Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
File: YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json)
Hash identifier: szwg9+O8Rc5XYBndy5GmL6ZXqTOOqEwEhsURdZvPOn8=
Subject key identifier: C1:5E:88:9F:8C:D8:75:63:D8:8D:DC:E4:10:A9:12:CC:6E:A7:05:91
Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
Certificate issuer: /CN=61fbd8887da84471318d83884ac005f01b44fd49
Certificate serial: 01A0E2BE502E16FEF9A988B2DE5A60A441BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
Manifest number: 1398
Signing time: Sun 27 Sep 2026 12:01:57 +0000
Manifest this update: Sun 27 Sep 2026 12:01:57 +0000
Manifest next update: Mon 28 Sep 2026 12:01:57 +0000
Files and hashes: 1: DhX1AL3YLB9SdItGYNcjsUvsOGE.roa (hash: +Q+chkOuahBdoqYleJ582M9GOlo0NXVt0stFukum49g=)
2: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: FXaq7/mVlCSmIj2ZcSBOjmoDy/lJFqned02MB48JCfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:be:50:2e:16:fe:f9:a9:88:b2:de:5a:60:a4:41:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49
Validity
Not Before: Sep 27 12:01:57 2026 GMT
Not After : Sep 28 12:01:57 2026 GMT
Subject: CN=c15e889f8cd87563d88ddce410a912cc6ea70591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:97:9f:08:67:86:82:9f:9b:9f:7d:8a:b4:
d0:28:09:9e:4c:68:e6:72:46:13:50:65:4f:21:4b:
69:98:76:b5:9f:b1:1a:d8:87:ce:0e:d0:92:da:ed:
60:c8:ef:f9:62:26:80:52:10:b1:8d:d2:f1:7f:ba:
a6:bf:f8:53:a7:b9:32:46:21:62:09:24:31:c8:4b:
8b:ce:84:e6:a9:6c:09:39:80:7f:75:13:ac:7e:f6:
40:2d:d1:f1:32:7d:72:0e:5c:4d:ec:bf:51:51:41:
71:ad:a9:9c:91:fd:d1:80:81:b3:f4:fa:fc:23:e2:
4a:7d:d0:d9:5d:f8:e1:1e:ed:cb:3e:47:68:50:f0:
3e:54:45:aa:58:f5:71:cf:d3:1d:64:29:23:71:7a:
5f:b0:9e:47:f4:b2:81:a8:a9:f7:df:fa:3f:ce:df:
c4:2a:44:9d:5d:4e:d2:50:25:92:aa:bf:22:2f:58:
74:e3:ec:15:b7:95:b5:ab:db:43:c3:c1:cf:71:09:
c8:8a:1b:c3:c0:4c:2e:e9:66:2b:6f:e0:1b:d6:61:
65:8a:ce:6e:fa:ff:4b:73:7d:1c:3c:98:f4:13:b8:
42:e1:49:dd:52:71:22:66:79:60:a8:95:bc:52:a2:
28:80:8d:17:76:78:06:17:cc:ba:52:1e:3d:d3:0b:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5E:88:9F:8C:D8:75:63:D8:8D:DC:E4:10:A9:12:CC:6E:A7:05:91
X509v3 Authority Key Identifier:
keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c7:85:8c:a0:19:49:c8:c8:c2:82:f7:81:dc:21:6e:69:c1:
83:bc:b7:8d:8c:ba:6c:d5:d7:55:af:ab:ba:74:47:27:d5:68:
d7:66:f1:ad:2d:03:d2:bb:5d:97:e7:d2:94:a0:55:cf:b9:7d:
69:58:a5:fa:8e:2c:67:7c:27:69:aa:67:b8:76:53:4e:72:91:
ec:76:24:6e:44:df:81:a6:59:aa:cb:90:66:11:af:4a:65:98:
4e:9f:a1:64:40:cf:25:20:d1:f6:de:7f:54:eb:5a:32:ab:e4:
03:39:66:b8:f3:98:87:63:26:0a:76:07:e4:d1:32:2f:21:cf:
06:c3:b2:ef:23:33:39:ed:ba:49:87:42:85:2a:9c:ab:0c:b8:
42:60:85:26:e6:db:d8:d7:f8:c0:47:84:19:a7:53:29:58:3d:
bd:23:8b:1d:98:67:d0:04:70:79:eb:a3:3d:e6:30:27:ae:f5:
fa:21:4c:5d:7d:95:6a:60:fa:1e:dc:db:e2:fb:45:34:8d:41:
81:02:44:5c:13:4d:29:39:d7:fc:4d:2f:a3:9e:15:72:bb:00:
81:c1:67:ba:d1:bb:1b:d5:91:21:ec:fa:d1:26:2a:7f:9b:8c:
8c:e7:f8:d3:af:29:2d:7a:19:b7:98:af:05:91:f4:82:95:ad:
80:48:83:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:42:51 2026 by rpki-client