Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
File: YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft (raw, json)
Hash identifier: T2N3jKoy5T7Qj+42CIXncRDlT1SwS62NbU7ZCu2vM4o=
Subject key identifier: F3:A5:1A:37:EC:4F:19:D1:4F:6B:90:D2:22:8E:51:5F:AD:21:14:01
Authority key identifier: 61:F8:0D:83:D9:48:E2:48:B9:68:60:66:76:60:7B:84:70:E2:E4:1C
Certificate issuer: /CN=61f80d83d948e248b968606676607b8470e2e41c
Certificate serial: 01A1227860F77D3AE10EA791561BED9B230F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
Manifest number: 012E
Signing time: Fri 09 Oct 2026 21:01:16 +0000
Manifest this update: Fri 09 Oct 2026 21:01:16 +0000
Manifest next update: Sat 10 Oct 2026 21:01:16 +0000
Files and hashes: 1: 1-LvrevNxn8xjvxwWO9shI6PuFvU.roa (hash: iqWesMjsdrjmX1g6QE9vIbNV9BRrg4iuwDL5XHq0ynQ=)
2: YfgNg9lI4ki5aGBmdmB7hHDi5Bw.crl (hash: M5eU+VcqqtaYAbPTvpgDmkVlDv23/QbVHN17D21/6oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:78:60:f7:7d:3a:e1:0e:a7:91:56:1b:ed:9b:23:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f80d83d948e248b968606676607b8470e2e41c
Validity
Not Before: Oct 9 21:01:16 2026 GMT
Not After : Oct 10 21:01:16 2026 GMT
Subject: CN=f3a51a37ec4f19d14f6b90d2228e515fad211401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:c1:33:9a:b9:c6:d8:af:8d:f4:e6:20:3a:
08:f4:2a:30:17:4d:2a:58:9b:d8:8e:05:19:90:f5:
ec:e9:5e:75:bf:92:e6:24:26:ad:8c:10:aa:43:d1:
30:a0:ec:c7:9e:ab:a0:1f:38:c3:2b:da:55:58:53:
f8:88:bd:6c:44:45:65:d6:e3:cc:8b:8b:c5:c5:92:
aa:76:67:73:fa:a8:c2:a4:03:0b:91:41:2a:cd:82:
c5:88:1c:ae:ea:92:3d:cb:07:d5:fa:99:e4:95:1d:
a4:2e:e8:fe:96:21:80:c5:41:2d:3d:6b:4e:bb:e9:
69:2c:73:2c:4f:54:2f:dd:e3:08:a0:b4:1f:9c:09:
b9:52:07:e3:d0:38:c7:8b:9e:b2:4e:27:86:14:9c:
ee:d5:60:b3:50:ab:c1:61:d5:3a:56:bd:79:8c:19:
02:ad:8e:a7:61:e6:51:88:fd:63:8b:5c:70:c9:de:
b7:8a:49:e0:24:d3:62:aa:dd:be:8a:52:06:dc:c6:
a4:af:67:c7:ef:61:e1:cd:56:25:58:d6:21:b0:4c:
05:fb:5a:39:4d:c4:6c:3f:4f:03:66:69:ae:91:d3:
96:a2:3d:34:92:02:44:14:a6:ee:04:c5:e3:cd:6a:
ac:ea:d6:29:35:10:0c:da:c4:22:79:7a:8e:66:3c:
0a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A5:1A:37:EC:4F:19:D1:4F:6B:90:D2:22:8E:51:5F:AD:21:14:01
X509v3 Authority Key Identifier:
keyid:61:F8:0D:83:D9:48:E2:48:B9:68:60:66:76:60:7B:84:70:E2:E4:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a8:b2:9a:c8:ba:74:8a:bd:21:8b:b0:18:bd:6a:77:ea:5e:
e8:b9:d4:7b:b4:ba:f6:9f:da:8e:93:1b:68:a0:d9:54:30:38:
69:93:58:7c:a8:f0:9c:7b:43:95:31:8f:01:fa:54:73:d2:e9:
b6:43:42:a5:51:3f:05:b3:79:71:29:dd:c1:a2:ea:4f:1d:3b:
8a:20:ad:e8:71:f0:1c:06:d8:7e:63:fa:5f:c2:68:40:5e:38:
88:ff:f1:9a:2a:04:c1:58:b9:ec:c3:6c:7f:ed:c4:f7:0c:b9:
42:e4:f4:08:6b:1e:34:b6:84:8f:04:83:19:0a:93:92:c1:03:
fd:c1:57:c4:ce:9f:6e:cf:62:c4:eb:28:9a:4d:dd:8b:8c:f4:
21:ff:5d:11:9c:5c:55:7d:0b:22:94:f2:4d:c5:02:f1:2d:2a:
80:36:50:71:f2:17:01:fb:23:06:b6:36:b8:5f:86:9d:e0:84:
38:91:34:78:ca:07:97:ca:bb:f6:02:63:39:98:5c:41:bf:4f:
e7:e0:8b:d3:d5:b9:50:36:81:22:dc:79:e3:9b:89:f3:a5:ce:
57:66:fb:ba:4a:2b:8c:31:af:c6:c6:da:00:bd:89:16:4c:00:
57:c0:bd:38:f8:fd:fc:e6:46:32:a6:51:c0:de:7c:c6:88:e5:
a5:02:3d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:50:12 2026 by rpki-client