Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
File: ylF4miMTWsImjCKihWAKX5sFN3A.mft (raw, json)
Hash identifier: 15WLpc/Eiqpr5rjensHTumBR+MiRkH1gAVRGBPcZFJc=
Subject key identifier: A0:26:8D:A7:9E:91:ED:59:46:E4:29:DC:DD:FD:8F:62:05:BC:91:E6
Authority key identifier: CA:51:78:9A:23:13:5A:C2:26:8C:22:A2:85:60:0A:5F:9B:05:37:70
Certificate issuer: /CN=ca51789a23135ac2268c22a285600a5f9b053770
Certificate serial: 01A16C116F613BA0AA4650B0EB156DA02E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
Manifest number: 1624
Signing time: Sat 24 Oct 2026 04:00:43 +0000
Manifest this update: Sat 24 Oct 2026 04:00:43 +0000
Manifest next update: Sun 25 Oct 2026 04:00:43 +0000
Files and hashes: 1: sr2F0zsExdSQr-zgnrk17i9FhUg.roa (hash: hKUfnAYzGISD3itupUfCkChJsvs636FejLl9Oqr8aQA=)
2: ylF4miMTWsImjCKihWAKX5sFN3A.crl (hash: U4Sc0gghV/hiYbil4qwweplXO1cUzo6GCllayrG6UjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:11:6f:61:3b:a0:aa:46:50:b0:eb:15:6d:a0:2e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca51789a23135ac2268c22a285600a5f9b053770
Validity
Not Before: Oct 24 04:00:43 2026 GMT
Not After : Oct 25 04:00:43 2026 GMT
Subject: CN=a0268da79e91ed5946e429dcddfd8f6205bc91e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:dc:8d:7a:7a:b1:47:99:28:ab:48:64:2a:
d9:97:29:77:91:31:46:a1:b4:62:96:4f:2f:11:49:
70:33:8e:f4:90:97:1b:38:59:ca:2c:b8:4c:33:c8:
91:32:9c:b4:47:ea:38:b9:fa:95:c9:cc:b9:51:b4:
76:86:dc:ad:50:d5:d5:83:f6:19:98:c3:a1:31:f1:
a1:dd:13:47:e2:cd:bf:b3:53:65:c8:25:a3:b9:2f:
17:ed:88:18:e8:92:9c:60:c7:3d:1f:1d:34:5f:d2:
bc:1b:14:c1:37:24:6e:5d:b1:5a:f9:d0:4d:58:25:
aa:59:31:3e:f0:ba:ad:01:8d:ea:cb:a1:3f:2c:06:
c2:ae:af:cb:45:92:20:92:0e:83:94:8c:b4:da:65:
72:55:d6:4d:b1:e7:18:c4:04:6c:35:4f:88:9f:9e:
9d:34:f7:d3:06:6b:c4:2d:8f:ff:bd:55:d7:a8:73:
05:fb:7f:26:dc:71:71:13:e3:a1:1d:d6:27:39:01:
65:07:87:6d:24:5c:72:7c:17:59:a5:23:55:07:61:
ab:37:59:69:cc:42:43:56:a0:78:39:34:31:2a:90:
cd:22:aa:68:be:1d:d6:cd:91:11:41:41:1f:e1:c2:
9c:4e:bc:3b:9d:c7:b6:02:f1:38:6b:fc:19:26:0a:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:26:8D:A7:9E:91:ED:59:46:E4:29:DC:DD:FD:8F:62:05:BC:91:E6
X509v3 Authority Key Identifier:
keyid:CA:51:78:9A:23:13:5A:C2:26:8C:22:A2:85:60:0A:5F:9B:05:37:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cc:f1:c5:4c:99:5e:b7:d5:08:1c:cb:1e:fb:c1:c2:a8:7b:
58:ef:50:60:34:9d:f3:4c:07:85:24:27:a6:c4:40:71:07:86:
3e:27:a7:f9:8a:e0:a7:39:8c:61:31:fa:82:b0:23:9c:af:8c:
24:00:36:42:14:be:37:ca:10:62:62:18:27:89:d3:fb:f1:23:
ff:13:32:1b:1c:eb:e8:3a:de:ec:f4:e5:03:13:a6:b2:d7:1b:
3e:ea:50:fe:51:dd:04:e8:5e:d2:2e:30:37:37:24:c8:ac:96:
1a:61:97:40:a9:2b:cf:6a:81:a2:09:8f:9b:f7:07:26:ce:59:
7e:fa:fd:09:ed:ed:1c:0d:a3:6e:b9:4a:75:c7:13:00:23:39:
ec:eb:53:6d:7b:8c:79:8d:8b:6a:60:bc:f7:7b:61:f7:24:f9:
c8:cf:36:25:91:b1:3a:fa:54:91:3c:c5:40:8a:93:e9:39:50:
72:0a:ef:a8:19:24:15:a3:72:9c:f2:a7:78:be:d0:c9:6e:4d:
92:3b:e2:5f:88:fb:ac:09:1f:84:3d:bd:bf:e8:cf:5f:81:60:
f1:a1:34:81:57:0e:84:6d:61:39:0f:ff:f1:22:e0:15:bb:9f:
6c:17:81:38:1f:0b:6f:97:7a:5d:ad:25:70:d4:db:6f:bb:80:
98:56:ac:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 07:37:16 2026 by rpki-client