Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: 1YfWrjlkDPWH2CQfL7F5LZd+Omt4M/S9h0dg6mendF4=
Subject key identifier: 14:A6:D7:75:37:3B:49:A6:F2:2A:84:C7:5E:3C:D7:2C:F3:13:4C:65
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 019DCFE37647BB2FBCED1969A36F77865EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 180B
Signing time: Mon 27 Apr 2026 17:01:23 +0000
Manifest this update: Mon 27 Apr 2026 17:01:23 +0000
Manifest next update: Tue 28 Apr 2026 17:01:23 +0000
Files and hashes: 1: 6ptl5zZN6otvqTbmcxR9jeeyPTw.roa (hash: eOlv0gEoszbDU9BU/wQCemEUN+a4Reu5tk2gCPSosDY=)
2: U2pubs2iBylOl3mQStn1NV5HAeU.roa (hash: 3j+LrDTQ4DdD50DNjrhLgobkQoPmqtoqS9thhekJ5tY=)
3: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: FS34XeXal22ARhztPWuAsekbhJAx4vNAzh9cOWxXAMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:76:47:bb:2f:bc:ed:19:69:a3:6f:77:86:5e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Apr 27 17:01:23 2026 GMT
Not After : Apr 28 17:01:23 2026 GMT
Subject: CN=14a6d775373b49a6f22a84c75e3cd72cf3134c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:96:14:09:93:5e:39:ad:45:65:c6:a0:58:99:
ca:63:54:67:71:9c:ad:66:35:04:5a:be:72:76:b3:
04:2d:6f:63:c1:07:5c:55:ab:51:61:05:6d:80:3f:
30:01:18:33:05:94:6b:85:7c:48:5b:c1:4b:66:56:
62:0c:a5:2d:07:c6:85:9d:f0:ae:02:d1:34:52:8b:
a8:cd:c7:4b:6d:fd:63:99:b7:c2:01:bb:4f:56:4f:
0e:03:cd:fe:1d:8a:7e:eb:37:87:13:a7:3b:5c:27:
5a:15:f6:98:fe:95:ea:ee:ce:47:c5:b2:b2:0b:76:
86:8a:c5:07:ec:96:61:fb:b5:71:a0:48:83:e9:d8:
85:f3:90:c6:bd:91:c8:2e:b9:12:51:e6:80:b6:87:
40:aa:93:80:f8:8d:3d:66:65:82:fc:42:5f:5e:7c:
df:bd:e1:b9:b8:40:04:4f:bb:c2:31:97:43:7e:05:
0f:66:dd:98:99:27:f6:28:46:da:32:57:a4:e0:49:
67:59:a1:85:2d:ec:75:ca:0d:2e:51:9a:6a:91:02:
44:af:9b:f3:cf:d1:30:b0:eb:20:c8:cb:0c:2d:b1:
2b:f0:92:ac:3a:05:f2:fd:a2:3f:f6:ec:5e:29:89:
bf:56:05:ac:da:29:34:5f:0d:03:09:50:b8:7d:cf:
e8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A6:D7:75:37:3B:49:A6:F2:2A:84:C7:5E:3C:D7:2C:F3:13:4C:65
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:20:13:bb:0c:4e:0a:e4:be:61:43:a5:8c:c3:ac:9f:b9:b5:
1e:1c:fc:0d:d9:42:a4:2b:86:b1:d8:c7:c7:98:a2:81:be:bb:
90:61:be:8b:cc:ac:81:92:18:8d:1b:05:15:8e:4d:0b:49:d4:
ff:9d:0f:dc:ce:83:a1:a6:47:c3:07:a1:f7:7b:22:2f:a6:8e:
5b:8e:ed:6e:b7:52:4b:7c:be:0c:d2:50:f7:5b:32:68:54:15:
8f:ce:0d:55:d8:de:a6:54:5a:f8:a1:2c:26:10:e1:19:dd:6c:
a4:93:e1:ac:c2:48:76:40:50:17:23:f8:20:15:61:08:3c:74:
26:03:c2:93:ff:57:92:51:c8:86:14:a6:b6:40:97:44:af:b5:
40:80:15:1b:3e:40:4a:8f:3a:08:91:78:0a:a9:39:0e:21:56:
eb:5e:be:26:49:a7:eb:47:fd:88:aa:3a:67:90:6f:48:2a:07:
26:07:2f:a8:2c:75:0b:f3:06:56:85:2c:f7:f8:a7:9d:da:98:
82:81:7c:93:d3:20:bf:6c:6e:2d:e5:85:cd:39:cf:78:04:9e:
1f:65:a8:ab:a7:b6:0d:4e:71:12:05:16:44:0d:e0:9a:bb:95:
49:80:5b:92:a0:05:4f:eb:c7:a5:70:ab:db:75:2c:f1:d7:c6:
a9:c7:08:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3P43ZHuy+87Rlpo293hl6jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYTE0NTUzY2FjZjEwMzI3NGQ0MzNlNmIyNjgwNjZlMDE1
NDFiMjUwHhcNMjYwNDI3MTcwMTIzWhcNMjYwNDI4MTcwMTIzWjAzMTEwLwYDVQQD
EygxNGE2ZDc3NTM3M2I0OWE2ZjIyYTg0Yzc1ZTNjZDcyY2YzMTM0YzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZYUCZNeOa1FZcagWJnKY1RncZyt
ZjUEWr5ydrMELW9jwQdcVatRYQVtgD8wARgzBZRrhXxIW8FLZlZiDKUtB8aFnfCu
AtE0UouozcdLbf1jmbfCAbtPVk8OA83+HYp+6zeHE6c7XCdaFfaY/pXq7s5HxbKy
C3aGisUH7JZh+7VxoEiD6diF85DGvZHILrkSUeaAtodAqpOA+I09ZmWC/EJfXnzf
veG5uEAET7vCMZdDfgUPZt2YmSf2KEbaMlek4ElnWaGFLex1yg0uUZpqkQJEr5vz
z9EwsOsgyMsMLbEr8JKsOgXy/aI/9uxeKYm/VgWs2ik0Xw0DCVC4fc/o6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSm13U3O0mm8iqEx1481yzzE0xlMB8GA1UdIwQY
MBaAFGGhRVPKzxAydNQz5rJoBm4BVBslMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAt
ZmEyNjZiYjcyZjczLzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAtZmEyNjZiYjcyZjcz
LzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyATuwxO
CuS+YUOljMOsn7m1Hhz8DdlCpCuGsdjHx5iigb67kGG+i8ysgZIYjRsFFY5NC0nU
/50P3M6DoaZHwweh93siL6aOW47tbrdSS3y+DNJQ91syaFQVj84NVdjeplRa+KEs
JhDhGd1spJPhrMJIdkBQFyP4IBVhCDx0JgPCk/9XklHIhhSmtkCXRK+1QIAVGz5A
So86CJF4Cqk5DiFW616+Jkmn60f9iKo6Z5BvSCoHJgcvqCx1C/MGVoUs9/inndqY
goF8k9Mgv2xuLeWFzTnPeASeH2Woq6e2DU5xEgUWRA3gmruVSYBbkqAFT+vHpXCr
23Us8dfGqccI+Q==
-----END CERTIFICATE-----
Generated at Mon Apr 27 21:02:23 2026 by rpki-client