Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
File: YdOddLF-aR3RsFIhxgmMr17pOjY.mft (raw, json)
Hash identifier: SklCQQ3yUhGdTKnIT/OQ0jCf/gbP54NGN8R+kZQs2Hc=
Subject key identifier: 2E:01:72:4B:32:91:E5:95:29:FF:00:C2:44:50:66:2C:03:32:26:F3
Authority key identifier: 61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
Certificate issuer: /CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Certificate serial: 01A039A6E81F4B751000522A6D81E88A395C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
Manifest number: 14E9
Signing time: Tue 25 Aug 2026 16:00:34 +0000
Manifest this update: Tue 25 Aug 2026 16:00:34 +0000
Manifest next update: Wed 26 Aug 2026 16:00:34 +0000
Files and hashes: 1: 0OOhZQIpq6dXwSrbl0KaN4bQBwk.roa (hash: z5lcUbMXKGaRM5S0Zeu6WP6amOKl5X2nXO5t7H9TCbI=)
2: YdOddLF-aR3RsFIhxgmMr17pOjY.crl (hash: djNqxrZnzv5n0wEtb7Bkl3BnqtcmaAS9vcwvGWHIw7U=)
3: r8W-JPeHlAiFCJwWv-YMAOVztvA.asa (hash: k63Cqync/EGh92kwaNFltDkZGtDaRvYKfq5QI6GDv7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:a6:e8:1f:4b:75:10:00:52:2a:6d:81:e8:8a:39:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Validity
Not Before: Aug 25 16:00:34 2026 GMT
Not After : Aug 26 16:00:34 2026 GMT
Subject: CN=2e01724b3291e59529ff00c24450662c033226f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:40:f6:49:41:22:f2:02:58:c4:52:a9:48:
6d:f0:fa:1b:31:81:ae:84:fc:e8:bb:44:2e:f3:b8:
4d:eb:9b:4f:35:64:80:63:51:f7:6f:15:b4:58:bc:
be:a9:e0:e1:3a:0e:3a:b5:d8:2a:75:94:b8:5b:b4:
68:26:49:d5:96:f0:f4:13:56:12:3f:bd:29:14:d6:
99:f1:36:c0:32:15:cc:2f:51:ff:16:96:14:bc:05:
30:0c:ec:12:2a:8f:2f:42:18:af:65:3e:0d:02:46:
25:20:e4:a5:e8:ba:f1:bc:dc:21:35:7b:58:05:33:
b0:e3:74:a9:ff:19:f8:a1:a9:9e:88:80:84:b9:d0:
43:d6:72:fe:b5:64:e0:d3:ec:9d:9c:07:3f:29:78:
ee:cc:f6:82:f7:e6:54:bb:bc:c6:22:05:30:d7:8b:
91:4f:2d:7d:d8:5a:c4:63:cb:ef:ec:06:13:40:a9:
ae:62:31:46:d9:30:79:9b:d7:fc:84:20:39:fa:c3:
12:a7:b1:a6:80:a3:29:8b:0e:5b:0f:10:49:62:54:
c1:5b:41:67:ff:d4:6e:ef:92:eb:2b:cb:24:53:34:
1c:d1:6a:70:27:0c:bd:58:05:7b:25:04:ce:31:3f:
a7:0e:52:16:4c:0c:c6:df:ab:e2:fa:6e:53:18:a7:
50:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:01:72:4B:32:91:E5:95:29:FF:00:C2:44:50:66:2C:03:32:26:F3
X509v3 Authority Key Identifier:
keyid:61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8a:e8:f3:48:02:14:a9:5f:5a:bf:59:ca:93:39:73:64:ca:
fe:9b:8a:37:a1:fb:e3:84:d6:cb:2e:b0:18:11:9d:c7:12:8e:
d0:8a:1a:66:6b:2b:23:ea:e3:4e:25:dd:b3:27:df:84:7a:30:
4d:ea:55:1a:37:a0:00:72:47:4b:01:4f:61:6f:ac:12:5b:74:
8e:ba:e7:10:1f:c5:63:ea:ae:d7:31:db:38:10:72:c4:22:ad:
66:e5:d1:e8:b7:71:90:09:22:4d:db:0a:8a:17:76:49:1a:55:
f7:60:1e:50:18:16:28:0b:2b:f3:e5:d5:f1:0e:4a:c4:02:b3:
69:f2:60:5d:5a:3c:75:e7:a7:b4:15:89:87:c9:e2:4f:4a:8f:
52:5f:de:74:35:b9:22:7e:73:c0:e4:f0:65:4d:d1:37:17:7b:
66:a8:a3:9d:35:7a:a5:7a:a0:12:9d:26:f7:a1:19:f1:b7:df:
c6:62:a5:09:cc:54:f7:39:f5:1b:b9:3e:7b:3e:65:87:9c:d0:
79:0a:c5:48:7d:92:8d:5d:0a:74:84:28:e7:6c:4e:90:bd:f4:
1b:3c:25:4d:0e:22:c3:bd:2b:cb:7d:1f:3d:0d:a5:03:2f:80:
f0:59:ef:ea:81:91:47:68:9e:cf:44:83:79:e9:87:32:6b:f7:
2d:dd:5c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:42:20 2026 by rpki-client