Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
File: YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft (raw, json)
Hash identifier: gDAfROAnpJLfXLU5PTC/6vKVrIjAJ7YNcVD4stoRWSQ=
Subject key identifier: 61:2C:3E:5C:AF:CD:F0:13:23:86:E7:77:61:F6:82:9E:23:17:F6:FD
Authority key identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
Certificate issuer: /CN=6149cbba3e6629beaebfb69668678ada51744898
Certificate serial: 01A12AD6F4D4ACA537F0AD88300FAC0DB189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
Manifest number: 17C3
Signing time: Sun 11 Oct 2026 12:01:32 +0000
Manifest this update: Sun 11 Oct 2026 12:01:32 +0000
Manifest next update: Mon 12 Oct 2026 12:01:32 +0000
Files and hashes: 1: YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl (hash: aSKqOD+DrnktyxFUNEnEEJOqe1WsD1DikOK8khE1Nlc=)
2: v872mIxxwSGV2ha6Yd9jq9CMUao.roa (hash: 1G9sBjvfPqj7U0dttH4sUsWBNP9ecKYoKzenyr22mAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:f4:d4:ac:a5:37:f0:ad:88:30:0f:ac:0d:b1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6149cbba3e6629beaebfb69668678ada51744898
Validity
Not Before: Oct 11 12:01:32 2026 GMT
Not After : Oct 12 12:01:32 2026 GMT
Subject: CN=612c3e5cafcdf0132386e77761f6829e2317f6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:cf:df:b8:b2:6e:4d:ac:b3:2b:e4:95:ed:
f3:c0:a0:80:a4:6b:ff:91:a7:dc:1b:84:f4:1e:53:
4c:90:85:9f:2f:2b:51:1f:93:fb:90:e9:e3:a7:e5:
46:90:7f:fd:a6:b0:85:8a:a0:8d:32:a0:89:04:d4:
17:df:2e:7b:27:3b:bb:44:96:8e:6c:07:92:66:38:
13:2b:ea:e6:b2:db:5d:5d:03:f3:6a:50:0f:08:1d:
fe:4a:6b:fd:de:ba:99:0d:40:d1:f2:bf:1f:d5:50:
2e:c1:c0:17:e0:28:30:50:4b:39:93:59:44:b4:47:
d4:27:73:39:f7:a3:74:bc:77:89:1b:70:0b:76:dc:
80:97:40:b1:d7:9c:91:c1:74:86:45:43:6e:56:b5:
57:94:d7:ac:01:50:e7:04:48:21:88:7f:e7:fc:9c:
9c:41:8a:0a:35:e5:66:03:40:7d:aa:f9:9e:f6:e6:
c7:42:c7:0f:c1:33:83:6b:8c:53:19:a0:ed:4a:7b:
21:02:40:ee:80:f3:27:51:79:03:c2:aa:8e:4e:f6:
8a:d1:32:17:b8:b6:cb:39:09:1f:91:a5:32:2d:c5:
12:32:49:ec:4a:03:c1:c8:95:e3:74:2e:aa:f6:69:
f1:62:77:1c:3d:86:a2:ee:f5:aa:53:58:ba:1b:3c:
91:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2C:3E:5C:AF:CD:F0:13:23:86:E7:77:61:F6:82:9E:23:17:F6:FD
X509v3 Authority Key Identifier:
keyid:61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7a:21:3e:86:91:dc:36:23:42:49:85:3e:48:3a:6c:e6:ef:
62:f0:41:bc:c8:73:1c:75:dd:7c:78:f1:51:67:fa:0f:e6:f3:
ee:fe:88:1b:73:60:07:90:2d:18:52:71:bd:38:ce:7c:a0:d6:
15:ee:f5:96:71:ed:5f:c2:6b:38:b7:9a:2f:b1:44:eb:b5:5c:
f2:e5:8a:11:27:f1:97:75:63:6d:50:f4:e0:b0:1d:44:02:fb:
fb:a0:53:5f:48:b4:f4:8e:4d:51:12:c1:ab:2d:95:ce:0b:aa:
d9:23:6e:d7:4b:7e:6c:aa:24:19:bc:3c:38:58:34:94:9f:d1:
70:48:6a:6d:42:b7:18:1d:d3:75:77:d1:2a:7f:99:59:29:8f:
fd:1b:5b:af:36:a1:78:61:fc:62:3f:06:d9:76:63:87:d7:3f:
7f:1b:af:27:db:ce:7a:3e:6f:ff:77:af:d1:25:e1:a9:07:25:
7c:96:13:1c:4a:52:b0:ad:34:c2:4a:1f:33:b2:a3:4a:42:a9:
cc:78:8c:79:79:7a:77:49:b5:f0:e6:0b:4c:27:3f:49:b1:c7:
c1:f8:e2:ca:f4:ee:bc:24:e9:04:02:3d:9d:d2:00:e0:da:0d:
2b:6a:cb:23:7b:52:d7:bc:33:16:23:1a:d7:27:35:81:12:57:
9d:82:61:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:40:10 2026 by rpki-client