Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
File: YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json)
Hash identifier: IhfVwEaY7a5iiptuvYUbHsl/iftxKAfZjRrP3d5/XTw=
Subject key identifier: 10:EA:0A:80:2F:A5:17:E3:11:9F:57:83:00:CF:FD:FF:99:8A:E8:E5
Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
Certificate issuer: /CN=61fbd8887da84471318d83884ac005f01b44fd49
Certificate serial: 019D382E7183BC6E4C5437BA4CCDEB4CF103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
Manifest number: 11B2
Signing time: Sun 29 Mar 2026 06:01:00 +0000
Manifest this update: Sun 29 Mar 2026 06:01:00 +0000
Manifest next update: Mon 30 Mar 2026 06:01:00 +0000
Files and hashes: 1: DhX1AL3YLB9SdItGYNcjsUvsOGE.roa (hash: +Q+chkOuahBdoqYleJ582M9GOlo0NXVt0stFukum49g=)
2: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: pr7DskYpTyVlj48ecP5mfOae1pMChwhLTwpJ5NpOQG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:71:83:bc:6e:4c:54:37:ba:4c:cd:eb:4c:f1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49
Validity
Not Before: Mar 29 06:01:00 2026 GMT
Not After : Mar 30 06:01:00 2026 GMT
Subject: CN=10ea0a802fa517e3119f578300cffdff998ae8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:32:dc:1b:bc:2a:5d:14:7a:da:3b:55:23:04:
ec:e5:1a:86:be:7f:07:62:a6:b5:a3:d3:c3:a3:5a:
35:7c:bc:50:91:ee:08:0b:d1:8d:6a:ba:24:4c:89:
bd:c7:08:a0:34:25:92:82:dc:d5:6a:ed:97:9f:f8:
db:a9:13:49:67:15:f7:5b:61:f3:03:92:03:72:99:
70:8b:27:fa:41:1e:c9:d3:cd:e7:1c:30:46:dd:d1:
94:7c:54:a9:53:2c:d5:d3:26:74:50:86:c6:89:b7:
45:6d:90:65:8e:e0:85:ce:0f:f4:8d:a6:f5:28:25:
35:42:73:1a:65:44:08:dc:d9:cc:d5:b2:87:e4:f6:
5b:80:ee:f4:c8:4c:ec:71:1e:b5:8d:2c:26:41:e3:
03:dc:5e:43:73:82:26:1d:a1:37:03:14:f0:20:ce:
8e:a6:a9:e9:63:87:e1:a5:ce:fe:9e:dc:54:11:0b:
07:78:86:be:23:32:a8:21:66:54:37:e4:a0:0c:46:
8f:fc:bd:ca:9b:8f:23:6c:6f:db:bd:69:0e:eb:ca:
3c:19:9a:03:6e:0d:03:e8:20:a5:13:86:28:8e:ae:
9a:a5:94:df:05:6a:a0:9d:5d:95:21:dd:91:6b:6e:
98:9d:47:39:06:64:7f:57:40:2e:3a:95:86:fc:0e:
e6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EA:0A:80:2F:A5:17:E3:11:9F:57:83:00:CF:FD:FF:99:8A:E8:E5
X509v3 Authority Key Identifier:
keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:38:43:a7:7f:91:6c:40:37:7c:70:36:bf:1b:34:cb:ce:3c:
59:90:7f:d8:04:bc:c6:aa:71:a1:d5:a5:77:fd:7c:d4:9c:46:
12:7e:53:63:24:94:a6:67:9f:6b:7b:c3:a8:d9:e5:96:77:7c:
bb:26:10:b6:fd:d7:e2:94:95:da:25:a1:7a:6f:c9:e2:07:74:
fe:96:4d:1c:39:43:ba:a0:d5:b8:2e:3e:3f:11:61:fa:dd:f8:
c3:af:b4:84:5e:5c:50:87:55:2b:0f:cf:e1:1e:35:fe:fc:27:
4e:c3:b8:5f:44:16:d2:8b:cf:16:9d:9f:96:e5:aa:6b:db:2c:
4a:b9:3f:a3:75:b8:f6:69:24:7d:f2:6a:86:09:71:04:91:73:
15:1e:4f:3e:62:d9:84:7e:21:19:6d:fc:4b:94:41:b5:3a:3e:
9e:85:85:89:23:e3:89:7a:28:e7:40:37:59:9f:9f:d1:45:0b:
49:37:69:c9:c2:fc:16:bc:89:fe:71:30:ae:0c:c4:7b:58:4e:
90:1c:99:f8:44:17:3d:f3:1a:74:c5:53:c7:36:1e:cf:a4:13:
1c:46:3a:ea:76:78:8a:c6:35:5c:00:fc:78:bd:3f:a8:81:72:
ad:6e:69:a2:e0:ca:da:4c:06:77:ba:35:f4:e5:14:97:2e:25:
58:50:3f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:41 2026 by rpki-client