Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft
File: YbcgLJIwwolFDtWmKxc2mgZZvGs.mft (raw, json)
Hash identifier: sj1kKEwqAtYdA9n87PA+p4jZKgIVEe0JIiRYOAhv1F8=
Subject key identifier: 10:16:FA:32:B4:47:96:CF:19:D7:B1:D8:99:2D:8B:42:9A:75:59:76
Authority key identifier: 61:B7:20:2C:92:30:C2:89:45:0E:D5:A6:2B:17:36:9A:06:59:BC:6B
Certificate issuer: /CN=61b7202c9230c289450ed5a62b17369a0659bc6b
Certificate serial: 01A09FCBC9B75771DD49B8225F5F09B7BD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbcgLJIwwolFDtWmKxc2mgZZvGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft
Manifest number: 0CF8
Signing time: Mon 14 Sep 2026 12:02:07 +0000
Manifest this update: Mon 14 Sep 2026 12:02:07 +0000
Manifest next update: Tue 15 Sep 2026 12:02:07 +0000
Files and hashes: 1: H8_4w92WXuGkctjlJERZEe-5K34.roa (hash: WmS53pHwBk98gkS34NpilrfE1ZVelLUsA8l48EKHH6c=)
2: YbcgLJIwwolFDtWmKxc2mgZZvGs.crl (hash: tTjBgorLV7q6FEijjwYo2zwMb+/1Qh+WPg2NpJI6Mls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbcgLJIwwolFDtWmKxc2mgZZvGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 12:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:cb:c9:b7:57:71:dd:49:b8:22:5f:5f:09:b7:bd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b7202c9230c289450ed5a62b17369a0659bc6b
Validity
Not Before: Sep 14 12:02:07 2026 GMT
Not After : Sep 15 12:02:07 2026 GMT
Subject: CN=1016fa32b44796cf19d7b1d8992d8b429a755976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:79:b6:e2:b4:a8:00:f8:99:3c:1c:54:0c:
a3:08:e2:19:70:05:58:3e:1f:04:6d:06:32:bc:58:
e1:75:f5:1d:d9:7f:27:d8:ff:b5:e3:0d:47:b1:8c:
28:e5:ef:63:9d:cb:d5:f0:f1:29:0c:86:50:01:e4:
7a:eb:f1:83:c8:2c:9f:42:d3:9e:3a:92:78:ee:68:
9c:18:4c:a4:6c:e9:ef:86:96:12:78:b8:d9:9c:76:
23:5b:1f:4a:e3:76:73:5f:98:a3:bc:d9:05:5e:b8:
27:dd:4b:73:5f:f1:aa:4d:f6:cf:82:18:17:de:1d:
8c:f7:d6:96:45:0a:c1:ad:70:51:36:e0:07:01:01:
71:bd:8e:5c:4b:cf:21:8a:40:7b:44:8d:1e:03:e3:
4f:f8:bb:0c:42:e3:2e:c8:61:a6:57:60:82:79:1d:
8a:fe:f6:79:7e:60:a2:58:37:1b:f0:27:8b:9d:55:
02:a3:ac:b0:b9:3b:56:93:61:04:5c:e8:51:3a:1d:
49:66:83:4c:29:80:b7:fe:56:c0:c8:64:2e:ad:ae:
e0:0c:dc:12:ca:b7:19:0e:70:d0:e4:22:2e:19:b3:
a3:f8:69:81:c9:59:ac:e9:fb:3f:8f:55:b2:8f:a2:
14:e0:74:61:57:28:a0:e7:f6:e8:ee:7b:25:0c:b7:
52:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:16:FA:32:B4:47:96:CF:19:D7:B1:D8:99:2D:8B:42:9A:75:59:76
X509v3 Authority Key Identifier:
keyid:61:B7:20:2C:92:30:C2:89:45:0E:D5:A6:2B:17:36:9A:06:59:BC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbcgLJIwwolFDtWmKxc2mgZZvGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:78:2a:5f:3c:8d:c8:72:3b:5a:d1:c3:85:6b:43:8c:92:c0:
bc:3b:0d:cc:34:f2:74:a6:3e:42:7e:b3:20:fc:6f:ef:43:f4:
a0:b4:cb:83:1e:ff:8a:d6:50:6d:42:8e:44:04:9c:e7:79:91:
af:45:06:0c:11:e8:e1:88:61:b4:16:c8:6a:3c:83:b2:56:ed:
5e:fd:fd:dc:11:96:4b:86:74:d2:a0:10:db:24:07:ba:2e:a5:
e1:f2:76:6c:5f:26:52:f1:5d:43:4e:0c:cf:75:7b:c0:d0:8b:
8a:7d:33:7b:c6:ef:d6:e5:c5:ee:ad:be:87:50:e9:1f:ea:bf:
70:ab:7e:f3:67:a8:2c:76:30:e4:6b:00:46:e9:27:d8:17:ca:
7b:51:a2:ce:88:12:56:38:87:03:9e:f9:66:fe:c4:84:80:c2:
8c:b0:0a:25:eb:40:38:26:fa:30:e4:f3:d3:b7:a0:47:dc:07:
52:95:4d:38:ae:2f:47:54:82:b7:99:f9:de:c4:36:6f:eb:b7:
88:91:ef:3c:66:bd:09:ee:46:2f:6b:a8:de:4f:94:7a:94:24:
e1:58:d0:d6:e6:e6:50:e9:cb:44:07:d9:99:b9:cb:e1:7b:04:
32:05:05:7d:b8:fd:8a:df:ca:a9:f0:2c:ce:66:f5:13:50:06:
67:a9:d3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 16:20:22 2026 by rpki-client