Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
File: YdrAqoYffXLG8l1lbwMdoWftqVU.mft (raw, json)
Hash identifier: r4GSU2CBL9Y9hH4D7FIYq/ezAaj89k/MEJYXHilsFpk=
Subject key identifier: 32:55:D7:5C:C0:B6:D2:EF:D8:BB:C7:35:9B:19:66:E6:BA:18:EA:FA
Authority key identifier: 61:DA:C0:AA:86:1F:7D:72:C6:F2:5D:65:6F:03:1D:A1:67:ED:A9:55
Certificate issuer: /CN=61dac0aa861f7d72c6f25d656f031da167eda955
Certificate serial: 019EC1125EC9EBD6F8FDB8A860BACC15CDEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdrAqoYffXLG8l1lbwMdoWftqVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
Manifest number: 4F
Signing time: Sat 13 Jun 2026 13:01:06 +0000
Manifest this update: Sat 13 Jun 2026 13:01:06 +0000
Manifest next update: Sun 14 Jun 2026 13:01:06 +0000
Files and hashes: 1: FlOjCt4LJfQ8IqN1peCaBvqAB2Q.roa (hash: RDwp0/0oDMXql1jT9ebav+hZj67VDM98AjOHB7oE64Y=)
2: YdrAqoYffXLG8l1lbwMdoWftqVU.crl (hash: eFu0a+6tLP2JM1cXFtxswsjUsHrkucZpQ4ybJu4QqPU=)
3: dhtCDXQLsqqlrkZYhsNQj7BUfwE.asa (hash: EzJqcTfM145uC1wp3s4ktIqJ62O99szOvIfXe4xA3So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdrAqoYffXLG8l1lbwMdoWftqVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:5e:c9:eb:d6:f8:fd:b8:a8:60:ba:cc:15:cd:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61dac0aa861f7d72c6f25d656f031da167eda955
Validity
Not Before: Jun 13 13:01:06 2026 GMT
Not After : Jun 14 13:01:06 2026 GMT
Subject: CN=3255d75cc0b6d2efd8bbc7359b1966e6ba18eafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:2f:0a:fe:37:af:fc:17:6c:20:a1:d1:42:
d0:27:98:12:15:1d:8c:a7:b8:7e:b3:37:8c:92:05:
3c:ae:91:0f:94:ce:97:94:9e:a3:81:94:74:11:f9:
eb:d3:42:09:cc:38:23:49:e9:49:23:2b:88:86:cd:
8a:a3:13:67:ed:fe:1f:2a:6c:19:3b:d3:89:a6:9b:
06:e9:e5:39:7c:e5:1b:41:a6:e2:80:07:13:1e:6e:
d1:cf:26:e8:27:5d:c9:ee:bf:4a:79:33:2a:49:4e:
a8:7a:c8:5b:44:b3:78:fe:d0:e7:81:bc:41:9e:fd:
ed:66:58:ce:31:94:45:50:65:84:71:4f:23:c7:15:
42:a9:9a:88:98:68:33:06:81:94:7a:48:b1:76:22:
65:a2:c7:36:ae:b5:1c:aa:bc:d8:03:93:3b:3e:87:
06:0e:5a:c5:80:cc:60:71:01:f4:1b:60:49:5b:0e:
3b:1d:a1:a2:e1:71:ea:79:b8:1d:10:50:4d:f8:66:
7c:a1:f0:c0:69:bb:b5:ca:79:90:17:ef:aa:56:f6:
3b:df:1c:a5:94:30:d6:1e:bd:76:1a:05:f2:85:0c:
f4:91:84:2d:34:32:c9:96:4c:cb:38:68:d3:d9:4b:
9b:32:0e:93:4f:c8:a3:c8:c9:05:89:bd:4d:7e:41:
ee:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:55:D7:5C:C0:B6:D2:EF:D8:BB:C7:35:9B:19:66:E6:BA:18:EA:FA
X509v3 Authority Key Identifier:
keyid:61:DA:C0:AA:86:1F:7D:72:C6:F2:5D:65:6F:03:1D:A1:67:ED:A9:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdrAqoYffXLG8l1lbwMdoWftqVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ae:34:05:8f:c4:77:06:42:32:18:92:f3:32:cf:a1:fb:34:
3a:7c:82:ea:97:de:a9:75:f2:72:7a:d6:be:59:55:89:6e:2c:
7a:fc:2a:4b:d7:2f:97:d6:c0:05:c2:aa:8e:1a:8e:25:f7:20:
e6:23:3a:40:89:ba:47:59:af:9d:31:49:4b:3a:6c:51:d1:df:
cf:29:ae:30:30:e9:53:45:e2:c5:da:2f:9d:a3:35:41:cb:79:
d7:cd:af:cf:d7:bd:14:49:c6:8c:c2:c1:a0:31:91:78:29:b6:
81:d7:c0:af:15:3f:56:71:da:5b:a7:59:0a:5a:01:85:64:ca:
42:a3:d0:84:0c:47:fe:ee:92:cd:76:03:72:7d:1a:32:9c:a5:
61:f5:0a:2f:5c:d0:eb:c5:22:f9:01:48:57:29:90:20:e9:a0:
bf:c5:2e:2c:88:7e:3c:ea:d6:af:38:59:e1:21:71:ff:f1:a9:
2a:52:a4:f2:0f:87:db:21:bf:15:fe:5f:56:e4:f8:fd:16:f5:
ce:71:f3:f1:83:16:e0:12:59:34:2f:1a:a9:d3:9a:41:37:c0:
25:17:1e:4c:f5:ee:a3:be:81:3d:b2:5d:b5:de:75:3b:6f:a2:
2b:8c:c4:61:c0:52:3f:b2:6e:96:c4:9b:14:57:74:22:7e:db:
a2:b0:3a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:29:44 2026 by rpki-client