Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
File: YfTZxfoK42S02B7bxNGCAPAPvH8.mft (raw, json)
Hash identifier: 0pT0edh4b1ZZ04BF2FCfw9orV/jBZKOGRXEfxGXmeJ4=
Subject key identifier: BA:FF:29:AB:E2:75:D9:51:17:CE:53:92:99:7B:67:54:52:D6:70:DF
Authority key identifier: 61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
Certificate issuer: /CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Certificate serial: 01A0C8FD0F0E801E05C4C4148B13E3E3C1DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
Manifest number: 041D
Signing time: Tue 22 Sep 2026 12:00:22 +0000
Manifest this update: Tue 22 Sep 2026 12:00:22 +0000
Manifest next update: Wed 23 Sep 2026 12:00:22 +0000
Files and hashes: 1: YfTZxfoK42S02B7bxNGCAPAPvH8.crl (hash: XWjjnlg6uYcKUWuKufP1KCbXMZV90sbao8S7fnnq7lk=)
2: i757eDGPyWXy1WJ59_NsKxP9nBk.roa (hash: aclUO+YpHA3b3E++8LC8TZOgc8p99LqEe7lxYmVbjYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:0f:0e:80:1e:05:c4:c4:14:8b:13:e3:e3:c1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Validity
Not Before: Sep 22 12:00:22 2026 GMT
Not After : Sep 23 12:00:22 2026 GMT
Subject: CN=baff29abe275d95117ce5392997b675452d670df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:14:0b:e8:cf:bb:63:be:82:3a:91:5f:54:a4:
d1:10:26:9a:47:68:37:66:46:13:9e:4e:54:c1:c7:
1b:3d:e1:0e:0e:d4:7f:e8:32:76:50:af:0e:f1:fd:
62:9b:dd:cb:c7:32:7d:a1:be:12:c7:07:67:41:27:
58:7e:40:c8:61:5f:96:66:af:2c:c9:8b:8a:bf:17:
60:f8:09:2f:6d:a2:71:4d:35:b8:0d:bc:29:2f:0d:
db:71:fd:21:2b:69:c0:c8:8d:68:00:4d:a7:c9:e0:
aa:0d:e1:6f:7a:a4:c8:ad:2a:48:38:bd:24:9c:bb:
e8:4b:d5:3d:82:86:63:04:38:fe:95:2f:2f:8c:32:
62:44:c7:a1:af:8f:ae:86:c6:0d:95:31:ed:b4:60:
fd:d0:48:18:f4:2d:2d:a1:90:09:c2:69:23:cb:e2:
8e:0c:b6:38:f7:8f:45:93:40:5d:de:ba:cb:64:4c:
9e:e2:29:c8:21:f3:a2:cf:54:49:5e:2a:99:46:44:
11:f2:a9:5f:17:69:95:fc:2d:05:22:c0:7d:71:a6:
5c:6c:54:d9:62:21:41:eb:82:21:3a:b5:bf:1d:b7:
8d:92:fd:7e:a9:c2:99:31:de:66:8c:25:36:5c:b1:
4d:8c:09:9b:af:60:bb:60:90:93:e1:6e:fc:4a:da:
86:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FF:29:AB:E2:75:D9:51:17:CE:53:92:99:7B:67:54:52:D6:70:DF
X509v3 Authority Key Identifier:
keyid:61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:37:5f:7a:24:25:b1:72:ba:c3:18:fb:28:48:a7:48:90:b2:
72:02:e9:dd:77:a1:46:dc:db:b4:13:0a:97:80:ad:db:f2:54:
99:70:df:e1:66:e2:4e:90:47:1e:07:39:e3:1a:be:63:9c:db:
ab:b7:f9:7f:fc:2a:f4:61:66:cd:9b:21:af:51:c4:a3:04:0e:
d1:a0:bd:cc:94:91:70:6a:30:81:7e:09:02:4c:a2:81:4c:82:
7c:11:d5:e2:d5:fc:30:f5:82:97:b9:dc:58:c2:bb:4e:27:9f:
1f:a3:3e:ee:b2:2d:f8:a8:78:8b:e8:32:53:c4:42:0d:ca:8b:
c1:6c:53:07:3d:2e:74:4d:c4:c3:c7:36:01:b8:20:0d:70:a2:
7f:14:92:91:d3:8d:eb:0b:c7:8e:30:cb:ac:e8:4a:81:37:28:
fe:1a:c1:06:fb:45:8c:ec:2c:05:e5:87:1c:8b:89:69:3e:4d:
3e:9b:42:fe:3b:92:51:4b:68:b6:ef:e2:24:b9:15:fa:fc:f2:
75:a9:13:f0:25:aa:a4:e1:4f:9d:bb:da:ea:03:da:14:16:1d:
89:bd:4a:93:ec:cf:fa:78:e3:12:e0:09:a1:91:ab:0b:f6:f9:
8d:e2:50:25:64:7e:a6:06:30:e4:70:3d:1f:8b:7b:bd:71:b6:
5d:1a:65:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:53:19 2026 by rpki-client