Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
File: YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft (raw, json)
Hash identifier: zcS+e2ka8DVpfc2tKWgWOOQSN7khBDNMA1asQwNanoM=
Subject key identifier: 66:87:1A:9C:BF:10:E4:00:80:8C:7B:7B:51:4D:02:BB:6E:9E:F4:05
Authority key identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
Certificate issuer: /CN=6149cbba3e6629beaebfb69668678ada51744898
Certificate serial: 01A181BD7DFD8FF68A9D067BF4E9822F8405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
Manifest number: 17F0
Signing time: Wed 28 Oct 2026 09:00:41 +0000
Manifest this update: Wed 28 Oct 2026 09:00:41 +0000
Manifest next update: Thu 29 Oct 2026 09:00:41 +0000
Files and hashes: 1: YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl (hash: a4iGSSrvs5Y+4JtG4VXpV+Lsqv+5fms/k58PXke+kcY=)
2: v872mIxxwSGV2ha6Yd9jq9CMUao.roa (hash: 1G9sBjvfPqj7U0dttH4sUsWBNP9ecKYoKzenyr22mAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:7d:fd:8f:f6:8a:9d:06:7b:f4:e9:82:2f:84:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6149cbba3e6629beaebfb69668678ada51744898
Validity
Not Before: Oct 28 09:00:41 2026 GMT
Not After : Oct 29 09:00:41 2026 GMT
Subject: CN=66871a9cbf10e400808c7b7b514d02bb6e9ef405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:0e:66:ea:83:82:0f:c3:7a:8a:3c:1c:df:
e2:93:68:af:73:32:b9:7d:d9:55:55:9f:39:1f:89:
bb:f6:39:3f:17:81:04:81:47:b5:b2:ee:c5:6d:69:
67:a7:84:48:4e:16:ba:f7:63:a0:50:64:a2:6f:69:
7c:42:d2:17:7a:f2:1c:a8:fd:bf:25:5a:95:27:87:
1c:0a:c5:f3:17:72:cf:c5:ef:93:6b:ee:01:d6:f9:
e3:7f:a6:95:05:97:d3:11:38:31:ad:28:cb:57:1d:
a9:56:4f:8b:b1:d5:0c:02:19:d6:a3:78:60:ed:c0:
ca:ed:84:b3:b6:d0:0e:07:92:cd:0b:5b:13:b4:d9:
4a:94:2d:77:1c:64:d5:82:fb:f4:1b:a8:ff:e5:8e:
df:f9:48:d9:47:ee:cf:ac:b2:e0:6c:a3:46:42:64:
48:6f:02:54:b5:43:09:3a:18:96:e5:3d:db:c3:04:
b7:32:c1:cc:b9:d1:5f:57:49:b9:8d:80:be:26:59:
3d:df:72:43:fa:a1:f0:b6:06:74:c3:3e:3d:78:34:
2a:98:0b:60:c0:8d:6d:ae:dd:7f:80:47:f8:7e:f2:
f9:30:f4:28:af:94:fa:e3:cf:a4:67:8a:04:93:07:
4c:cd:18:5c:60:a6:c3:0b:fa:af:e7:a7:af:31:a6:
20:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:87:1A:9C:BF:10:E4:00:80:8C:7B:7B:51:4D:02:BB:6E:9E:F4:05
X509v3 Authority Key Identifier:
keyid:61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:75:ab:7a:a6:51:56:96:bf:e6:79:ea:ea:ea:85:43:93:68:
e2:b2:f0:30:4c:54:d9:0a:a4:63:99:53:be:76:c9:92:a0:4a:
99:06:12:e6:7e:05:0f:7a:4e:7f:ab:27:98:00:cb:16:9a:e8:
2b:61:d0:66:e2:81:bb:03:d8:11:0f:63:31:42:0d:18:22:4c:
7b:51:c8:8c:0b:f6:84:a1:f7:c0:db:9c:84:fd:e0:09:49:f9:
a6:78:cd:c5:15:93:ad:df:2e:1f:34:33:3e:e1:fa:c0:21:4d:
e0:63:4c:db:cd:28:51:b7:8b:20:23:9a:f3:2f:56:5d:96:d5:
40:1a:b6:3e:39:6d:5a:7e:05:d0:47:c9:1f:10:65:90:c7:9c:
23:8e:7a:07:25:f3:00:4a:2b:4a:62:ea:11:2d:26:0e:d0:d6:
db:1b:d1:3c:36:71:fd:95:39:02:18:6b:b6:ac:e0:8b:36:f5:
f5:e4:9f:a1:4a:1e:81:ce:d1:e4:ae:93:75:6f:88:af:2a:f6:
82:49:66:c1:35:ad:fe:14:e3:bc:03:1d:bc:63:98:cc:3f:5b:
48:68:6e:96:ee:6d:aa:e8:1a:a2:e4:1e:8b:90:52:78:6e:ab:
65:00:e2:ec:4c:6e:b6:8c:8d:73:d0:76:ee:30:af:6d:1f:4c:
25:c1:f1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:29:50 2026 by rpki-client