Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: smJQCgwtEitFr6IQV8JjMcvirJn3mjNaLTiO5xMXxwU=
Subject key identifier: 0C:AC:D0:C9:8E:04:96:3B:56:A0:CD:DC:5D:EE:97:33:A2:D3:27:31
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 019EB98F1553206CB076616C0D3910034EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 1884
Signing time: Fri 12 Jun 2026 02:00:22 +0000
Manifest this update: Fri 12 Jun 2026 02:00:22 +0000
Manifest next update: Sat 13 Jun 2026 02:00:22 +0000
Files and hashes: 1: 6ptl5zZN6otvqTbmcxR9jeeyPTw.roa (hash: eOlv0gEoszbDU9BU/wQCemEUN+a4Reu5tk2gCPSosDY=)
2: U2pubs2iBylOl3mQStn1NV5HAeU.roa (hash: 3j+LrDTQ4DdD50DNjrhLgobkQoPmqtoqS9thhekJ5tY=)
3: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: ijJrrpfTR3/5PJc+bcIw61FC2FJW3I1ZZPPG6B07NCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:15:53:20:6c:b0:76:61:6c:0d:39:10:03:4e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Jun 12 02:00:22 2026 GMT
Not After : Jun 13 02:00:22 2026 GMT
Subject: CN=0cacd0c98e04963b56a0cddc5dee9733a2d32731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e6:f4:b8:68:85:6e:04:31:1c:fe:33:a8:f4:
04:fc:ba:90:18:24:db:16:81:74:34:74:93:fc:f9:
52:e0:79:11:48:0f:7c:bd:89:6e:b3:a0:cf:35:c2:
7f:25:d0:45:f3:91:ab:90:4b:7d:56:25:91:9f:c6:
db:cc:21:fe:24:cb:3d:1e:01:8a:5c:d0:6c:22:f7:
a6:f1:84:4b:ff:08:e1:d0:67:3a:27:cc:31:ff:50:
cd:f2:ff:82:33:86:97:d1:e6:27:d0:9d:3a:12:a0:
01:1e:6e:cb:cd:9c:0b:e0:af:49:4f:7f:51:08:f7:
11:0f:03:50:13:33:44:22:d2:b1:7b:41:59:fe:53:
7f:d6:21:5b:37:2c:71:53:43:44:59:cf:43:94:d1:
8c:aa:7b:a6:ba:c4:d2:c0:ec:31:6f:bb:33:a1:cd:
af:57:c0:60:10:08:00:87:52:91:32:bb:39:16:6e:
b0:79:41:c8:70:08:cd:ea:10:df:04:e2:82:33:2a:
cf:d9:3e:d9:c4:c7:75:2f:f9:a3:67:76:db:4c:74:
7a:f9:59:2b:c4:f0:db:77:c1:2b:3d:f6:20:81:a3:
16:dd:db:a5:27:7c:21:88:6c:7d:b8:77:3f:a8:25:
b7:96:4e:65:a6:c5:c5:8d:13:80:6c:3b:14:91:66:
0e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AC:D0:C9:8E:04:96:3B:56:A0:CD:DC:5D:EE:97:33:A2:D3:27:31
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d4:6c:d9:d1:6f:46:76:c4:bd:6e:d6:18:67:bf:90:0a:16:
eb:e6:18:c2:80:13:03:f6:cf:e3:a8:e7:33:85:bd:54:41:31:
39:cc:00:fd:d7:1b:3b:0a:2c:8b:f5:2a:2a:b3:14:c6:8d:18:
63:b0:5b:8f:90:c7:31:ea:f7:2a:0d:8c:ec:76:89:8b:2a:bc:
81:aa:39:b3:22:00:45:3b:19:70:32:77:bc:37:58:5e:73:51:
aa:94:51:f4:61:d9:d3:dc:94:56:9a:dc:b7:0d:6f:6b:29:49:
b2:40:ad:a8:1d:46:7a:81:1e:dc:7e:01:94:04:08:1d:5d:b6:
62:cf:e1:3b:43:99:4a:8e:b0:56:e6:6c:c6:7a:85:5c:ea:5c:
ba:c0:78:ae:eb:81:64:15:8b:88:17:99:01:3a:04:a9:2f:cc:
fa:e0:f7:89:55:97:1d:54:89:2a:80:0c:f5:b3:16:4c:1a:9d:
0d:47:fc:71:39:bf:17:03:bb:ab:1f:5f:85:de:51:88:4d:e1:
a4:e4:46:fd:0b:06:89:84:25:8d:24:87:72:a5:4c:c4:66:5d:
80:3e:f9:5d:38:d5:1e:6d:e4:2b:e3:d7:05:07:ba:5d:5d:d3:
e2:7c:34:7d:83:96:6c:79:98:df:f8:a7:2b:99:69:52:e8:c2:
7d:fd:b9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:59:40 2026 by rpki-client