Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
File: YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json)
Hash identifier: M01IzdjElcr80O/DpJEhDezdmu/ws7VZgAOC5isZKpI=
Subject key identifier: F2:1E:D2:0E:10:A6:E0:67:98:71:E4:EF:C3:E6:02:9E:BD:82:C4:36
Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
Certificate issuer: /CN=61fbd8887da84471318d83884ac005f01b44fd49
Certificate serial: 01A154AEA684927F960CBAA1D74A9CF08268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
Manifest number: 13D3
Signing time: Mon 19 Oct 2026 15:01:34 +0000
Manifest this update: Mon 19 Oct 2026 15:01:34 +0000
Manifest next update: Tue 20 Oct 2026 15:01:34 +0000
Files and hashes: 1: DhX1AL3YLB9SdItGYNcjsUvsOGE.roa (hash: +Q+chkOuahBdoqYleJ582M9GOlo0NXVt0stFukum49g=)
2: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: ebYywwRqtAGW2Fna51QMgd5kKcjbinXk0cpexDUYqyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:ae:a6:84:92:7f:96:0c:ba:a1:d7:4a:9c:f0:82:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49
Validity
Not Before: Oct 19 15:01:34 2026 GMT
Not After : Oct 20 15:01:34 2026 GMT
Subject: CN=f21ed20e10a6e0679871e4efc3e6029ebd82c436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c7:54:15:f9:3d:cb:12:10:5f:fd:53:76:c8:
08:8c:62:c7:7c:e1:78:5a:d2:94:21:e0:f2:8f:da:
16:66:2f:71:c3:3d:00:b4:a2:c3:69:4b:87:bc:ab:
46:01:bb:ee:8a:7a:bd:cb:ee:4f:fe:6c:4f:da:e1:
2e:7c:a0:0c:51:f6:e2:e6:13:a3:3b:51:7d:cd:0a:
9e:7f:51:dd:66:6e:ae:49:e6:f0:5a:8d:4a:53:9b:
84:40:cf:97:9e:1d:7b:ef:d8:d6:31:25:6e:2c:5b:
e0:64:d5:76:d4:47:88:db:8c:63:fb:a6:b3:c1:4b:
fb:af:d5:6b:36:98:bc:d6:b8:b6:8c:b8:79:1b:dc:
d4:09:8d:10:ae:19:74:79:ef:ef:45:6f:72:b9:52:
ba:54:1a:50:f8:63:33:4e:9b:57:cc:61:bb:c9:db:
69:7a:dc:4d:77:3f:6c:a9:c9:de:e6:d2:e2:8a:57:
cb:03:5f:cb:81:4d:fd:b8:3b:1d:18:9f:a8:b3:3a:
9e:21:ff:51:2a:35:77:cc:54:81:ef:12:dd:e1:db:
e2:3b:fc:5e:99:f4:92:75:3f:46:65:e9:dd:09:b0:
05:bf:43:9e:9b:70:62:6d:0f:3d:61:7c:89:98:ee:
f3:02:e3:ef:d0:f3:aa:20:f9:43:38:31:85:4c:97:
ef:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1E:D2:0E:10:A6:E0:67:98:71:E4:EF:C3:E6:02:9E:BD:82:C4:36
X509v3 Authority Key Identifier:
keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ca:af:32:be:39:2b:57:d7:e2:61:31:f3:c7:b4:72:4a:35:
e0:d0:75:95:a2:b0:1c:70:dc:5a:bb:f1:66:c9:5c:5e:f7:e7:
9c:1c:b4:20:32:95:4e:c5:fb:a5:86:ea:af:1a:88:fc:51:74:
3d:59:68:ac:d9:72:21:c6:01:fb:32:31:11:0a:2c:50:95:4b:
93:4c:33:e8:eb:d3:da:ef:9a:09:63:56:1e:95:a7:6a:6b:0e:
04:4b:80:56:84:8e:41:13:f5:99:f8:69:bb:f4:c6:5f:51:3e:
cf:59:f3:03:32:69:d4:25:15:81:34:a9:9c:0e:f1:07:00:f3:
61:c7:84:8b:ee:09:12:20:d9:51:28:0c:99:d0:21:00:7a:1d:
35:d3:fc:d4:e2:9e:14:86:ce:b3:39:d7:0c:a0:55:05:cc:50:
65:cb:6e:b5:5c:6a:cb:91:2a:68:95:24:3f:f3:c3:ef:b3:e6:
64:34:0c:9f:76:67:d1:dc:e8:46:67:ce:69:de:0b:1d:1e:94:
61:63:e7:31:7e:23:74:3e:77:81:2e:e4:ce:0e:fb:e2:9d:e1:
9b:32:8d:68:14:bd:c9:57:d0:86:d4:5c:68:87:9e:71:bd:db:
96:8b:b7:fc:e8:b6:79:42:69:e6:d4:b0:4e:0c:a9:e5:68:f1:
a3:ba:ac:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:48:43 2026 by rpki-client