Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
File: YblVGO1PVYKi9sEZVXQChLwIgTQ.mft (raw, json)
Hash identifier: VT/3onmwTRww6oCYGpQCSzwqaghhhDXLDsyzA7c+iqE=
Subject key identifier: B8:0D:EC:75:C7:C0:1E:19:0E:3F:B3:5C:D9:E0:00:0A:1C:D2:7B:33
Authority key identifier: 61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
Certificate issuer: /CN=61b95518ed4f5582a2f6c11955740284bc088134
Certificate serial: 01A040F2AC99A65FD67AB9229E7217CDD814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
Manifest number: 0AA1
Signing time: Thu 27 Aug 2026 02:00:40 +0000
Manifest this update: Thu 27 Aug 2026 02:00:40 +0000
Manifest next update: Fri 28 Aug 2026 02:00:40 +0000
Files and hashes: 1: 4415GxEj-TYr3AidYcdJ8bhsDy8.roa (hash: cE5GPiOmnznkFTHE5XfxrOsWeoTa87SB/CFxhnlAtck=)
2: YblVGO1PVYKi9sEZVXQChLwIgTQ.crl (hash: B8wQZ5Sm1wexkOZ5N8Vux3iGBecgvB5kOdiLNPXnwwY=)
3: srScoHZHreZzDWYRIo7iP-u_x8Y.roa (hash: syyRqwaOL9wW0OZYlgbcE8bN1oO5RyfUQlIa0YfUs5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f2:ac:99:a6:5f:d6:7a:b9:22:9e:72:17:cd:d8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b95518ed4f5582a2f6c11955740284bc088134
Validity
Not Before: Aug 27 02:00:40 2026 GMT
Not After : Aug 28 02:00:40 2026 GMT
Subject: CN=b80dec75c7c01e190e3fb35cd9e0000a1cd27b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dd:66:d3:a4:6c:b9:aa:fb:51:8e:8d:7c:77:
30:df:76:c5:fa:d9:48:87:02:73:92:60:c1:74:07:
94:c6:12:3c:56:3f:0e:68:6b:f3:86:30:30:ba:25:
42:42:a7:d0:ad:c7:b2:ba:c6:bb:99:3c:25:80:29:
c4:68:9c:71:ab:75:6f:c4:ab:45:39:b2:fc:38:44:
98:7f:e4:7d:ac:db:35:b2:a9:93:0b:fc:33:eb:a9:
d7:bd:f8:5e:87:ca:44:24:d8:c5:25:de:63:fb:c9:
29:3e:d7:cc:b3:29:18:ec:d5:73:a7:17:fd:db:0b:
d4:5a:4a:02:2d:dd:33:c1:8d:aa:19:7d:28:30:db:
31:56:1b:d9:b3:28:d9:4b:6a:30:d6:4b:4d:31:db:
1a:95:3a:6c:54:9b:5c:76:2b:68:85:0c:f6:a6:59:
ab:9d:b8:88:a5:88:8b:9c:2c:76:46:2b:0a:fd:b3:
68:73:ad:9d:ed:33:4a:db:13:c4:b7:5b:f0:d6:cc:
12:c6:f1:a0:36:4a:28:16:53:b4:22:a9:ca:8f:c0:
6f:fb:88:2a:eb:b6:27:0b:60:05:71:14:70:cf:a3:
d8:32:e7:24:81:17:0c:94:4b:b0:91:5c:73:f6:ce:
44:2d:31:25:d1:16:38:c3:17:f4:fe:cf:77:37:7d:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0D:EC:75:C7:C0:1E:19:0E:3F:B3:5C:D9:E0:00:0A:1C:D2:7B:33
X509v3 Authority Key Identifier:
keyid:61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7d:dc:6f:12:e0:e8:bf:97:ff:3e:65:9c:81:0a:de:f7:0b:
7c:54:61:be:e5:35:98:64:f5:54:e2:93:6a:50:3f:7c:8a:c9:
39:1e:33:6b:9c:c8:23:cf:ae:5a:f5:28:75:82:fd:d3:6c:26:
4a:12:f1:d2:f5:4e:16:69:5d:40:7e:55:0d:02:57:70:11:c5:
bb:4e:5d:06:66:30:37:25:3e:d8:e3:84:d0:86:37:e0:b6:8f:
ac:f9:82:07:84:29:ad:34:3e:28:fe:1f:40:2a:47:51:33:1b:
a7:f8:47:b2:bb:23:22:7d:e4:0f:08:49:5e:b0:74:b5:27:5e:
65:46:b5:98:d2:6b:26:68:ef:e4:cc:d5:4a:81:54:76:86:da:
8d:dd:ec:6e:4c:2c:10:7c:32:f5:9e:c2:03:bc:21:f1:e2:65:
84:8c:f6:b9:51:c5:35:ed:30:17:77:c4:d2:4d:c3:bb:9d:19:
55:67:2b:c1:93:23:51:bd:cb:9b:c7:14:07:4c:c1:5f:f8:75:
dd:e7:bb:16:31:10:72:d3:9c:28:cc:7b:e9:66:e9:05:19:b7:
65:dc:e9:0d:92:6a:6d:42:cb:ca:4f:52:d7:00:08:14:d4:fe:
f0:7b:9c:26:39:f8:05:6a:d7:ed:6d:91:d2:48:c4:f3:ca:1a:
29:e9:61:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:17:40 2026 by rpki-client