Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
File: YfTZxfoK42S02B7bxNGCAPAPvH8.mft (raw, json)
Hash identifier: 2Angi5s0S/XLho1xlX7iOe7sdGv6B9WxsQzZHbBNkI8=
Subject key identifier: 56:B0:A9:F8:4A:74:71:D4:55:CA:F8:69:54:1B:CE:62:37:3B:5D:FA
Authority key identifier: 61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
Certificate issuer: /CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Certificate serial: 01A174DDA9CDA002A8027BA16AE728326662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
Manifest number: 0476
Signing time: Sun 25 Oct 2026 21:00:46 +0000
Manifest this update: Sun 25 Oct 2026 21:00:46 +0000
Manifest next update: Mon 26 Oct 2026 21:00:46 +0000
Files and hashes: 1: YfTZxfoK42S02B7bxNGCAPAPvH8.crl (hash: hJKfvTSkYgQyh6r4Ub1RPnWzSIiX8nlo2IE0ltqm1+Y=)
2: i757eDGPyWXy1WJ59_NsKxP9nBk.roa (hash: aclUO+YpHA3b3E++8LC8TZOgc8p99LqEe7lxYmVbjYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:dd:a9:cd:a0:02:a8:02:7b:a1:6a:e7:28:32:66:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Validity
Not Before: Oct 25 21:00:46 2026 GMT
Not After : Oct 26 21:00:46 2026 GMT
Subject: CN=56b0a9f84a7471d455caf869541bce62373b5dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e1:30:12:d0:ba:ab:4e:5e:9a:15:83:0b:95:
bd:d4:63:33:94:b1:03:9f:b8:3e:38:c0:0f:b3:73:
0b:7b:33:c8:8f:3e:71:ed:7f:fa:c5:37:6c:eb:d3:
48:48:ed:be:af:78:87:b0:33:c1:75:42:10:f4:a7:
69:80:5d:51:a3:3e:8d:11:cf:a5:e7:1c:77:78:6c:
0a:37:ed:77:cf:bc:ee:0a:d2:df:a0:50:dd:a9:62:
72:53:fa:c5:f6:19:da:fb:ec:8c:ac:c5:99:bb:eb:
db:89:69:84:14:45:3a:36:73:83:dd:f6:7e:50:8c:
b1:52:92:36:0a:f0:19:01:bf:c2:46:fd:3a:25:6d:
c4:a9:44:63:7b:d9:f4:90:fd:a4:54:86:25:0d:22:
27:71:bd:35:31:60:29:72:05:88:88:20:0c:c2:02:
68:3d:af:55:b4:d5:93:d2:6b:ce:76:40:23:eb:d8:
16:2b:cd:b8:1f:41:87:e6:34:10:fa:62:52:53:73:
c2:80:fe:43:fc:88:4e:01:26:1b:af:a7:72:98:c3:
9a:f7:a7:ae:5c:89:f5:f6:3a:f5:a8:cf:e7:72:1f:
1c:16:96:f7:3b:25:b7:f2:b7:bf:42:d4:3f:a4:cb:
2e:44:fc:d2:c4:9a:70:62:40:76:20:df:c7:48:64:
96:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B0:A9:F8:4A:74:71:D4:55:CA:F8:69:54:1B:CE:62:37:3B:5D:FA
X509v3 Authority Key Identifier:
keyid:61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ea:f1:54:5f:77:ce:01:fc:7b:5d:6a:c8:d6:3e:bb:e8:de:
f3:21:ad:85:6a:69:29:ff:07:f7:de:5d:60:65:64:e5:e4:d5:
0b:36:ed:de:26:74:e1:1c:46:2e:24:5c:8e:6a:7d:b3:d7:64:
2c:b8:f7:a4:c9:ec:aa:7b:a0:60:e2:b3:48:71:47:0c:57:54:
ce:a6:0f:6d:3b:42:65:1f:f2:c1:d4:6e:49:2d:59:b5:f9:86:
82:00:ce:3e:02:76:e0:19:b3:93:c4:33:79:b0:f6:6b:67:13:
8f:25:64:94:88:e0:a5:2f:c9:b4:04:a8:7a:a4:48:18:dd:cd:
92:13:df:e5:13:52:57:9e:78:e6:7a:65:81:c1:d7:12:c7:7b:
5e:ba:aa:c0:ff:58:b0:c8:b6:5a:8a:05:92:d9:98:34:ce:95:
1e:f4:51:be:a5:df:98:e1:1c:aa:99:c1:e9:32:57:b6:97:4d:
73:5d:34:06:b2:a2:77:64:da:a8:c9:b2:34:7e:94:d5:21:3e:
4e:cb:6d:d4:b7:c9:2f:89:38:b8:9b:4d:36:0c:c5:bf:2c:a5:
96:11:9a:ec:c7:eb:b1:87:c6:2a:c1:02:87:40:d4:2c:47:15:
02:27:e5:fd:19:4c:4a:9d:b6:88:8d:82:8e:d8:87:a5:5f:e9:
fb:84:0c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 23:08:18 2026 by rpki-client