Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier: QvsQWcZuJBSqJBvzYOjnSR9SQ4cXxnrPQAEiJeiQQs0=
Subject key identifier: 38:97:08:02:B4:2B:99:FB:25:2A:53:E6:18:66:C4:51:2C:D4:47:A1
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 01A15A0B953ED0A0CA2F75C1455D07046A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number: 139E
Signing time: Tue 20 Oct 2026 16:01:10 +0000
Manifest this update: Tue 20 Oct 2026 16:01:10 +0000
Manifest next update: Wed 21 Oct 2026 16:01:10 +0000
Files and hashes: 1: GILkzrnW-WLXBiCMka03WJecbH4.roa (hash: V4r8aFoZHB6LWJUUFH9l/6/JEctMKZK9VcW+Qg7PzwI=)
2: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: wgACgSFUxlG2ovp9fkhi8RJe0AzPMyrPs7wKX00rZW0=)
3: yzyj6CtIhdLDtUGY2ToVGMdP9Gk.roa (hash: W/jGAjTWq86NyJWeIokb5Yic1QQn0pxHCXE2Q3AfgRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 16:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:0b:95:3e:d0:a0:ca:2f:75:c1:45:5d:07:04:6a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Oct 20 16:01:10 2026 GMT
Not After : Oct 21 16:01:10 2026 GMT
Subject: CN=38970802b42b99fb252a53e61866c4512cd447a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:69:ec:1f:85:d7:12:1a:b7:74:77:30:86:
84:fb:b0:6e:72:ef:21:80:b7:e2:5f:c8:59:e4:36:
af:02:84:bb:8d:c7:5b:0d:5e:85:ce:7f:e0:ce:03:
22:84:34:a1:82:c5:23:76:74:f2:ef:be:fd:95:ca:
af:38:0e:ad:9e:a5:6b:3c:68:41:00:08:2a:47:22:
38:a2:0e:f9:ea:58:f0:ac:62:97:3e:f8:03:b7:a8:
cd:8c:fd:d9:71:f9:c8:8d:d7:7a:ed:fb:40:43:23:
ac:d4:07:eb:03:31:9d:85:be:5c:34:54:00:a8:4e:
8c:62:17:6c:29:53:d6:d7:e8:28:50:9d:65:37:5b:
70:b2:2f:8f:ed:03:d6:31:d3:3c:d9:97:42:cd:35:
b9:be:40:98:a8:41:6e:e2:b1:26:51:d0:3e:9f:1c:
c1:9d:fe:93:4c:03:c0:3b:08:11:9b:cd:00:ff:c7:
26:cc:df:81:18:5f:1b:55:44:5e:a9:13:43:b4:d9:
f5:f5:ea:a3:44:b5:17:6e:11:3f:a0:a9:ed:f9:80:
83:d7:9e:31:ff:bc:b8:3f:4b:24:ff:31:f4:2a:30:
6b:a8:55:be:37:76:b2:d1:aa:db:a0:ff:52:5c:cb:
0a:8e:04:fd:02:b3:d2:9d:cb:05:02:8a:70:5b:35:
a6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:97:08:02:B4:2B:99:FB:25:2A:53:E6:18:66:C4:51:2C:D4:47:A1
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8a:cb:da:2b:d9:ec:52:8b:fc:fb:5c:08:99:69:57:f7:d0:
04:fa:05:61:17:60:b1:2c:2d:91:95:42:22:18:4d:87:fd:ca:
55:5d:c4:2f:6e:38:5b:17:a7:15:5a:07:1f:56:c0:21:c5:64:
a2:23:a9:48:4d:64:c4:51:3b:ec:85:8b:18:04:58:80:58:90:
f1:f3:18:5a:d8:31:93:87:50:ec:ec:d3:68:25:ab:0a:8e:3d:
f4:25:3f:ef:5a:b6:53:91:78:47:bc:ed:d6:48:48:61:2b:6d:
12:f7:0e:57:f7:b6:8e:a0:89:10:03:79:88:4d:69:e7:e5:5d:
65:8f:ef:c6:d5:4d:36:35:e6:e2:9f:b9:c4:a3:c4:3c:37:7f:
5d:17:3d:e4:c9:b3:8a:ed:f6:55:46:74:f6:e5:97:3e:09:b8:
f7:f7:14:0e:a6:11:8b:99:96:2d:5c:24:74:9f:88:f0:40:9e:
01:7b:9c:f2:1b:f1:c8:e7:fe:b7:94:62:57:59:88:a1:31:ed:
25:77:83:c7:87:ee:86:07:4e:b2:2e:b1:ce:b4:22:01:23:65:
56:76:16:42:37:4e:70:a5:db:1f:87:16:60:34:c3:bb:be:19:
de:57:fa:3b:8a:21:71:f8:87:19:77:2e:c8:87:f8:bc:55:fc:
9b:b6:4b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 02:27:16 2026 by rpki-client