Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: xqtVZAweWBDv/O9qSXQa8bx+E/5fNP5iVeEj5da+ctI=
Subject key identifier: EC:C6:F0:5C:E8:EE:2B:B9:9F:91:09:64:55:44:D4:56:E1:F0:70:D8
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 019E1D22316257470B6C8069B565279C41E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 1833
Signing time: Tue 12 May 2026 17:00:40 +0000
Manifest this update: Tue 12 May 2026 17:00:40 +0000
Manifest next update: Wed 13 May 2026 17:00:40 +0000
Files and hashes: 1: 6ptl5zZN6otvqTbmcxR9jeeyPTw.roa (hash: eOlv0gEoszbDU9BU/wQCemEUN+a4Reu5tk2gCPSosDY=)
2: U2pubs2iBylOl3mQStn1NV5HAeU.roa (hash: 3j+LrDTQ4DdD50DNjrhLgobkQoPmqtoqS9thhekJ5tY=)
3: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: uXnEA3UTAsoPHZvJWX71/z3lqQTVdGBrA7gp98i/zmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:31:62:57:47:0b:6c:80:69:b5:65:27:9c:41:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: May 12 17:00:40 2026 GMT
Not After : May 13 17:00:40 2026 GMT
Subject: CN=ecc6f05ce8ee2bb99f9109645544d456e1f070d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:40:eb:4e:44:43:2a:09:81:57:22:f6:62:0b:
04:7c:c7:50:34:92:0c:6e:e4:40:54:5c:fa:21:78:
12:9b:8b:cf:1d:96:19:28:cb:bc:b1:68:b9:69:ef:
8f:80:ea:16:ad:e6:c9:21:6f:b6:22:5b:e2:74:5c:
ef:88:59:33:c6:ab:15:7c:bc:23:c4:4a:00:9f:d3:
77:58:2a:d4:09:4f:ca:4f:e7:0b:c4:77:b4:4e:1a:
ca:df:f0:7c:d7:f7:9f:3f:2e:38:64:fd:ec:42:56:
90:b9:95:71:59:a2:57:9d:cb:60:01:0a:d7:51:26:
a8:a5:f9:f9:91:59:6e:e1:86:2c:36:01:ce:8b:7b:
4a:8a:f5:f9:b0:0a:6d:4e:79:43:49:d6:33:99:dc:
21:04:05:64:b4:6a:0d:8c:27:cf:59:1a:1c:fe:70:
b3:0b:18:ed:eb:d6:03:48:dc:bf:4d:98:73:e1:66:
ec:72:94:78:55:ef:77:e4:90:5e:48:67:5f:8a:df:
5c:c2:51:64:82:46:ff:e6:52:f2:49:7d:35:50:1f:
6d:62:e1:bf:05:32:c9:a5:c6:a9:9b:62:49:74:41:
12:74:bc:f3:75:e4:32:53:32:11:48:22:06:e8:e0:
70:34:99:8f:bb:d1:9a:c9:88:76:9c:b5:38:6b:09:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C6:F0:5C:E8:EE:2B:B9:9F:91:09:64:55:44:D4:56:E1:F0:70:D8
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:de:a9:f4:fb:f5:40:37:e1:71:e5:eb:d4:c1:d3:d9:c2:4a:
7b:d7:16:09:cd:a2:98:c8:fa:91:e7:83:2b:a8:d3:2c:87:57:
65:e4:99:9a:a6:d7:ea:2d:5d:2e:47:9d:c1:01:d3:55:5e:9d:
29:6b:ba:87:52:6e:12:1d:30:90:27:7c:c9:c2:de:7f:f3:0d:
91:74:99:1b:96:c5:9c:cc:31:b0:37:28:85:4b:6f:26:37:e8:
e1:57:8d:10:c9:3c:b8:3e:a3:7f:74:ff:46:5d:6d:33:76:0c:
91:6a:e7:d0:bc:2c:cf:6d:7c:04:62:4a:c0:20:03:87:d5:e4:
c1:47:ae:90:e4:99:a7:db:44:fb:2f:dd:3f:4e:79:2d:a7:c1:
01:95:f6:74:cf:5c:96:8a:2b:51:e3:1b:05:85:05:a1:5b:cf:
ce:92:7d:51:51:e5:46:33:89:7d:33:3d:37:24:57:6f:6f:68:
51:7a:b8:2f:3d:65:ce:6b:16:c6:d9:df:31:a1:3b:69:02:f3:
36:ad:a7:80:62:41:fb:f4:51:29:dd:96:59:d5:7c:fb:2e:73:
f7:28:b1:e6:bc:e6:cc:b4:ed:96:ca:51:f7:6d:11:ef:c9:10:
b4:59:53:a8:cd:9b:67:29:b6:44:74:b2:fc:e6:b0:75:ea:b9:
30:d7:5f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:01:22 2026 by rpki-client