd:5b:ca:73:
1b:fe:84:88:21:b3:cf:ab:49:a4:6e:b5:02:6a:05:6b:02:50:
bf:e7:ff:46:36:c4:83:af:ae:c7:43:d2:09:32:cf:4c:93:39:
3e:5f:46:7e:98:1f:2c:e5:f3:69:37:90:ca:d0:fb:88:f3:15:
45:4f:14:33:ac:01:a6:9b:c8:ab:0b:28:89:3b:9e:66:a8:47:
ad:11:c0:b2:eb:f3:f8:fd:60:3f:ac:15:5e:7b:15:71:5b:07:
05:7a:8b:b5:c8:b9:28:01:e2:2e:81:72:c9:c7:ce:0f:c6:2f:
c4:78:dd:56:d9:e9:e3:12:75:4a:d7:ff:92:54:f7:da:e0:85:
83:48:33:7b:aa:6c:11:3a:34:e9:ed:62:69:3d:9e:f7:dc:9f:
15:e2:01:d3:ea:e1:92:51:f3:d9:a6:3f:2f:cb:b1:cc:a5:c9:
3d:99:ab:12:a0:e0:47:09:b6:df:db:fd:89:e0:b0:2c:c6:aa:
a7:7c:e6:24:0e:56:7f:7e:94:39:00:cf:a3:e8:54:f8:09:d7:
76:56:2e:1c:fe:e6:ad:8c:92:4c:87:d7:1a:da:24:14:d8:24:
8a:c9:89:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:32:13 2026 by rpki-client