Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: jL0HHbXEcFO0bOiadIRlvMvJUAzD9jduM871cP+VpIc=
Subject key identifier: BF:AF:11:C5:D0:75:FF:F7:AF:57:32:62:DE:85:18:97:63:CC:C3:D3
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 019CAC47368E81DA671160B496BA9F96A188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 1774
Signing time: Mon 02 Mar 2026 02:01:13 +0000
Manifest this update: Mon 02 Mar 2026 02:01:13 +0000
Manifest next update: Tue 03 Mar 2026 02:01:13 +0000
Files and hashes: 1: 6ptl5zZN6otvqTbmcxR9jeeyPTw.roa (hash: eOlv0gEoszbDU9BU/wQCemEUN+a4Reu5tk2gCPSosDY=)
2: U2pubs2iBylOl3mQStn1NV5HAeU.roa (hash: 3j+LrDTQ4DdD50DNjrhLgobkQoPmqtoqS9thhekJ5tY=)
3: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: vvWZgbtyzRelNfXrZqSh27p53JtF0O/m4N6cfR1blIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:36:8e:81:da:67:11:60:b4:96:ba:9f:96:a1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Mar 2 02:01:13 2026 GMT
Not After : Mar 3 02:01:13 2026 GMT
Subject: CN=bfaf11c5d075fff7af573262de85189763ccc3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:2c:3b:7a:b3:81:7a:d3:3a:35:f9:42:a6:
cd:cc:54:69:52:c7:85:ab:c5:39:89:39:b8:c0:a8:
a2:77:ed:c2:e4:1d:9e:03:0c:29:9a:45:d2:22:a7:
4a:cf:c6:66:97:75:54:5f:1b:2c:d8:1f:1e:31:15:
67:10:51:77:bf:56:57:0f:d2:73:a5:e8:40:52:b8:
db:43:40:7d:8e:63:92:22:c5:d2:9e:2b:ca:26:56:
32:8c:6b:78:42:00:db:17:58:cd:1f:26:31:00:81:
ee:5f:f7:54:59:c6:45:13:86:68:bb:0b:66:dc:e7:
d8:01:fe:8e:f1:73:b0:b5:08:db:46:fd:af:bf:0c:
fd:3f:e9:a1:eb:0b:fd:dd:11:b5:73:fd:d7:ea:a4:
d5:ae:93:93:91:8a:c9:f3:93:ff:17:52:93:f1:65:
7d:97:b6:ca:89:9e:a0:65:ee:c9:ea:83:e3:7c:22:
ef:5c:42:37:09:33:c5:ee:d4:a1:07:e5:c8:75:b7:
63:fe:0f:ee:47:b0:19:e8:67:99:e2:8d:c5:cc:02:
44:63:6b:ed:df:2b:0a:b4:42:9b:ed:d4:63:65:6c:
1f:df:3e:fb:6b:d3:fa:78:cf:e4:21:88:9d:85:6e:
b1:7d:8b:ea:76:a0:ef:0c:71:d7:ec:3c:fa:ec:2b:
c7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AF:11:C5:D0:75:FF:F7:AF:57:32:62:DE:85:18:97:63:CC:C3:D3
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fa:4b:3b:65:9b:aa:0f:4a:ae:55:ea:0b:37:86:45:ce:5a:
1f:da:a5:34:e8:d5:20:89:35:69:61:3d:0d:4f:19:d4:53:2e:
c4:e9:fd:45:73:f4:a6:cf:03:a4:9e:b2:30:0c:23:07:66:0a:
6c:4e:01:00:5b:3d:57:5f:a6:a8:97:33:a1:3b:c1:32:b4:81:
71:db:5c:fb:2a:b8:8a:de:5d:9b:e1:39:64:f4:7e:30:3e:ac:
9d:1a:7e:99:b3:d0:4f:48:87:94:ce:69:62:4b:b3:83:ea:4a:
41:cd:26:b6:7e:6a:74:b5:ca:ce:4c:8c:cd:42:e8:eb:7f:61:
a5:5f:82:a1:59:5b:7b:75:94:6f:7b:8d:41:5f:72:c7:2b:c2:
55:21:f4:90:48:33:18:d1:21:88:f9:38:1d:fd:e4:6b:23:e1:
fd:49:f9:cf:88:16:5f:fb:e6:36:e5:5d:a5:7a:b1:15:d5:b6:
7b:4c:3e:3e:fa:58:e3:3a:4e:f1:e7:5e:a2:4a:81:80:58:49:
16:95:ff:6d:8a:55:28:02:9c:39:eb:a3:f8:fe:ea:99:96:e7:
22:ed:ae:8d:a6:e5:0b:64:f0:cc:38:09:12:0e:62:23:0f:68:
d6:d3:af:d8:31:70:57:83:03:1f:06:fe:f3:b5:c8:28:47:6a:
03:8a:2d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:13:54 2026 by rpki-client