Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
File: YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json)
Hash identifier: 0v54UM7nXG9rt3RE1PYM0bA05EdqLaXDhzQaQ2l7UFA=
Subject key identifier: 48:EB:F4:37:47:F6:22:78:3E:BA:0F:17:55:84:3F:4A:59:3C:6A:F8
Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
Certificate issuer: /CN=61fbd8887da84471318d83884ac005f01b44fd49
Certificate serial: 01A15A7935ED73E0A12CE9C78FB2E9C8CF6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
Manifest number: 13D6
Signing time: Tue 20 Oct 2026 18:00:55 +0000
Manifest this update: Tue 20 Oct 2026 18:00:55 +0000
Manifest next update: Wed 21 Oct 2026 18:00:55 +0000
Files and hashes: 1: DhX1AL3YLB9SdItGYNcjsUvsOGE.roa (hash: +Q+chkOuahBdoqYleJ582M9GOlo0NXVt0stFukum49g=)
2: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: 0jS3FpRarQc+GZYwkaTuP5/dXuLYrORCUBKJhzMMFt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:79:35:ed:73:e0:a1:2c:e9:c7:8f:b2:e9:c8:cf:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49
Validity
Not Before: Oct 20 18:00:55 2026 GMT
Not After : Oct 21 18:00:55 2026 GMT
Subject: CN=48ebf43747f622783eba0f1755843f4a593c6af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:5d:53:3b:2c:f1:47:25:ad:43:74:d3:9c:
a0:30:c2:1c:e7:89:7f:0b:f1:48:58:75:6b:af:ce:
02:65:5a:0c:34:c6:41:33:f5:a3:68:c9:5e:d8:43:
58:d0:35:0e:dd:00:ce:1e:25:3e:2b:d3:df:fb:fe:
4e:5d:fc:fe:1d:dc:9c:7d:f3:47:c9:1e:e1:eb:37:
93:b1:10:9f:07:cf:57:dd:3e:d4:d6:7b:d3:eb:5b:
51:84:2d:08:f7:ef:71:bd:31:c6:3f:99:3c:f5:46:
20:df:f5:a2:c7:ae:50:5d:81:7a:41:22:43:17:ec:
61:3b:64:89:84:9c:00:91:3b:55:7a:e0:da:6d:86:
34:a3:dd:b6:70:4b:43:c4:35:56:fd:c0:cf:53:7f:
18:10:11:c3:d0:95:66:93:19:56:87:91:eb:e4:4c:
41:90:49:c7:e1:60:b0:18:60:0e:95:b5:2d:91:cb:
ea:bf:ea:59:19:18:01:c6:12:af:7d:89:58:ba:27:
55:f4:86:9d:78:5c:5d:57:09:db:6c:7f:51:b4:84:
7f:bf:8d:fc:7a:b1:18:16:19:df:92:d1:39:59:c1:
f8:14:85:c8:2f:58:40:5d:d2:6f:0c:60:14:45:88:
22:ec:04:f4:fb:64:16:16:83:93:0c:f4:4d:b4:bf:
f4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EB:F4:37:47:F6:22:78:3E:BA:0F:17:55:84:3F:4A:59:3C:6A:F8
X509v3 Authority Key Identifier:
keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ab:6a:68:c6:d0:7c:a7:f2:51:af:3d:f6:38:e7:7e:5b:8d:
59:f5:4c:0d:19:2a:cc:7d:61:40:dc:d6:35:2f:63:3e:ff:14:
35:22:43:55:8a:84:72:0b:f8:57:5f:50:ed:9c:e2:62:33:a5:
b6:bb:20:6a:4c:bc:1c:e5:97:84:84:cc:85:ed:57:73:c8:6b:
7c:2e:39:8d:ff:90:89:30:fa:86:31:19:dc:0e:55:ca:56:bf:
ba:77:78:33:70:dd:8d:08:dd:43:89:0b:3a:43:30:74:84:3e:
d6:18:f4:55:10:7b:7c:d1:38:34:20:97:46:67:cc:c4:98:dd:
02:eb:b8:85:91:6f:55:21:26:43:2b:ad:e2:23:c3:bf:d2:0b:
4b:04:2c:21:4c:68:9f:ec:02:bb:c1:80:b2:24:c4:96:d2:38:
0c:a4:67:32:fd:b9:53:6e:15:29:10:c9:f4:dd:66:7b:42:85:
cc:46:ed:98:62:15:9e:de:e0:ad:83:eb:26:f8:f1:b0:7e:dd:
ce:cd:64:0a:51:cc:3e:65:a7:58:05:cc:da:03:aa:1a:db:ef:
4d:e7:76:7f:79:c7:0a:1a:97:8b:50:6d:31:99:bd:02:62:0d:
2e:5d:1e:58:ac:a0:41:c1:ce:37:8e:58:73:89:80:50:b3:f5:
b6:9d:a5:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFaeTXtc+ChLOnHj7LpyM9rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZmJkODg4N2RhODQ0NzEzMThkODM4ODRhYzAwNWYwMWI0
NGZkNDkwHhcNMjYxMDIwMTgwMDU1WhcNMjYxMDIxMTgwMDU1WjAzMTEwLwYDVQQD
Eyg0OGViZjQzNzQ3ZjYyMjc4M2ViYTBmMTc1NTg0M2Y0YTU5M2M2YWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKhdUzss8UclrUN005ygMMIc54l/
C/FIWHVrr84CZVoMNMZBM/WjaMle2ENY0DUO3QDOHiU+K9Pf+/5OXfz+HdycffNH
yR7h6zeTsRCfB89X3T7U1nvT61tRhC0I9+9xvTHGP5k89UYg3/Wix65QXYF6QSJD
F+xhO2SJhJwAkTtVeuDabYY0o922cEtDxDVW/cDPU38YEBHD0JVmkxlWh5Hr5ExB
kEnH4WCwGGAOlbUtkcvqv+pZGRgBxhKvfYlYuidV9IadeFxdVwnbbH9RtIR/v438
erEYFhnfktE5WcH4FIXIL1hAXdJvDGAURYgi7AT0+2QWFoOTDPRNtL/0bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjr9DdH9iJ4ProPF1WEP0pZPGr4MB8GA1UdIwQY
MBaAFGH72Ih9qERxMY2DiErABfAbRP1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8wY2U1NjktYWI4ZS00NzEyLTk0OWEt
Y2VjOWUxN2Y1MDRiLzEvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8wY2U1NjktYWI4ZS00NzEyLTk0OWEtY2VjOWUxN2Y1MDRi
LzEvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKtqaMbQ
fKfyUa899jjnfluNWfVMDRkqzH1hQNzWNS9jPv8UNSJDVYqEcgv4V19Q7ZziYjOl
trsgaky8HOWXhITMhe1Xc8hrfC45jf+QiTD6hjEZ3A5Vyla/und4M3DdjQjdQ4kL
OkMwdIQ+1hj0VRB7fNE4NCCXRmfMxJjdAuu4hZFvVSEmQyut4iPDv9ILSwQsIUxo
n+wCu8GAsiTEltI4DKRnMv25U24VKRDJ9N1me0KFzEbtmGIVnt7grYPrJvjxsH7d
zs1kClHMPmWnWAXM2gOqGtvvTed2f3nHChqXi1BtMZm9AmINLl0eWKygQcHON45Y
c4mAULP1tp2lBg==
-----END CERTIFICATE-----
Generated at Wed Oct 21 05:09:23 2026 by rpki-client