Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
File: YbHjHAn-gm_k15Ln-ohV4K05NCo.mft (raw, json)
Hash identifier: tVeAUiAfkzMOCGQTvnB5t+Tf6YY19aL6NI+GwHgIa+s=
Subject key identifier: 71:20:B5:05:4D:35:0A:4D:24:97:D8:C5:B5:69:2A:24:CF:92:1B:6E
Authority key identifier: 61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
Certificate issuer: /CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Certificate serial: 01A08A8D7F4E32D141A4BF905292C3F84E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
Manifest number: 1A45
Signing time: Thu 10 Sep 2026 09:02:03 +0000
Manifest this update: Thu 10 Sep 2026 09:02:03 +0000
Manifest next update: Fri 11 Sep 2026 09:02:03 +0000
Files and hashes: 1: YbHjHAn-gm_k15Ln-ohV4K05NCo.crl (hash: HrjgCBqhgErHUVS/Nyxx7lRETLzmbU6pVzLFbWC0VR8=)
2: gI7wdVdEujvd9VLF4Y0d2YxxXVQ.roa (hash: /3JebFmLKobYKFETqDIlb43OxSa7E2ofJHi6zZ1wGnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:7f:4e:32:d1:41:a4:bf:90:52:92:c3:f8:4e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Validity
Not Before: Sep 10 09:02:03 2026 GMT
Not After : Sep 11 09:02:03 2026 GMT
Subject: CN=7120b5054d350a4d2497d8c5b5692a24cf921b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:d9:8f:85:85:7b:f0:37:66:dd:6d:21:d6:
83:64:0b:ea:bf:7c:e1:ec:8d:f0:3f:2b:f5:ee:9c:
84:42:1a:ef:a3:bb:f8:67:1c:19:4b:48:85:48:95:
a1:a8:ad:d8:38:e8:52:20:44:83:01:cb:34:7c:7d:
af:1e:49:c8:97:ba:be:12:ed:3d:90:dd:8a:2f:7b:
d5:33:46:34:32:8a:45:18:a8:90:1f:1a:c5:d9:21:
8e:a9:e8:52:1c:62:5e:bd:aa:49:2b:1d:1b:55:4d:
3c:77:f7:4e:f5:9a:69:0b:96:22:89:69:b3:34:0a:
3b:cc:63:31:a7:59:34:51:77:f7:86:dc:21:59:f2:
77:6e:3b:e0:0c:db:ea:c6:2c:6d:26:7f:a2:7f:21:
a4:c4:d0:05:63:eb:7e:c4:d8:d8:30:18:8b:35:f7:
d7:86:e4:b9:22:79:f1:7d:ea:5f:46:45:1e:a0:d5:
74:10:e6:22:df:68:60:e3:d3:6f:74:35:8b:16:b7:
24:5c:e8:9b:ce:7d:08:dd:7e:28:5f:ea:9a:2d:64:
3e:28:80:9e:5a:4a:8a:a6:a8:cb:88:f6:27:4f:8a:
e0:0f:e5:7f:1b:97:e4:b3:33:45:48:30:ba:b8:bd:
fa:90:05:d4:62:23:76:33:4a:ca:28:fb:76:2e:2a:
3c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:20:B5:05:4D:35:0A:4D:24:97:D8:C5:B5:69:2A:24:CF:92:1B:6E
X509v3 Authority Key Identifier:
keyid:61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:09:ae:f5:f5:58:ac:8a:24:e5:be:1c:43:21:65:07:57:8d:
9c:fa:28:58:14:e4:40:72:af:84:45:d4:95:64:fe:c3:84:5b:
8a:e3:0b:62:c7:b2:a0:c1:d9:22:ba:eb:53:8a:a2:26:e6:a1:
40:9e:22:04:14:1e:b5:d5:3d:fe:63:56:fd:56:a2:9a:0a:34:
bf:12:40:92:ad:85:f8:fd:bb:1b:ec:72:e4:41:6a:fc:9f:b7:
54:e3:81:e9:c8:ea:14:26:fc:0a:bc:27:e7:75:7c:94:40:ed:
be:99:60:f7:f5:af:47:6a:05:39:04:c2:da:c5:0b:a4:0d:0f:
62:01:b2:af:eb:54:f0:b3:2f:c9:92:ec:36:92:ad:52:fd:08:
c8:75:50:74:22:e6:b2:e4:0f:d3:23:23:09:af:9f:bd:a2:8e:
36:01:d7:c3:12:73:c9:ad:b4:9f:c1:69:36:45:f5:66:c1:57:
bb:65:1a:8e:8a:39:90:23:06:c7:1a:39:89:3c:4e:bb:07:59:
69:3e:18:ea:89:c2:4b:d5:07:d1:15:6e:22:01:89:c4:8e:f8:
23:e9:86:65:7f:69:6a:5b:39:04:9a:4c:a5:91:78:b8:68:96:
d7:f3:c6:da:74:5a:de:ca:2c:e4:7e:38:72:cf:ad:bf:94:eb:
77:cb:b3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:12:21 2026 by rpki-client