Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
File: YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft (raw, json)
Hash identifier: CYChEarG4EN6sPf8Qbrrfccwmo+dtOeCErh3eOqlBWc=
Subject key identifier: C6:47:A4:BA:73:EC:EB:B1:C0:ED:A8:61:76:D8:79:A1:27:13:E4:23
Authority key identifier: 61:F8:0D:83:D9:48:E2:48:B9:68:60:66:76:60:7B:84:70:E2:E4:1C
Certificate issuer: /CN=61f80d83d948e248b968606676607b8470e2e41c
Certificate serial: 01A12C205C2DA3C5955E75198F2E30066539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
Manifest number: 0133
Signing time: Sun 11 Oct 2026 18:01:20 +0000
Manifest this update: Sun 11 Oct 2026 18:01:20 +0000
Manifest next update: Mon 12 Oct 2026 18:01:20 +0000
Files and hashes: 1: 1-LvrevNxn8xjvxwWO9shI6PuFvU.roa (hash: iqWesMjsdrjmX1g6QE9vIbNV9BRrg4iuwDL5XHq0ynQ=)
2: YfgNg9lI4ki5aGBmdmB7hHDi5Bw.crl (hash: mOtmGMbMg7qoBPo1csLKZhIdx8wZPN9K+2YIFi3mRCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:20:5c:2d:a3:c5:95:5e:75:19:8f:2e:30:06:65:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f80d83d948e248b968606676607b8470e2e41c
Validity
Not Before: Oct 11 18:01:20 2026 GMT
Not After : Oct 12 18:01:20 2026 GMT
Subject: CN=c647a4ba73ecebb1c0eda86176d879a12713e423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:d9:95:d2:e2:ab:45:07:b9:35:1f:74:ed:
a6:1e:b3:58:ea:ec:3d:a5:91:47:c2:ce:06:7c:67:
90:e3:7d:a8:f2:fd:4c:3d:14:d0:d5:7f:8a:58:af:
92:16:41:b9:fd:cd:a5:82:3c:33:ad:47:1f:96:b8:
41:5d:50:60:be:1b:aa:06:bc:43:7a:c1:73:6e:43:
9c:1c:21:45:8f:14:a9:a0:2f:65:6d:c8:39:1c:bf:
b8:5e:3e:45:2f:9d:3b:9c:4d:09:5f:8d:3a:94:1f:
0b:95:aa:ae:9a:2f:1a:83:ca:61:12:e1:1c:c2:9c:
52:77:2a:5d:6d:2e:d6:83:d4:1d:8e:90:36:b4:90:
70:ff:8a:5f:b0:0d:9c:da:d4:a3:e8:60:1b:fe:bb:
5b:d6:28:00:ed:15:4d:8b:a2:15:2e:bd:10:91:cd:
11:36:ae:22:12:52:25:9d:c5:44:e8:59:df:f9:64:
e0:b0:4a:40:d7:6c:2f:44:3f:fe:61:cc:d3:a4:83:
7a:01:18:f7:56:02:c3:e4:d0:a9:b9:21:2b:12:69:
1b:07:16:3d:16:ca:7b:2d:4b:5c:e9:53:0b:01:c3:
16:e3:16:6e:10:c7:df:3a:76:4d:a9:0e:28:b0:50:
68:c1:04:4c:7e:ef:81:da:7a:ad:f6:e6:a0:4a:0b:
7a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:47:A4:BA:73:EC:EB:B1:C0:ED:A8:61:76:D8:79:A1:27:13:E4:23
X509v3 Authority Key Identifier:
keyid:61:F8:0D:83:D9:48:E2:48:B9:68:60:66:76:60:7B:84:70:E2:E4:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:cd:47:e6:f6:05:6d:83:bd:90:05:0d:9f:f6:fe:4d:6c:9e:
90:b2:ae:8e:0a:c6:24:06:9f:c9:ba:46:3c:ee:81:9b:a3:79:
a1:8e:36:06:6f:81:d0:c7:90:bb:e4:9d:76:a9:a3:e0:5a:a0:
cb:02:d9:b3:71:bc:5d:ca:9d:09:18:a5:a1:92:f1:45:2c:90:
6f:45:92:c8:51:81:67:82:40:15:2d:87:39:d9:b4:32:c8:fa:
ee:b8:c3:b4:d3:48:1c:a5:10:83:74:80:b0:3b:8e:41:0e:12:
cd:b8:df:ab:68:0e:b8:2e:d5:84:85:09:ec:b5:0d:24:94:f0:
83:9a:3d:af:c1:90:22:c7:ea:08:2e:bb:cc:13:8f:6d:25:84:
4a:49:aa:4c:07:d6:da:fa:55:34:e5:f8:14:ec:65:aa:63:0f:
29:8a:96:dd:e7:ed:8d:27:2b:35:51:a0:6d:e4:bb:61:7f:cb:
b6:cb:ef:e8:fd:c2:29:47:a6:d4:f1:cb:b7:93:99:9d:3d:c0:
cd:38:84:86:f3:e1:ea:a8:2e:e1:d3:95:94:e1:88:74:fb:10:
a0:8f:20:ff:7f:f9:1f:64:f4:4f:4d:13:54:05:10:98:97:92:
41:48:00:32:aa:1c:dd:c1:9d:cb:59:ce:df:38:a3:34:1c:4d:
a0:f1:da:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:56:26 2026 by rpki-client