Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: nWm2Og8YwzBiZeDwnSsza1NhTfkemic8OOmMznJlp7Y=
Subject key identifier: 3F:A0:EB:A5:B5:14:4B:16:A8:78:92:E0:55:35:DD:B7:8D:54:6D:00
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 01A17C5FD386E043EA7BF2515F70316CD4C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 19F2
Signing time: Tue 27 Oct 2026 08:00:17 +0000
Manifest this update: Tue 27 Oct 2026 08:00:17 +0000
Manifest next update: Wed 28 Oct 2026 08:00:17 +0000
Files and hashes: 1: 6ptl5zZN6otvqTbmcxR9jeeyPTw.roa (hash: eOlv0gEoszbDU9BU/wQCemEUN+a4Reu5tk2gCPSosDY=)
2: U2pubs2iBylOl3mQStn1NV5HAeU.roa (hash: 3j+LrDTQ4DdD50DNjrhLgobkQoPmqtoqS9thhekJ5tY=)
3: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: UJUZUU6tOhFcILx35CkmqgY6BlsZtZEQHEZmkrZssd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:5f:d3:86:e0:43:ea:7b:f2:51:5f:70:31:6c:d4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Oct 27 08:00:17 2026 GMT
Not After : Oct 28 08:00:17 2026 GMT
Subject: CN=3fa0eba5b5144b16a87892e05535ddb78d546d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:27:34:cf:8a:fd:e5:46:1a:79:05:45:8b:0f:
5f:24:e5:c3:5d:79:2e:9b:b5:fd:91:ef:0a:1f:64:
81:fa:2c:b8:71:7b:9d:12:16:09:bf:92:36:e6:2d:
bf:22:96:36:ce:7a:33:a7:15:70:12:e1:9f:3d:a6:
f7:b4:f4:08:5b:05:41:24:64:11:32:1e:a7:d0:ef:
a2:f1:20:b0:61:b7:d9:50:c3:5c:69:8c:03:9e:6d:
52:c8:0a:aa:89:d6:4c:55:18:83:44:0c:e0:72:d6:
94:f9:bc:38:58:ef:2e:a7:ba:81:6e:71:29:9a:2e:
6b:96:8c:06:fc:be:8e:03:f5:9f:e8:68:4e:1d:53:
fc:9d:f4:0e:fa:04:d5:33:c5:32:55:fa:2d:84:48:
94:fa:43:c3:5f:87:2e:8b:72:6e:6c:4e:9f:06:c7:
e5:cf:40:9e:dc:d5:cb:95:4b:e7:fc:a5:00:12:14:
5a:12:b8:16:c9:06:80:50:b9:95:e8:5c:91:43:8e:
87:ad:4d:cd:59:f1:14:a7:19:22:b0:fc:2d:22:55:
bd:77:47:7a:8c:1b:a6:26:10:35:35:7e:9c:6b:77:
37:83:03:03:d4:51:00:67:d2:83:e3:de:19:49:e5:
41:56:ac:a9:a3:09:71:97:26:a8:df:43:e9:10:d1:
ba:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A0:EB:A5:B5:14:4B:16:A8:78:92:E0:55:35:DD:B7:8D:54:6D:00
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:00:b1:70:51:43:1a:9f:aa:99:0e:3d:bf:f3:79:f3:f5:42:
3e:70:74:47:c1:44:38:7a:1a:c7:a0:cc:37:00:03:cd:be:43:
e8:bf:97:7a:06:a6:12:ba:53:76:b8:25:0c:e3:59:5e:d6:94:
74:20:a1:b8:74:9c:03:2c:68:7d:63:49:e4:b2:2e:02:21:e8:
46:de:f6:53:ee:44:fe:59:f4:d9:47:09:34:d2:78:32:2e:92:
0a:3a:74:ce:62:d2:38:6d:27:02:6a:2b:13:2e:7d:d3:36:f9:
e2:95:04:e1:e0:1d:9b:b0:e7:6a:83:cf:bb:bf:90:c1:f2:be:
35:b1:63:cc:49:c1:5c:c2:1f:17:32:d5:52:2b:6b:56:ef:3b:
cd:f1:d2:0f:11:7e:c5:82:38:ed:64:85:ec:e2:bb:8e:3c:9c:
52:8b:d1:f1:b6:1f:3b:51:b8:64:13:73:85:d4:cb:67:0e:d5:
14:49:ae:39:0a:93:ec:e4:3d:02:f3:22:61:85:02:21:30:47:
07:34:04:5d:a9:08:6e:b0:e6:70:2b:e9:ce:ae:9d:07:d0:b8:
30:98:10:6d:46:69:1b:38:59:89:b1:40:4a:f5:a5:56:8f:11:
5b:f5:cb:b8:dd:f2:6c:5c:d9:9a:87:95:47:a7:7e:1d:d3:cb:
e2:e8:61:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:29:00 2026 by rpki-client