Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: HCyXtZSEdyvIQilodV+Jp7WoXEnSL9lzT0NRhlYuyp8=
Subject key identifier: F1:53:72:E1:ED:B5:6E:36:66:AC:F1:2A:EB:FB:4F:0D:FF:CE:B9:81
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 019D97E1C5405EC9254CA5FCCD9DBEE974EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 17EE
Signing time: Thu 16 Apr 2026 20:00:48 +0000
Manifest this update: Thu 16 Apr 2026 20:00:48 +0000
Manifest next update: Fri 17 Apr 2026 20:00:48 +0000
Files and hashes: 1: 6ptl5zZN6otvqTbmcxR9jeeyPTw.roa (hash: eOlv0gEoszbDU9BU/wQCemEUN+a4Reu5tk2gCPSosDY=)
2: U2pubs2iBylOl3mQStn1NV5HAeU.roa (hash: 3j+LrDTQ4DdD50DNjrhLgobkQoPmqtoqS9thhekJ5tY=)
3: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: 8hTvG7GL8PrwzIbKjkpD7/Ib2pUDISHPNZNXnPetx9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:c5:40:5e:c9:25:4c:a5:fc:cd:9d:be:e9:74:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Apr 16 20:00:48 2026 GMT
Not After : Apr 17 20:00:48 2026 GMT
Subject: CN=f15372e1edb56e3666acf12aebfb4f0dffceb981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b2:2a:59:af:5d:44:d4:5a:1e:1c:e1:b7:2c:
ff:68:be:f6:5f:69:9d:e0:f1:5c:d7:52:e2:5b:9f:
00:98:d5:1d:50:3f:68:0f:e6:a1:2b:33:46:f6:16:
46:d7:07:26:de:a5:97:3d:8f:cd:c3:a3:5c:f9:4a:
73:8e:78:35:94:39:d4:2f:92:ad:d5:35:76:e1:20:
9f:b3:7c:51:f0:22:9b:1b:4a:a5:ed:81:45:14:ff:
13:00:36:43:3b:01:79:bb:17:f8:93:d4:f1:0e:64:
7f:79:32:6b:c3:21:08:75:32:2b:4f:27:85:10:63:
35:17:36:f7:e2:60:b6:d0:93:65:50:4b:e3:5d:76:
98:f9:89:b0:85:13:76:19:cd:95:d7:e8:5d:c8:1e:
97:75:9a:18:3b:94:62:26:25:ee:33:3d:4a:33:a6:
32:af:10:ff:14:ad:d2:58:9a:0b:be:6e:46:c4:19:
5d:09:5d:bd:f3:e6:44:49:4e:27:a5:b3:3a:06:2f:
43:43:58:1a:09:01:02:b8:d7:46:bb:dc:f5:47:d6:
fc:2c:5e:5f:fd:68:e8:ac:c2:8d:6e:46:64:b4:d4:
c9:d0:27:3d:b6:f0:4e:9e:87:a4:9a:c7:88:d2:74:
6a:d2:d0:c8:0b:7b:4d:33:40:4a:f2:3b:3e:9d:29:
39:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:53:72:E1:ED:B5:6E:36:66:AC:F1:2A:EB:FB:4F:0D:FF:CE:B9:81
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:dc:4c:ae:e5:29:a2:c6:f5:27:4a:55:12:27:c8:36:7c:c3:
00:ac:1d:d8:98:55:df:72:88:d5:32:41:b4:c3:f4:52:29:97:
10:d1:42:89:51:d6:15:2a:36:ec:cf:c8:69:0c:2c:4b:47:2e:
5b:ca:a3:bd:1a:13:11:02:60:4b:23:2a:17:ae:ed:31:a6:26:
53:7b:ee:cb:04:6c:da:38:58:f3:5c:7f:6d:84:33:17:db:98:
34:4c:08:1a:94:c6:89:5a:0b:3c:04:c3:d6:31:20:5a:df:64:
02:b7:62:c6:75:d4:21:3d:5f:be:4e:4e:f8:05:29:b2:e2:83:
b5:8f:cf:d9:1d:01:a6:77:49:bf:36:b8:b9:e5:a6:30:22:d0:
b7:91:38:6e:93:cd:a9:64:b5:87:79:d0:b1:5d:f4:f8:93:3c:
ee:8a:a8:0e:13:de:18:61:f1:32:da:7a:87:02:80:99:ab:5f:
d2:5c:53:19:dd:a1:63:c3:37:85:dd:3f:9c:54:f1:bc:d5:42:
da:0a:67:fc:cc:d9:50:6a:d1:35:98:5d:8d:49:fc:60:7a:c9:
d6:43:04:34:f9:7c:09:82:7f:cd:59:f2:28:de:57:34:38:83:
35:8c:60:70:69:02:b1:af:b3:09:87:68:23:c4:8c:35:8c:db:
96:24:b6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:40:49 2026 by rpki-client