Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: UliB+Wqt1sgHzqZtV6j37NQx+HCEdUmGg4LwQmBaKkY=
Subject key identifier: AB:74:43:88:A7:3A:EF:D7:25:4D:2A:6A:C9:30:4D:78:40:F8:95:31
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 019D25F170953797F8F9430F17BAD917EBB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 17B3
Signing time: Wed 25 Mar 2026 17:01:13 +0000
Manifest this update: Wed 25 Mar 2026 17:01:13 +0000
Manifest next update: Thu 26 Mar 2026 17:01:13 +0000
Files and hashes: 1: 6ptl5zZN6otvqTbmcxR9jeeyPTw.roa (hash: eOlv0gEoszbDU9BU/wQCemEUN+a4Reu5tk2gCPSosDY=)
2: U2pubs2iBylOl3mQStn1NV5HAeU.roa (hash: 3j+LrDTQ4DdD50DNjrhLgobkQoPmqtoqS9thhekJ5tY=)
3: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: uQdFVhNQ4LzPbEtzW75oUmzrwQ24lFBJguLVcymS87E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:70:95:37:97:f8:f9:43:0f:17:ba:d9:17:eb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Mar 25 17:01:13 2026 GMT
Not After : Mar 26 17:01:13 2026 GMT
Subject: CN=ab744388a73aefd7254d2a6ac9304d7840f89531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f4:bc:0a:5c:86:a6:bd:92:0f:54:2e:cb:31:
84:58:5e:9d:dc:60:f7:2e:e4:f9:d7:72:fe:58:ba:
89:e8:95:9a:5e:6d:e0:69:b6:d2:e5:bd:0b:5d:8c:
97:19:ef:64:d0:5e:a0:42:a9:81:d1:c5:7b:4d:b9:
d2:43:d9:c1:61:ea:53:16:c7:f3:fd:8b:62:48:b7:
66:0c:26:2a:fc:9d:e5:21:58:d4:cc:80:6d:fe:73:
3e:b2:4a:14:fb:d8:73:5a:66:65:fc:4a:ce:01:a3:
d8:10:af:5b:ea:06:54:aa:46:d0:a7:67:39:b6:86:
f1:25:8b:b3:47:af:dd:9a:d5:d4:19:3e:a0:47:bd:
64:83:6c:e6:1d:96:76:2b:1a:c1:8a:32:f2:43:fa:
ab:8b:b4:6e:85:3f:1a:bf:5f:11:f6:4f:e8:53:f3:
ce:fe:a0:dd:e3:da:3c:43:dc:e3:58:9f:d6:5b:7c:
a1:ee:45:6a:d6:1d:eb:cf:2a:e6:b4:e7:f1:fd:ad:
10:3c:b1:97:32:9c:bf:41:90:2a:ca:d4:47:9a:7f:
1c:92:ab:8f:ce:d5:b4:d8:b0:d2:42:c9:19:e7:42:
7c:6c:92:5f:06:dd:53:4f:2d:62:32:b2:d9:d8:cd:
27:cf:c1:c3:16:ad:83:ee:17:46:2c:b0:95:0c:74:
27:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:74:43:88:A7:3A:EF:D7:25:4D:2A:6A:C9:30:4D:78:40:F8:95:31
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:88:58:06:23:60:25:19:56:ca:5b:4c:dd:3c:c6:6e:6a:f9:
2f:02:89:93:3a:18:ef:91:d1:1c:dc:da:bb:1e:75:7f:af:d8:
b8:f7:d9:fb:66:fb:c8:b3:b3:a0:c3:cd:c5:d2:37:be:ca:64:
d8:b7:b2:0b:23:9d:ad:01:5f:e0:b7:b6:87:35:9e:51:52:e2:
49:d7:f2:83:e4:c7:59:1a:71:a3:a0:28:bb:95:e5:1b:61:48:
e0:51:15:84:14:18:44:47:42:53:bc:77:a6:67:2e:b0:e5:48:
c7:1a:26:f3:8e:e8:a4:92:55:52:6f:53:f8:0e:34:29:f4:a1:
4f:8f:8c:e9:eb:4e:f8:35:8d:58:fa:13:98:15:00:13:59:5f:
4d:96:39:f2:52:04:5f:86:ba:a3:e7:71:20:b7:c8:db:84:9b:
50:48:f6:d6:a2:14:5f:0c:de:b9:02:d9:e0:5e:24:cf:b5:79:
ca:9f:2c:28:db:85:60:f6:2b:41:4b:3a:96:3f:5d:2b:18:dc:
3e:72:aa:92:f3:fc:05:01:b4:08:66:84:1b:e7:9b:2b:aa:6b:
6a:de:a9:86:0c:54:de:c1:90:e5:29:d1:39:05:55:09:3b:3b:
d5:fc:89:66:4e:7e:f0:df:ea:e1:94:3d:ad:b7:ff:1a:ef:95:
55:f6:f4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:47:07 2026 by rpki-client