Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: w3xGXis84il8KMDA9CSPkzoIyWHezq401M6CTrRflxI=
Subject key identifier: 2D:48:BC:CD:22:2A:AC:6B:6E:B7:48:A6:D1:DE:0B:DA:AE:E0:35:58
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 01A0D07FAB659D742AEE3875CD9EE8CB5BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 1999
Signing time: Wed 23 Sep 2026 23:00:22 +0000
Manifest this update: Wed 23 Sep 2026 23:00:22 +0000
Manifest next update: Thu 24 Sep 2026 23:00:22 +0000
Files and hashes: 1: 6ptl5zZN6otvqTbmcxR9jeeyPTw.roa (hash: eOlv0gEoszbDU9BU/wQCemEUN+a4Reu5tk2gCPSosDY=)
2: U2pubs2iBylOl3mQStn1NV5HAeU.roa (hash: 3j+LrDTQ4DdD50DNjrhLgobkQoPmqtoqS9thhekJ5tY=)
3: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: +Jvg89CpPAhzhlQ36/r7r6FF6sAvcHuJCk2SRG6buNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:ab:65:9d:74:2a:ee:38:75:cd:9e:e8:cb:5b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Sep 23 23:00:22 2026 GMT
Not After : Sep 24 23:00:22 2026 GMT
Subject: CN=2d48bccd222aac6b6eb748a6d1de0bdaaee03558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6b:fc:82:5d:25:09:c9:c9:14:e3:4a:e4:e1:
69:12:ca:b6:96:c6:17:ba:43:89:32:cb:1b:3e:13:
3f:6c:a5:fb:93:40:0e:53:f8:00:d2:c0:6a:96:a6:
5d:bf:86:ab:59:8a:b0:8b:06:b3:c4:43:0b:cd:17:
75:ad:00:83:30:a2:f5:30:41:d2:f8:18:ae:75:e6:
36:d7:41:2f:6a:49:2f:f1:fe:8c:2b:d3:9a:cb:6b:
c1:ec:cd:aa:8e:5c:14:87:fd:6e:10:df:8c:c5:c6:
43:3c:8a:77:df:17:93:d3:8b:b2:21:1b:87:8a:ca:
55:72:2c:af:b7:9f:0f:ab:7c:4b:34:7e:0a:2e:32:
72:c4:2d:23:63:a4:4a:e7:49:56:1b:43:2c:cf:7c:
2c:eb:61:0b:1d:44:33:19:7c:3f:31:cb:c0:6d:28:
57:4a:41:23:f2:33:ae:64:eb:15:64:18:88:6c:c1:
99:ab:78:95:a1:ea:78:a9:2a:c8:f7:5f:9c:5d:b6:
8d:8e:fc:e5:75:cc:a5:7b:8d:78:bb:7d:42:15:5a:
85:3e:e0:18:cd:43:1a:96:5c:48:b9:af:a6:09:71:
62:28:2c:c0:fc:50:3c:3a:c4:b7:82:c6:54:9f:94:
90:b2:e2:71:ff:1c:96:c6:c1:78:c8:24:3e:84:4c:
ce:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:48:BC:CD:22:2A:AC:6B:6E:B7:48:A6:D1:DE:0B:DA:AE:E0:35:58
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e9:e2:44:10:ad:bb:a8:91:c5:a8:b6:43:fa:35:38:44:8f:
c5:f9:a1:f5:7e:82:fc:07:20:37:ad:39:c8:b1:ca:4d:2b:3c:
96:23:ac:d8:2c:a9:48:a5:7d:f2:38:d7:f6:c3:ce:d6:a2:f3:
09:07:f7:25:a0:07:0d:10:5d:a8:03:c5:f2:67:fb:4d:29:bd:
19:1e:67:c2:7f:23:7b:53:5d:30:44:ce:33:33:9c:38:cf:40:
dd:b7:fd:57:91:74:70:de:e2:a8:ec:a5:94:1d:74:12:9b:fb:
ae:a7:ea:30:ca:f8:7a:e7:c5:b8:9a:fc:45:60:9f:a5:76:5b:
fd:ff:4e:d7:80:85:5e:3f:ee:61:7d:6e:40:7f:1a:5b:59:81:
0b:02:d2:74:b5:08:e9:b5:fa:18:b9:d6:da:2c:d8:b5:cf:c6:
c5:93:01:8a:3c:e6:40:03:63:df:6c:f8:9a:07:eb:cb:1e:d2:
98:23:b4:10:af:24:a7:de:cb:e5:a6:1f:54:3e:97:49:24:14:
b3:2a:56:cf:89:61:20:67:f5:7c:b3:d9:43:58:19:e0:26:3b:
68:ec:01:35:0a:e7:b4:4a:e9:86:d4:61:49:e5:53:66:43:5b:
86:0d:1c:03:5f:0c:9f:40:1c:e2:5c:84:56:ff:5a:3f:35:84:
91:00:8f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:53:34 2026 by rpki-client