
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File: YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier: o7EI7t6uLnb7SqA3tM+3C0rJILrR8NXDdfJTlUYHCGY=
Subject key identifier: DB:98:5A:D6:FD:EE:E0:58:14:D4:41:FD:18:EA:7F:3D:EF:02:20:45
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer: /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial: 01A171A5B0B3BE6940B59288B73AC898FD57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number: 0F4A
Signing time: Sun 25 Oct 2026 06:00:46 +0000
Manifest this update: Sun 25 Oct 2026 06:00:46 +0000
Manifest next update: Mon 26 Oct 2026 06:00:46 +0000
Files and hashes: 1: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: fGmZ3pnHNX7CJpa7mqU5NqbOz5XUxUcJqvfluJTg/k8=)
2: kGLxA9onzrf8JLssDr-KbBw0Iso.roa (hash: iCYCJqbAYcmF46KnTkB1atw07n5B8BjwCirxzmxkzlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:a5:b0:b3:be:69:40:b5:92:88:b7:3a:c8:98:fd:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Validity
Not Before: Oct 25 06:00:46 2026 GMT
Not After : Oct 26 06:00:46 2026 GMT
Subject: CN=db985ad6fdeee05814d441fd18ea7f3def022045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:17:df:47:ef:67:96:48:d7:58:c8:bd:51:
18:67:34:e4:6d:5e:82:2d:ea:d1:7b:45:97:6e:c0:
cb:d5:60:d7:03:f1:59:cf:c5:7e:57:c0:db:fd:06:
cf:90:85:85:91:85:91:d8:ed:7c:14:67:5b:1e:17:
f6:14:d1:a6:fe:c0:15:17:fc:dc:43:e5:0b:40:92:
e3:a7:bb:21:d7:de:59:c8:1f:82:48:fc:71:9d:0f:
6a:7e:57:4f:10:6c:bc:76:89:fa:91:bc:5b:af:0a:
74:55:f1:8d:d6:8b:04:2e:23:e0:18:fb:69:d0:e0:
d0:9d:29:d0:51:f3:42:f7:e3:13:67:45:6f:8d:1c:
1b:fb:15:e0:ed:e9:f6:da:4c:38:a7:88:56:d2:7a:
1b:d0:79:ae:8f:95:ff:7d:79:28:39:82:03:35:ff:
5e:03:bc:97:9f:2f:47:b0:b4:ba:6a:44:8a:47:46:
cc:9e:c7:ca:80:47:5b:81:e8:18:d8:7a:bd:61:a1:
19:0f:1e:b7:b1:ce:dd:45:11:17:59:19:05:01:4a:
d7:5f:14:5c:00:be:54:e2:3c:ac:56:eb:fa:a2:6d:
83:4a:12:95:84:bf:45:1c:85:a3:e3:84:ea:75:31:
8c:84:ac:a7:f1:e1:0f:6f:f8:ac:22:0d:f9:fd:1d:
b2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:98:5A:D6:FD:EE:E0:58:14:D4:41:FD:18:EA:7F:3D:EF:02:20:45
X509v3 Authority Key Identifier:
keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1c:b9:43:ca:55:1a:a1:58:68:31:af:26:06:0b:82:49:69:
f4:3c:8e:17:8a:35:c7:1d:9a:4c:41:95:1f:ad:72:b9:4c:0c:
08:9f:7c:b7:ec:64:d5:bc:4c:da:d7:62:fa:e7:b4:57:eb:d4:
37:05:5f:08:a8:fc:32:4f:f2:54:87:0c:71:41:44:02:ab:77:
8f:27:4c:1b:eb:8e:db:b7:10:14:79:4b:2c:ac:a7:19:9b:3e:
28:4f:09:5f:52:26:ba:28:9d:be:b2:a2:cd:cb:b0:48:a5:c9:
b0:8e:de:68:ce:5b:23:aa:59:94:63:4e:5f:9e:b9:8b:9d:82:
89:b1:6d:33:3d:d9:46:91:7a:cc:2a:f8:3a:2c:4e:47:d9:cb:
59:dd:97:2a:1d:71:4f:ed:65:96:a1:88:3f:a9:97:94:15:3e:
01:cf:24:95:48:2e:fa:48:8c:28:a7:1e:7c:26:67:38:7b:64:
c9:33:32:02:ab:64:de:ef:d2:b2:23:e2:25:e4:d6:d3:89:e8:
fc:34:f1:17:7e:1d:a3:6e:3f:b1:52:b2:ac:de:6f:3d:53:fa:
6f:bc:15:ba:55:22:c4:5c:a7:fc:ca:72:96:2f:c9:db:55:60:
d5:9f:60:61:bd:61:2e:cc:a2:2a:58:b7:ac:a0:6c:a7:76:47:
dc:fc:a1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:52:03 2026 by rpki-client