Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: JCLhuexc8K5zaHFdsjFMloLV0bbl1Dm4+uO87FNfPN8=
Subject key identifier: D6:98:89:E9:75:A7:7C:E8:DB:A5:79:11:40:DA:A0:3A:63:C1:A7:61
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 01A08AFA6944DBC57F14065B9A9C50C724C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 1975
Signing time: Thu 10 Sep 2026 11:01:01 +0000
Manifest this update: Thu 10 Sep 2026 11:01:01 +0000
Manifest next update: Fri 11 Sep 2026 11:01:01 +0000
Files and hashes: 1: 6ptl5zZN6otvqTbmcxR9jeeyPTw.roa (hash: eOlv0gEoszbDU9BU/wQCemEUN+a4Reu5tk2gCPSosDY=)
2: U2pubs2iBylOl3mQStn1NV5HAeU.roa (hash: 3j+LrDTQ4DdD50DNjrhLgobkQoPmqtoqS9thhekJ5tY=)
3: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: KUMMQi7JvME6Pz4Ir1NL+COlpd3B25ys0ryqFnBDSM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:69:44:db:c5:7f:14:06:5b:9a:9c:50:c7:24:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Sep 10 11:01:01 2026 GMT
Not After : Sep 11 11:01:01 2026 GMT
Subject: CN=d69889e975a77ce8dba5791140daa03a63c1a761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ce:ef:69:bc:ff:01:86:ba:3b:50:4b:fe:02:
8f:ed:a5:2a:29:81:12:20:07:1d:04:26:d8:64:94:
22:0b:e9:53:0e:30:22:ee:f2:bc:22:0a:38:e3:f9:
77:63:55:02:47:48:dd:e6:ad:58:bc:92:ea:a1:c2:
d3:c9:fb:80:92:52:f9:64:be:ed:e1:6a:3a:37:7f:
2d:c7:d4:96:64:42:b9:02:03:ca:5a:f8:52:c3:af:
25:7d:df:51:fb:13:67:15:ad:78:44:38:fe:5c:d7:
3e:d3:0e:bf:5d:4f:c7:48:d1:54:e2:e3:24:e5:94:
63:e6:3e:75:f6:89:2f:7c:44:f1:82:39:c4:ab:fd:
78:59:95:50:e8:70:4a:20:7e:95:82:7a:4f:c4:1b:
8e:7e:f1:fc:af:30:6a:30:dd:f9:96:77:27:91:0e:
e2:e6:20:d7:47:65:5d:82:04:a1:31:e6:a2:bb:e2:
38:93:3c:47:a2:ae:f3:78:f7:51:03:61:5a:d4:45:
18:18:1f:ca:7a:bc:b0:b3:c5:bb:c9:b8:8f:bb:2e:
c9:3c:e2:47:7e:20:5b:ed:17:45:3d:fd:8c:29:5a:
c5:22:58:56:5b:0e:f7:a3:37:6a:e3:10:63:7c:b1:
3c:6c:0b:55:8b:f4:ac:b4:7f:bd:fb:57:5a:41:e9:
3d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:98:89:E9:75:A7:7C:E8:DB:A5:79:11:40:DA:A0:3A:63:C1:A7:61
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e3:68:77:db:19:8b:3c:82:e0:43:59:3b:df:68:2e:09:dd:
db:8d:0f:31:1a:57:ea:cc:9d:74:a8:e9:05:af:09:55:16:f3:
20:f1:9b:fe:f1:2e:4c:c4:f3:e4:fd:92:a6:ce:d0:3a:bb:f5:
93:84:ed:10:b3:ca:29:1d:52:89:3c:ab:c7:dd:45:07:14:05:
b8:1c:c3:6c:a9:e7:35:05:e9:db:e6:41:76:9b:1c:d3:7c:f4:
2b:6b:28:2b:93:a4:7b:46:f1:a5:f8:76:63:1c:99:aa:40:74:
e1:0e:55:d5:ce:1a:f7:3f:da:2d:78:0d:db:2c:2e:00:23:16:
86:90:07:6b:93:42:4d:7b:65:43:1b:fb:b3:38:f0:0d:a0:32:
d4:50:81:65:2e:15:6b:99:45:9b:a4:99:e8:fe:2e:61:32:4f:
b2:b0:02:71:3f:bf:6e:c5:2a:4a:10:d5:8e:8e:54:af:35:25:
34:5d:2c:f4:ed:95:55:a0:5c:d5:78:f4:d7:5c:0e:26:f6:56:
d7:1e:4a:c9:49:0a:15:41:01:c1:8d:9d:b6:a5:7c:62:9b:0b:
e9:46:91:e3:3a:7e:28:29:14:86:02:12:3f:78:23:38:d1:f6:
58:c4:07:14:05:60:3f:e1:83:56:fc:c0:21:83:8b:00:81:5f:
3b:3c:4e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:03 2026 by rpki-client