Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
File: YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft (raw, json)
Hash identifier: Cg5nrQ1Nqx9H+q2DncAY/DGxIffMQuTNxWrEoH2ziOw=
Subject key identifier: D5:30:1D:37:03:70:3B:DB:A2:6F:87:A7:92:6E:AD:7B:A6:72:FD:CC
Authority key identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
Certificate issuer: /CN=6149cbba3e6629beaebfb69668678ada51744898
Certificate serial: 01A14014E2A75D4244E295BBF3F7E3E1385B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
Manifest number: 17CE
Signing time: Thu 15 Oct 2026 15:01:12 +0000
Manifest this update: Thu 15 Oct 2026 15:01:12 +0000
Manifest next update: Fri 16 Oct 2026 15:01:12 +0000
Files and hashes: 1: YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl (hash: rL/jy4d85Z7OkCwMffF/kcfT9c4GEb29l1qRh9EjJ+Q=)
2: v872mIxxwSGV2ha6Yd9jq9CMUao.roa (hash: 1G9sBjvfPqj7U0dttH4sUsWBNP9ecKYoKzenyr22mAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:14:e2:a7:5d:42:44:e2:95:bb:f3:f7:e3:e1:38:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6149cbba3e6629beaebfb69668678ada51744898
Validity
Not Before: Oct 15 15:01:12 2026 GMT
Not After : Oct 16 15:01:12 2026 GMT
Subject: CN=d5301d3703703bdba26f87a7926ead7ba672fdcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:15:ed:2a:99:cb:af:49:64:03:78:24:8a:
de:b5:02:cf:ef:c3:05:1c:40:b6:94:2a:24:79:77:
f0:de:9a:06:4c:b5:01:2f:c7:45:21:57:15:75:02:
30:3c:a2:6d:72:f9:94:04:59:41:70:68:8f:20:90:
d7:5d:dc:c2:72:9d:0d:98:01:78:30:44:da:61:a2:
fe:cd:47:02:e1:34:60:72:0b:07:3b:3d:f3:6c:cb:
2a:87:de:ac:13:08:8a:7c:ae:08:b7:29:43:d6:f9:
1a:71:e2:76:13:dc:6a:f0:f1:ec:b3:08:24:b2:56:
e9:fe:31:e9:71:12:e3:67:81:4f:e0:96:2c:3a:03:
4c:b0:5b:b7:be:25:34:09:72:36:d9:f1:08:47:15:
47:47:c4:1b:cb:41:e9:4e:98:35:c7:fc:f2:a4:59:
14:35:32:15:ca:8f:e6:96:1e:8f:27:ca:55:0f:93:
0e:cb:4b:16:61:4f:66:cb:ac:07:9f:c8:63:a1:e4:
cb:0d:49:ad:e2:7c:eb:f3:9a:93:19:f3:62:a0:e0:
f7:55:b2:4c:f5:da:f6:42:4f:ba:88:cf:82:21:6c:
55:db:35:0e:d9:a9:f4:8b:ed:8d:05:e4:30:ed:1e:
eb:04:e5:eb:38:ac:a0:6a:d8:9d:dd:8f:3b:eb:52:
1d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:30:1D:37:03:70:3B:DB:A2:6F:87:A7:92:6E:AD:7B:A6:72:FD:CC
X509v3 Authority Key Identifier:
keyid:61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e9:f9:3b:8c:e8:a5:2f:dc:a5:52:aa:bb:6c:24:a5:df:b6:
f8:b5:f8:c0:9d:ea:ae:12:a9:12:1f:37:6b:14:c1:9c:4e:1a:
c4:64:fe:ed:91:61:b2:b3:ca:5b:2e:29:b8:cf:61:bb:be:b6:
c6:a1:65:f8:23:33:8d:c9:70:e3:8e:f2:b8:9b:49:6e:7c:eb:
a2:d1:15:68:34:c9:db:d2:ed:bb:48:38:4c:fb:7d:50:e1:ce:
d0:76:fb:5a:76:c7:3f:16:e0:3e:50:15:5a:b0:98:3a:ce:4d:
38:47:cb:9e:fc:3d:af:19:ce:92:a4:84:97:18:40:df:61:8e:
e7:5e:8f:66:88:df:36:85:c8:3f:86:f6:74:4e:46:d3:ee:15:
56:8e:55:c5:7b:ce:d9:3e:31:d2:6f:8e:da:75:1b:bd:8c:cf:
4e:34:b4:d5:66:2a:cf:17:6f:80:93:d8:01:52:84:e9:a5:2d:
88:43:b7:f3:3a:39:9e:8f:20:5c:2f:be:6a:6d:5d:fc:aa:ae:
cb:7b:af:1a:e3:c7:fe:ca:4b:0b:2c:71:6d:db:74:c2:e7:61:
c6:97:eb:1d:6d:40:79:40:78:75:39:33:16:d6:12:ea:c1:0d:
b9:3d:07:8d:e6:e7:51:f9:15:bd:ae:c3:f2:d3:28:2c:2a:93:
80:12:d2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 23:51:06 2026 by rpki-client