Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: LJ2hmAEZTdPj6FJjhH9ePuZh6EphInsgGxPG4Aua+/s=
Subject key identifier: BC:50:BD:3A:9A:85:5A:6F:62:9D:A4:79:6B:68:48:5B:9A:13:75:D8
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 01A0C4E96B0FC6CBEB463875D9CB88E48DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 1993
Signing time: Mon 21 Sep 2026 17:00:26 +0000
Manifest this update: Mon 21 Sep 2026 17:00:26 +0000
Manifest next update: Tue 22 Sep 2026 17:00:26 +0000
Files and hashes: 1: 6ptl5zZN6otvqTbmcxR9jeeyPTw.roa (hash: eOlv0gEoszbDU9BU/wQCemEUN+a4Reu5tk2gCPSosDY=)
2: U2pubs2iBylOl3mQStn1NV5HAeU.roa (hash: 3j+LrDTQ4DdD50DNjrhLgobkQoPmqtoqS9thhekJ5tY=)
3: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: bDZRkNASndiLLRqD9nzNN7b0BSufcj+HGOv5Uzrwt0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:6b:0f:c6:cb:eb:46:38:75:d9:cb:88:e4:8d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Sep 21 17:00:26 2026 GMT
Not After : Sep 22 17:00:26 2026 GMT
Subject: CN=bc50bd3a9a855a6f629da4796b68485b9a1375d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:95:70:c7:52:bd:3c:2c:b0:1a:6d:64:a0:
5f:e3:e8:d7:1a:fa:e0:43:10:91:68:9d:6c:3c:ac:
c2:9e:4e:35:a2:2a:46:10:b8:63:57:6a:12:8c:0d:
b9:9b:e7:57:b6:62:89:ea:45:d0:6b:5a:6e:58:32:
65:b1:e9:b0:31:7d:e4:5b:23:e9:28:88:9b:aa:27:
aa:09:e6:ea:b1:ac:7a:84:17:33:a1:51:78:3f:b1:
f0:a2:aa:32:f1:16:57:7d:a3:3f:cb:aa:d5:cc:36:
04:e9:91:af:3a:9a:25:59:2f:b2:a3:1d:29:57:aa:
23:96:c4:3a:92:65:82:e1:e2:bd:8f:36:40:15:7c:
72:fd:91:9f:a2:1b:5a:db:3b:1d:92:55:ce:39:ec:
49:ee:28:f4:33:14:c3:6a:7e:e3:c7:00:dd:3c:31:
6e:76:66:c7:42:85:4d:32:0f:92:1f:60:b6:d7:0f:
8d:43:a4:f4:1a:97:ab:e0:6d:31:e0:99:32:9f:04:
d3:c5:5e:0c:9f:9b:2f:db:4f:94:59:7e:d6:b5:52:
7f:6d:f6:d1:40:cb:47:df:8d:00:56:d7:8a:16:c6:
d4:70:43:23:12:e5:0b:bd:38:48:92:17:6a:c6:5b:
16:60:9d:cd:09:6a:00:64:fe:8e:86:ee:d6:53:85:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:50:BD:3A:9A:85:5A:6F:62:9D:A4:79:6B:68:48:5B:9A:13:75:D8
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c2:3a:90:b1:ee:a9:68:0f:df:dc:13:44:13:81:2a:61:35:
88:12:b9:b0:65:9c:67:b1:8e:60:e7:c5:d2:b1:d9:8a:a4:b3:
8b:2c:6d:8e:88:7c:af:bc:b5:45:0c:8d:d7:2d:a3:90:99:50:
44:71:dc:8f:c6:6e:94:6f:ae:27:3e:4b:15:a7:25:a9:8b:3b:
25:66:82:1c:71:76:b6:7d:fc:4e:a3:fc:dd:a0:f2:2c:05:b5:
3c:f3:3c:7a:f8:04:09:bc:cc:2e:94:d8:f4:90:ca:40:05:4b:
b6:82:59:53:82:49:29:af:86:6b:9d:41:4c:1c:4c:28:e3:b7:
31:ce:34:c4:83:ba:a0:6a:2f:22:14:95:e9:22:23:75:5b:7c:
43:a6:87:70:88:0f:43:77:5e:0d:06:65:77:b4:b4:a1:bd:9e:
0e:2b:2a:e2:70:cd:01:f0:8d:c3:6b:7a:81:7c:ba:39:42:a0:
79:f6:bb:bb:62:1c:6e:44:00:d7:ca:d3:2e:ab:3e:f7:e4:46:
b9:47:5c:ba:14:e5:bc:bf:24:d4:4a:e4:56:7f:45:fd:79:1a:
31:5c:d5:34:97:79:74:78:55:6f:07:a6:37:e4:51:1b:cf:1a:
da:54:50:2b:a8:e6:44:cf:cb:88:a7:56:e9:01:62:d6:54:99:
27:af:0c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:03:37 2026 by rpki-client