Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: i3059MTXwamjFgTggbVP4U2d1SUEoiBwHL5iMvA34OI=
Subject key identifier: 2B:C3:18:66:EE:87:AC:56:86:BC:9E:6F:19:AD:54:B6:D0:4D:86:8C
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 019FA14D27501E97D21C917DC1AAA17B5E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 18FC
Signing time: Mon 27 Jul 2026 02:00:15 +0000
Manifest this update: Mon 27 Jul 2026 02:00:15 +0000
Manifest next update: Tue 28 Jul 2026 02:00:15 +0000
Files and hashes: 1: 6ptl5zZN6otvqTbmcxR9jeeyPTw.roa (hash: eOlv0gEoszbDU9BU/wQCemEUN+a4Reu5tk2gCPSosDY=)
2: U2pubs2iBylOl3mQStn1NV5HAeU.roa (hash: 3j+LrDTQ4DdD50DNjrhLgobkQoPmqtoqS9thhekJ5tY=)
3: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: kxB2pHkaxjzJi9CA2DlD673NPIY46zVgOfF7cr64zug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:27:50:1e:97:d2:1c:91:7d:c1:aa:a1:7b:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Jul 27 02:00:15 2026 GMT
Not After : Jul 28 02:00:15 2026 GMT
Subject: CN=2bc31866ee87ac5686bc9e6f19ad54b6d04d868c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:45:4d:06:c4:a8:ec:01:35:ce:d2:da:70:
42:cb:5a:85:02:e4:be:e2:9d:69:33:61:1a:a5:8f:
23:84:1d:01:f8:5c:45:2e:93:71:03:e5:f6:ae:f3:
72:fe:70:0c:21:f9:7b:38:b6:02:c4:1a:01:6e:ba:
0f:c9:bd:a8:9b:10:c6:d6:26:07:e4:3a:e1:b8:f8:
0e:78:e1:42:46:3b:8e:c9:9b:fc:e9:0b:dd:8f:2e:
07:5d:2d:c2:49:5e:ec:33:a9:47:38:2d:75:14:d7:
47:c7:e5:e6:55:bb:3a:28:a5:e8:d1:fd:5f:f2:a7:
6b:95:25:3d:89:26:e1:c8:9f:1a:08:ac:1e:fc:ee:
13:69:ef:ab:4c:83:bf:76:ff:d9:42:59:a8:47:65:
5f:67:77:98:fc:ed:ab:91:4f:33:9f:17:12:df:ec:
5c:61:91:55:0e:8c:29:de:1a:8a:9f:7f:f0:76:d5:
84:36:50:45:56:0c:eb:67:7a:7d:36:fd:9f:fb:55:
1c:d0:15:94:03:27:9b:41:fc:bb:0e:8d:bd:bf:9f:
3e:1f:8b:59:e6:8c:61:ba:34:a9:93:b2:5e:45:8a:
75:0b:5d:10:1a:67:f4:21:60:f4:27:e7:7d:7a:28:
cb:5d:02:8f:02:8e:c4:0c:eb:39:27:40:14:63:d1:
ff:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C3:18:66:EE:87:AC:56:86:BC:9E:6F:19:AD:54:B6:D0:4D:86:8C
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f1:cc:1d:83:5a:78:4d:82:ad:b3:7a:11:4f:3e:df:71:78:
f9:5e:94:88:52:9a:15:18:33:3a:02:ac:4f:b7:55:35:54:d3:
e9:0a:a2:75:a6:b8:68:df:d9:58:17:7f:92:69:6d:d6:68:0a:
e2:5b:71:be:17:cd:3e:04:b5:85:7c:ef:7c:04:48:0a:1b:65:
cb:e2:b5:bd:ec:78:66:6c:07:3e:a8:03:e7:7b:d6:54:89:11:
74:b7:5e:0d:51:de:89:95:e9:30:86:96:14:8a:09:2a:55:03:
6f:eb:c1:f0:9d:03:9b:e4:73:91:09:b5:ab:f2:92:71:44:eb:
72:cf:a7:f2:a6:ae:7d:d7:a5:ae:6a:b5:ee:3c:e1:46:35:0d:
88:6a:4c:49:5b:c7:87:3c:86:81:60:30:8d:37:6b:6c:79:93:
d9:4e:a1:87:51:f3:f8:cf:df:e6:d2:d5:06:20:e9:3c:41:fc:
c7:07:9d:d6:27:b4:ba:ea:10:d6:c3:c5:58:1d:75:25:da:6a:
3c:0b:94:3b:33:b4:40:4b:73:82:d0:1a:e4:2d:44:1c:87:a7:
b4:29:5a:04:95:5c:31:a3:60:73:81:d3:df:c3:5b:8d:1a:c7:
bc:41:e7:f5:ee:cf:e0:8d:56:35:e9:26:4a:ff:35:b1:0d:60:
df:82:cf:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTSdQHpfSHJF9waqhe14AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYTE0NTUzY2FjZjEwMzI3NGQ0MzNlNmIyNjgwNjZlMDE1
NDFiMjUwHhcNMjYwNzI3MDIwMDE1WhcNMjYwNzI4MDIwMDE1WjAzMTEwLwYDVQQD
EygyYmMzMTg2NmVlODdhYzU2ODZiYzllNmYxOWFkNTRiNmQwNGQ4NjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsitFTQbEqOwBNc7S2nBCy1qFAuS+
4p1pM2EapY8jhB0B+FxFLpNxA+X2rvNy/nAMIfl7OLYCxBoBbroPyb2omxDG1iYH
5DrhuPgOeOFCRjuOyZv86Qvdjy4HXS3CSV7sM6lHOC11FNdHx+XmVbs6KKXo0f1f
8qdrlSU9iSbhyJ8aCKwe/O4Tae+rTIO/dv/ZQlmoR2VfZ3eY/O2rkU8znxcS3+xc
YZFVDowp3hqKn3/wdtWENlBFVgzrZ3p9Nv2f+1Uc0BWUAyebQfy7Do29v58+H4tZ
5oxhujSpk7JeRYp1C10QGmf0IWD0J+d9eijLXQKPAo7EDOs5J0AUY9H/wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvDGGbuh6xWhryebxmtVLbQTYaMMB8GA1UdIwQY
MBaAFGGhRVPKzxAydNQz5rJoBm4BVBslMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAt
ZmEyNjZiYjcyZjczLzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAtZmEyNjZiYjcyZjcz
LzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfHMHYNa
eE2CrbN6EU8+33F4+V6UiFKaFRgzOgKsT7dVNVTT6Qqidaa4aN/ZWBd/kmlt1mgK
4ltxvhfNPgS1hXzvfARIChtly+K1vex4ZmwHPqgD53vWVIkRdLdeDVHeiZXpMIaW
FIoJKlUDb+vB8J0Dm+RzkQm1q/KScUTrcs+n8qaufdelrmq17jzhRjUNiGpMSVvH
hzyGgWAwjTdrbHmT2U6hh1Hz+M/f5tLVBiDpPEH8xwed1ie0uuoQ1sPFWB11Jdpq
PAuUOzO0QEtzgtAa5C1EHIentClaBJVcMaNgc4HT38NbjRrHvEHn9e7P4I1WNekm
Sv81sQ1g34LPHA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:24:32 2026 by rpki-client