Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
File: YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft (raw, json)
Hash identifier: r7fqcwH0vR12CC53nO2aKxtrCNvj4c52Nlub50fhzlU=
Subject key identifier: 14:A5:AA:B0:B6:74:D2:6C:18:B3:9C:28:DA:C2:41:4A:D0:00:AA:4A
Authority key identifier: 61:F8:0D:83:D9:48:E2:48:B9:68:60:66:76:60:7B:84:70:E2:E4:1C
Certificate issuer: /CN=61f80d83d948e248b968606676607b8470e2e41c
Certificate serial: 01A150D1D2EA282AE4400DD39129F756F513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
Manifest number: 0146
Signing time: Sun 18 Oct 2026 21:01:30 +0000
Manifest this update: Sun 18 Oct 2026 21:01:30 +0000
Manifest next update: Mon 19 Oct 2026 21:01:30 +0000
Files and hashes: 1: 1-LvrevNxn8xjvxwWO9shI6PuFvU.roa (hash: iqWesMjsdrjmX1g6QE9vIbNV9BRrg4iuwDL5XHq0ynQ=)
2: YfgNg9lI4ki5aGBmdmB7hHDi5Bw.crl (hash: UK7Pu14JuvsS7zdDCwPAhGAPztL7sXpEpqbswdSlY2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 21:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:d1:d2:ea:28:2a:e4:40:0d:d3:91:29:f7:56:f5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f80d83d948e248b968606676607b8470e2e41c
Validity
Not Before: Oct 18 21:01:30 2026 GMT
Not After : Oct 19 21:01:30 2026 GMT
Subject: CN=14a5aab0b674d26c18b39c28dac2414ad000aa4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:4e:b2:d5:ed:01:c7:b0:ac:de:03:da:1e:
b1:9d:14:2b:0a:83:4b:17:44:6a:88:b4:77:f2:0f:
5e:ae:19:97:b7:59:30:c6:c0:5c:e5:79:3a:ab:aa:
16:95:94:d0:d7:24:57:ca:ab:ce:b9:36:9b:84:ff:
4e:ad:2d:3d:41:a9:3c:35:df:c5:85:4f:46:29:26:
47:69:2c:ec:3e:e9:fe:03:6d:0d:ce:82:b2:21:ad:
3a:f4:ac:60:81:e7:cc:94:1c:d4:a2:7c:be:67:cb:
95:2d:fe:22:8b:9a:58:d4:f2:a0:07:08:1a:b3:e8:
62:df:cc:30:32:ee:ed:ca:96:8b:dc:29:01:7b:07:
83:19:50:cd:45:e3:49:f6:59:1a:f8:f8:57:77:be:
96:5a:95:b5:d2:89:37:ed:66:ee:93:8c:cc:b9:2c:
c0:45:d0:cf:da:bd:1b:67:ee:a0:43:2a:c6:1d:a1:
94:b4:b9:8b:a4:2e:10:a9:fc:8e:80:e2:1b:fc:57:
2c:e6:fb:b0:cc:7c:e0:ba:04:6f:92:24:ca:a0:d1:
07:50:b8:8d:11:79:9c:1f:ca:33:1a:1a:ef:6e:dc:
20:03:c3:f7:92:2b:45:97:47:75:a9:48:7b:28:8d:
47:4b:78:e3:b3:65:3c:d4:c3:bd:be:a4:07:8c:6d:
70:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A5:AA:B0:B6:74:D2:6C:18:B3:9C:28:DA:C2:41:4A:D0:00:AA:4A
X509v3 Authority Key Identifier:
keyid:61:F8:0D:83:D9:48:E2:48:B9:68:60:66:76:60:7B:84:70:E2:E4:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:92:a1:82:d7:8b:b5:93:fa:d1:37:24:c1:87:c9:c6:71:24:
19:0a:25:60:2e:f4:8f:e6:ef:6b:26:33:03:f5:b0:02:06:88:
65:da:81:a4:c2:fe:21:d7:c6:78:b4:b6:db:1b:c3:a1:1d:56:
0f:ba:24:c3:ba:93:7d:c4:83:4a:0e:26:6a:93:77:9f:0a:18:
98:f8:2e:ea:87:dd:1e:db:e0:16:14:1f:92:d0:5e:00:49:02:
3c:82:4b:e3:ae:02:9f:7a:11:29:bc:21:56:be:6a:8f:2e:eb:
00:d4:78:51:1b:66:5d:c6:01:65:98:df:2f:30:43:3d:e8:f2:
61:27:36:e9:4a:3c:42:0f:ce:ba:cd:fd:99:8d:f2:57:19:8b:
f3:3f:eb:64:8e:de:b4:34:d1:e8:52:c3:24:ef:d3:04:01:a8:
22:e1:8f:24:3d:2b:96:43:6c:e0:b3:21:b4:f9:0d:bc:1a:4e:
5c:d0:ae:c1:ff:20:bc:1b:a6:05:e2:76:03:24:40:1a:e4:50:
2f:e3:74:da:fe:43:72:2b:82:9e:52:8e:53:cb:09:13:23:77:
b7:a9:89:55:a6:96:ce:47:42:ff:ef:34:81:53:3d:6f:a5:5f:
f1:8e:95:ad:de:77:6d:66:7e:68:d3:ef:32:a0:bc:6c:ba:68:
c1:70:70:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:07:25 2026 by rpki-client