Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft
File: YbcgLJIwwolFDtWmKxc2mgZZvGs.mft (raw, json)
Hash identifier: O7N2P9Gmo2LE+IOmEEYpeEycD54walgEj/NSI1iSDfs=
Subject key identifier: E4:05:BC:9A:6C:37:D6:C8:0A:B7:B1:3F:E2:CA:A5:10:06:5C:44:47
Authority key identifier: 61:B7:20:2C:92:30:C2:89:45:0E:D5:A6:2B:17:36:9A:06:59:BC:6B
Certificate issuer: /CN=61b7202c9230c289450ed5a62b17369a0659bc6b
Certificate serial: 01A1366CAF6FFDBF987E607EF7786146D24E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbcgLJIwwolFDtWmKxc2mgZZvGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft
Manifest number: 0D46
Signing time: Tue 13 Oct 2026 18:00:54 +0000
Manifest this update: Tue 13 Oct 2026 18:00:54 +0000
Manifest next update: Wed 14 Oct 2026 18:00:54 +0000
Files and hashes: 1: H8_4w92WXuGkctjlJERZEe-5K34.roa (hash: WmS53pHwBk98gkS34NpilrfE1ZVelLUsA8l48EKHH6c=)
2: YbcgLJIwwolFDtWmKxc2mgZZvGs.crl (hash: fusu6c+K0+kBJvvlTyf7ayGIOD5OyGPep+a0cFOzYFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbcgLJIwwolFDtWmKxc2mgZZvGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:6c:af:6f:fd:bf:98:7e:60:7e:f7:78:61:46:d2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b7202c9230c289450ed5a62b17369a0659bc6b
Validity
Not Before: Oct 13 18:00:54 2026 GMT
Not After : Oct 14 18:00:54 2026 GMT
Subject: CN=e405bc9a6c37d6c80ab7b13fe2caa510065c4447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:6a:bc:ee:5e:bc:fb:4b:e5:98:90:ce:b4:
d0:cd:8c:34:fd:b9:08:7a:f9:c1:35:86:f3:ee:1c:
46:fd:2a:4f:11:5d:27:53:cf:3d:11:3c:32:94:2f:
7b:8e:b3:5c:e8:f4:82:79:c1:fd:ad:25:b8:a8:72:
79:73:4d:a3:f0:70:a2:39:e7:7a:b4:cb:23:c4:ff:
22:80:e2:5d:4e:6d:e7:ae:9b:29:b6:cf:5f:2e:d3:
0a:9e:62:9e:23:43:4a:e2:9b:23:f4:cc:20:c5:a2:
13:a1:1e:a2:73:db:9a:59:47:cc:46:38:72:e9:16:
2c:d3:30:7e:3a:9a:cc:dc:7d:3e:84:25:eb:79:2f:
fb:d6:a3:b1:72:de:4f:b4:fc:10:f5:26:f4:de:76:
52:d3:52:3e:bb:89:8f:49:7f:c0:d8:57:76:00:b9:
c9:31:85:45:6f:7c:82:aa:cf:08:8c:da:69:8c:f8:
41:81:57:95:0a:84:72:ee:f7:d4:11:7c:11:df:ae:
55:50:f1:86:25:b4:e4:0c:fd:2b:aa:ad:49:6a:49:
fc:a9:17:f7:6d:5d:31:48:c9:ed:07:15:db:fa:12:
43:e5:0c:da:94:68:73:86:0c:f5:89:fa:24:fe:1f:
80:ae:75:b0:ae:eb:1d:d6:58:d7:11:b3:70:6c:41:
7e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:05:BC:9A:6C:37:D6:C8:0A:B7:B1:3F:E2:CA:A5:10:06:5C:44:47
X509v3 Authority Key Identifier:
keyid:61:B7:20:2C:92:30:C2:89:45:0E:D5:A6:2B:17:36:9A:06:59:BC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbcgLJIwwolFDtWmKxc2mgZZvGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:45:d9:42:98:d9:df:23:99:ed:c7:79:9f:85:77:64:40:38:
c7:12:35:bd:15:51:d6:30:19:5c:9f:0c:75:94:59:d7:d3:9f:
c3:8f:c5:19:16:e9:c6:3f:65:a8:8e:c9:1f:a5:bc:0a:c2:2e:
a3:aa:cb:aa:80:d4:3e:8a:d2:e4:ca:b8:db:c7:12:d6:19:47:
26:26:df:62:00:af:14:9a:e6:72:8d:52:66:94:d0:e7:b5:fb:
32:4b:25:c1:67:3b:a7:87:f0:58:b8:3a:2e:77:e4:6a:1b:44:
c6:d6:62:8d:d2:98:68:da:39:20:09:0a:93:8d:cd:fc:1f:76:
23:7e:13:2b:5d:6c:4c:27:75:31:d4:97:1d:5b:db:3e:b3:85:
db:5a:80:6d:a0:f0:b9:d5:1d:97:40:9d:10:73:bc:1d:69:dc:
d0:9c:47:38:a1:13:a4:c9:69:85:3d:de:ba:9f:75:80:80:c6:
62:18:4b:4f:fa:ce:c5:4d:6a:da:8f:9d:8a:ab:d9:e8:42:9b:
e4:7a:f8:da:0e:35:27:b6:37:72:0a:0b:6e:36:da:c6:42:f6:
b4:e0:ca:26:11:82:f7:d1:33:bf:b0:0b:57:ef:18:a8:fa:92:
1a:fe:17:30:f9:9d:26:1a:bb:d4:65:76:14:90:2d:56:e2:85:
95:03:22:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:04:46 2026 by rpki-client