Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
File: YdrAqoYffXLG8l1lbwMdoWftqVU.mft (raw, json)
Hash identifier: lk+S8nQfTtQjZbklGncj5EKOnjY5+k0BP1Zna14Z5Lo=
Subject key identifier: 16:A1:7D:1B:A4:EF:E4:68:FD:E1:A2:CB:5A:FF:03:56:D5:3C:8C:E4
Authority key identifier: 61:DA:C0:AA:86:1F:7D:72:C6:F2:5D:65:6F:03:1D:A1:67:ED:A9:55
Certificate issuer: /CN=61dac0aa861f7d72c6f25d656f031da167eda955
Certificate serial: 019FF9ECC96CC17D968949798B62F8DFE2A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdrAqoYffXLG8l1lbwMdoWftqVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
Manifest number: F1
Signing time: Thu 13 Aug 2026 07:01:12 +0000
Manifest this update: Thu 13 Aug 2026 07:01:12 +0000
Manifest next update: Fri 14 Aug 2026 07:01:12 +0000
Files and hashes: 1: FlOjCt4LJfQ8IqN1peCaBvqAB2Q.roa (hash: RDwp0/0oDMXql1jT9ebav+hZj67VDM98AjOHB7oE64Y=)
2: YdrAqoYffXLG8l1lbwMdoWftqVU.crl (hash: IadS65a1dxgFy1nXOOp8xrWHe/FeZndojYz6Qvl3qMQ=)
3: dhtCDXQLsqqlrkZYhsNQj7BUfwE.asa (hash: EzJqcTfM145uC1wp3s4ktIqJ62O99szOvIfXe4xA3So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdrAqoYffXLG8l1lbwMdoWftqVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:ec:c9:6c:c1:7d:96:89:49:79:8b:62:f8:df:e2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61dac0aa861f7d72c6f25d656f031da167eda955
Validity
Not Before: Aug 13 07:01:12 2026 GMT
Not After : Aug 14 07:01:12 2026 GMT
Subject: CN=16a17d1ba4efe468fde1a2cb5aff0356d53c8ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:7e:b2:46:be:27:f4:f2:27:cb:34:bf:b4:
48:9e:39:8b:7b:de:a8:cf:db:8d:9d:9b:37:f1:0d:
7c:d2:04:cf:26:b1:14:b4:1c:93:2a:b7:39:91:72:
25:00:44:03:35:bb:13:09:68:79:e4:05:73:1a:35:
b3:0a:da:ba:03:25:0d:11:21:56:31:9a:bb:1f:44:
1b:1a:2e:b7:24:ea:25:0e:9d:7b:0e:44:13:a1:ec:
4f:74:71:47:bc:a1:6f:a3:ca:42:e0:9d:6a:8e:39:
71:be:97:96:2a:dc:05:02:75:4a:1a:6a:fe:fe:f7:
b1:98:56:d1:04:c2:1f:d5:53:8b:0b:a9:de:64:fc:
87:ac:3e:6d:14:44:35:06:45:48:e1:1f:22:53:fe:
e7:bc:c1:7a:4e:59:eb:69:1b:84:a0:2c:28:3c:24:
fe:56:80:4a:41:1e:1a:f8:d4:6f:ea:3a:39:c9:ca:
58:6e:a5:c7:8f:db:57:34:c5:4b:fd:b3:52:4e:6e:
ad:27:74:17:e8:90:45:2b:cd:f7:7e:79:9d:c9:3c:
ef:16:4b:ec:f3:2f:f1:2d:e7:37:d1:98:6f:94:bb:
1c:5c:28:21:cb:39:40:25:f6:4d:0c:47:c2:71:89:
ba:40:d9:fe:29:a2:2c:88:a7:80:95:c2:c2:5c:5e:
9b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A1:7D:1B:A4:EF:E4:68:FD:E1:A2:CB:5A:FF:03:56:D5:3C:8C:E4
X509v3 Authority Key Identifier:
keyid:61:DA:C0:AA:86:1F:7D:72:C6:F2:5D:65:6F:03:1D:A1:67:ED:A9:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdrAqoYffXLG8l1lbwMdoWftqVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7b:17:b3:52:ff:1b:47:1c:25:ad:94:69:2d:db:2e:f9:04:
41:a5:75:ca:83:f9:5f:14:78:c5:85:c4:84:72:0c:cb:99:67:
92:ea:ad:a2:74:45:61:1e:7e:a2:97:ac:3a:11:e0:7e:fb:2e:
05:a3:a3:79:0a:49:c3:12:b2:63:f5:7f:73:8a:57:5d:8a:31:
16:e4:3d:7a:01:40:ca:ef:29:5d:cf:d8:8c:59:8a:fb:32:a6:
37:6a:81:3d:88:a2:3b:37:fe:5c:09:65:d2:e3:fa:90:31:fd:
d5:58:3e:a0:51:a6:0b:92:86:f4:29:66:90:9b:15:14:c7:81:
70:95:40:0e:19:71:26:36:97:6a:ad:02:29:27:03:4e:5c:b6:
c1:88:77:68:a9:30:6d:f4:b7:16:85:63:f0:eb:68:0c:ad:eb:
8c:6c:d0:a9:25:b6:42:91:31:4c:b0:a8:63:57:c0:53:85:b0:
d5:3b:c2:88:51:16:c9:e0:36:97:a5:2d:1a:1e:ea:de:c6:51:
a2:66:06:dc:83:65:ec:b6:e0:29:1a:67:b1:68:e7:e4:91:73:
07:0e:a9:8c:e1:44:f3:9f:ed:36:5c:30:2a:c2:80:4a:fa:74:
b2:4b:5e:50:df:4f:00:9e:68:f6:b2:1b:21:ec:b4:50:d2:61:
0e:c0:79:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:02:13 2026 by rpki-client