Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
File: ylF4miMTWsImjCKihWAKX5sFN3A.mft (raw, json)
Hash identifier: yKGF/K7Jr3Zcfg0hksMbie6MfI+2T+QSarkRhu1OGgw=
Subject key identifier: BC:49:87:3C:72:3B:61:2B:09:6F:67:3E:24:47:53:91:52:15:BA:11
Authority key identifier: CA:51:78:9A:23:13:5A:C2:26:8C:22:A2:85:60:0A:5F:9B:05:37:70
Certificate issuer: /CN=ca51789a23135ac2268c22a285600a5f9b053770
Certificate serial: 01A0D75FBACD01424068B3FA261C0633B9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
Manifest number: 15D7
Signing time: Fri 25 Sep 2026 07:02:50 +0000
Manifest this update: Fri 25 Sep 2026 07:02:50 +0000
Manifest next update: Sat 26 Sep 2026 07:02:50 +0000
Files and hashes: 1: sr2F0zsExdSQr-zgnrk17i9FhUg.roa (hash: hKUfnAYzGISD3itupUfCkChJsvs636FejLl9Oqr8aQA=)
2: ylF4miMTWsImjCKihWAKX5sFN3A.crl (hash: ZK4qRnRkOtTmzN/qb4HOFymXO3Qd+6U1Y0ZxvqZo34I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:5f:ba:cd:01:42:40:68:b3:fa:26:1c:06:33:b9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca51789a23135ac2268c22a285600a5f9b053770
Validity
Not Before: Sep 25 07:02:50 2026 GMT
Not After : Sep 26 07:02:50 2026 GMT
Subject: CN=bc49873c723b612b096f673e244753915215ba11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:43:23:f9:23:52:7a:1c:51:75:89:09:7e:
cc:8e:78:1e:22:53:d5:3f:9e:f8:e5:12:18:c5:2b:
51:69:5e:42:3d:9c:6f:f2:cd:0f:5a:7e:d2:6e:25:
ce:9c:c7:3c:a4:8d:6a:7a:25:7a:ae:a2:23:3c:75:
c5:a2:c8:8a:bb:81:a7:27:e8:62:9b:80:b0:75:00:
b4:2f:5b:c4:77:c3:18:bd:bc:39:3a:cf:9b:4e:28:
fe:3a:dd:16:97:88:bb:8f:fa:9c:e9:d6:6d:3c:7f:
2b:c0:d7:bc:80:7b:c0:dc:f0:b3:64:e5:81:7a:18:
f1:28:09:c7:0d:e0:22:fc:94:6f:c3:1f:4e:49:04:
48:4f:62:d9:41:6a:6a:2d:7e:72:63:e6:98:9d:17:
26:e9:00:a9:2f:2c:2c:1c:d1:3f:78:2c:10:1e:ff:
a8:96:47:d1:a0:32:37:f7:a4:28:d7:f9:51:f8:d7:
42:08:89:7d:a3:c3:81:81:27:3b:91:09:e6:08:15:
e0:57:0a:73:70:21:4c:ac:85:bc:7f:c7:bc:1f:93:
f1:c9:cf:7f:fd:8d:f4:d7:41:6e:65:39:73:9c:3d:
8c:bb:a8:cc:7b:f4:ae:43:5b:bf:99:03:7d:0d:46:
5e:5b:d2:4d:76:8d:70:b6:e3:68:52:48:87:bd:d3:
86:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:49:87:3C:72:3B:61:2B:09:6F:67:3E:24:47:53:91:52:15:BA:11
X509v3 Authority Key Identifier:
keyid:CA:51:78:9A:23:13:5A:C2:26:8C:22:A2:85:60:0A:5F:9B:05:37:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:03:f5:02:6f:82:4b:99:4d:20:5d:b3:9e:9b:02:83:14:48:
ee:c3:41:55:08:58:99:84:71:97:1d:81:11:d6:99:cb:4e:9e:
ed:a9:9c:64:b0:ac:12:dd:ed:73:8b:bb:8a:b1:4b:f6:c5:fd:
43:b6:3f:d9:8e:25:7b:be:dc:d3:b7:e5:c9:df:eb:b7:d4:b8:
b4:5e:ee:f5:3a:48:76:c3:ac:12:4e:a7:87:2e:3c:78:15:4f:
3c:e9:06:8d:b1:49:55:5c:68:ca:c8:a3:8a:13:b5:53:70:d4:
98:9e:97:6a:30:db:6a:ba:9f:2e:95:a5:79:e9:a1:f3:09:88:
91:91:b9:94:bb:3c:3c:59:8f:68:45:8d:91:0c:c5:ef:39:ad:
d3:a8:8c:f2:d5:e6:f5:5c:15:c3:65:9c:3d:60:94:3b:de:49:
1a:09:ff:6f:bc:b5:dd:13:ae:8d:6e:c0:2d:a3:2f:af:fe:06:
8f:ad:1f:3d:4f:15:16:8a:f1:f5:f6:a2:9e:85:78:2f:2d:7a:
e2:71:39:f3:29:4e:47:f2:2c:68:94:78:f3:36:dd:89:82:64:
a8:0d:bd:81:4d:d5:ed:70:80:4b:3a:ad:a5:b3:47:60:e5:e0:
fd:e2:96:bc:1b:14:04:48:42:1f:4c:44:b9:a5:ba:2d:32:70:
22:3d:c8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:19:18 2026 by rpki-client