Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: 76/FN4JptLFPapkS/+rt32/3LVNCarbdJsp4mQJpjK8=
Subject key identifier: A5:F2:B0:DA:BC:DF:AB:3A:FC:E2:A2:B9:C2:86:A7:9F:3B:DE:3F:0D
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 019CE636AB918D1734B8B2ACADBAC29F77A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 1792
Signing time: Fri 13 Mar 2026 08:01:08 +0000
Manifest this update: Fri 13 Mar 2026 08:01:08 +0000
Manifest next update: Sat 14 Mar 2026 08:01:08 +0000
Files and hashes: 1: 6ptl5zZN6otvqTbmcxR9jeeyPTw.roa (hash: eOlv0gEoszbDU9BU/wQCemEUN+a4Reu5tk2gCPSosDY=)
2: U2pubs2iBylOl3mQStn1NV5HAeU.roa (hash: 3j+LrDTQ4DdD50DNjrhLgobkQoPmqtoqS9thhekJ5tY=)
3: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: AOMqasVWK91eFZYZX6r/nBhB5ZVGoopd2bSy2ORS/LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:ab:91:8d:17:34:b8:b2:ac:ad:ba:c2:9f:77:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Mar 13 08:01:08 2026 GMT
Not After : Mar 14 08:01:08 2026 GMT
Subject: CN=a5f2b0dabcdfab3afce2a2b9c286a79f3bde3f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:cf:85:f5:bf:75:80:37:0d:99:63:af:a9:
f8:d7:8a:57:1f:e3:7c:f7:46:43:7c:6a:2a:57:02:
bf:cb:d4:17:79:15:85:3b:16:d6:ce:d5:27:76:d9:
de:79:55:64:d1:77:55:b7:36:2a:48:27:78:ac:8a:
8a:4d:11:a6:1b:da:b8:70:5c:3a:1f:78:92:f4:f5:
fc:a2:12:e1:92:55:f7:6d:39:9f:7e:a5:da:ec:5a:
09:46:61:c6:57:56:23:65:e7:39:4f:ae:3b:7c:bc:
01:35:56:c6:7a:aa:cd:af:1c:d0:e6:6f:8f:4c:be:
32:1e:b7:29:3c:97:1b:8e:b6:69:6d:31:cb:e2:6e:
83:e6:15:53:e8:ec:e0:5c:96:82:28:04:1a:46:44:
00:ab:00:c4:de:8c:dd:0e:c0:48:89:0a:38:74:18:
0d:29:8e:73:c7:32:f3:2e:52:7e:95:4a:7b:81:82:
cc:1a:d5:7a:13:f9:a2:2a:01:db:09:c1:bc:d5:4b:
81:c5:ed:13:a1:43:e6:eb:10:21:4d:91:2b:37:0a:
11:0c:98:c7:a6:a1:6d:4c:1a:4e:74:83:87:50:fd:
e1:3e:8e:5e:19:3b:f5:fd:f5:6c:d0:b1:5f:f3:2d:
9d:22:8e:71:e3:2a:07:1f:de:50:5e:fe:54:f2:71:
2d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F2:B0:DA:BC:DF:AB:3A:FC:E2:A2:B9:C2:86:A7:9F:3B:DE:3F:0D
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:22:3a:ee:1c:e2:37:c5:16:f7:24:9e:fe:2e:f1:91:03:fa:
71:ff:43:bf:95:ba:10:a4:93:b1:6e:72:b6:85:55:2b:cb:69:
78:0c:9f:c0:7b:f5:57:11:5a:e8:19:71:c6:5c:f4:c7:77:2a:
24:ff:40:d5:b9:7b:18:24:59:92:e9:8d:9d:83:bc:c5:ca:8a:
6f:23:47:5c:9b:06:28:98:f9:6c:a8:77:3c:db:e5:e3:5e:f1:
b5:95:98:1a:7e:e5:57:e4:55:e0:13:9d:5b:3e:9e:3e:fc:48:
f5:f1:36:dd:f0:c5:18:5b:6c:c0:18:f1:a2:eb:88:80:6f:eb:
05:5f:01:bf:62:e9:ba:12:a3:f5:aa:cc:00:38:55:22:a3:0e:
8c:fe:79:c2:89:ec:69:84:7b:ad:a6:d3:1a:67:32:29:c7:50:
5f:b0:04:90:85:d6:24:e0:fb:8f:f7:f0:76:b5:a6:5e:eb:a3:
9f:be:49:86:17:f8:21:c0:65:f4:f4:a4:9d:43:cd:1f:19:10:
4f:77:42:29:9a:f4:60:f0:26:81:2d:5a:19:6a:f5:a1:9d:e7:
9d:a3:02:be:bb:92:1b:4d:9b:b3:b4:d9:29:ce:07:f6:73:cc:
3b:cb:15:ee:b8:c9:cb:7f:85:11:25:94:15:ec:00:7f:49:a5:
ef:2b:60:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:36:58 2026 by rpki-client