Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
File: YblVGO1PVYKi9sEZVXQChLwIgTQ.mft (raw, json)
Hash identifier: YNgBX7DtbyoUlsB/DA5pDximBWnfN2FoVfWYRrrYfpY=
Subject key identifier: 3B:76:3F:1D:C6:E9:B7:EC:FD:C1:81:03:39:DF:A5:7A:E0:B8:61:39
Authority key identifier: 61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
Certificate issuer: /CN=61b95518ed4f5582a2f6c11955740284bc088134
Certificate serial: 01A0F29EFC1B067B8F5E61D940308FC74F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
Manifest number: 0AFD
Signing time: Wed 30 Sep 2026 14:01:40 +0000
Manifest this update: Wed 30 Sep 2026 14:01:40 +0000
Manifest next update: Thu 01 Oct 2026 14:01:40 +0000
Files and hashes: 1: 4415GxEj-TYr3AidYcdJ8bhsDy8.roa (hash: cE5GPiOmnznkFTHE5XfxrOsWeoTa87SB/CFxhnlAtck=)
2: YblVGO1PVYKi9sEZVXQChLwIgTQ.crl (hash: Nsq2aLHZakSCqOz9VXip9TB2qULHj4bcMYLk9pmitE4=)
3: srScoHZHreZzDWYRIo7iP-u_x8Y.roa (hash: syyRqwaOL9wW0OZYlgbcE8bN1oO5RyfUQlIa0YfUs5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:9e:fc:1b:06:7b:8f:5e:61:d9:40:30:8f:c7:4f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b95518ed4f5582a2f6c11955740284bc088134
Validity
Not Before: Sep 30 14:01:40 2026 GMT
Not After : Oct 1 14:01:40 2026 GMT
Subject: CN=3b763f1dc6e9b7ecfdc1810339dfa57ae0b86139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:db:3c:15:c0:d2:60:3a:ec:04:f3:68:fb:
c9:89:97:d3:50:93:17:e7:20:4a:7a:6f:c5:bd:68:
3b:58:a7:78:3d:2e:07:1c:5b:ac:52:3a:3f:4e:aa:
6b:3d:ed:45:a5:be:5f:9a:a5:6b:90:a2:6c:99:36:
2e:b7:75:6d:36:c6:c7:7d:0b:a2:4d:23:e2:73:f3:
27:c8:05:e1:3d:65:81:7f:4a:15:06:25:1e:85:86:
b5:31:f9:ab:91:25:b1:76:c4:09:31:96:4c:b7:06:
c1:21:d4:4c:82:85:bf:6b:57:4c:2d:d5:8b:fc:4a:
13:e7:bc:cf:4d:f7:44:b4:44:f6:a2:29:b6:7f:ba:
ef:23:6e:81:1d:26:c7:37:46:02:3c:cd:94:3d:19:
6c:1f:14:b0:c3:7e:a7:8a:4d:21:d2:65:f1:7f:e1:
d6:12:3d:51:a7:c1:0f:74:dd:2c:18:55:88:f0:0e:
39:ed:b2:4f:82:51:fb:46:ad:52:62:28:be:63:54:
3f:b4:ca:8b:08:f9:50:8e:cd:9d:64:43:81:09:08:
d3:88:35:b1:72:7a:62:c1:15:c4:18:6b:71:1d:4e:
47:bc:d1:30:61:3f:8e:c1:4d:95:1f:ce:1a:da:30:
d3:6a:5d:b3:3a:2a:ec:42:76:92:b3:5a:f1:11:c9:
39:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:76:3F:1D:C6:E9:B7:EC:FD:C1:81:03:39:DF:A5:7A:E0:B8:61:39
X509v3 Authority Key Identifier:
keyid:61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b9:de:80:43:d4:d9:cd:6e:25:46:de:1e:cc:87:78:24:1a:
fa:27:64:cd:c7:8b:84:75:df:b1:46:bf:77:37:2a:9e:c5:03:
1e:76:d2:54:6d:5f:a3:18:16:a7:8f:67:c6:a0:1a:bf:ea:cf:
d4:92:18:64:96:c5:79:d7:65:75:0d:5c:93:e9:df:69:ad:98:
ca:b1:88:cb:89:8f:ac:cf:e1:32:56:21:06:9f:4b:6d:00:20:
5d:27:dd:16:c8:17:bf:77:22:98:47:a3:0c:09:77:fa:05:40:
54:0b:fd:ec:86:b0:25:bf:c8:a1:ff:d2:1c:87:77:53:ef:6d:
6e:23:1e:d4:d4:d0:bd:55:f0:f8:9d:56:91:4a:58:bd:9f:6a:
21:5a:c4:0f:a7:7e:f8:30:22:a0:b5:65:4b:80:94:4e:20:19:
fd:54:52:7c:b6:c0:b5:78:1e:a2:9c:7c:9a:56:fb:5e:b5:94:
84:c1:72:42:e3:09:d5:b4:a5:1e:87:41:00:3a:b7:89:86:f1:
fe:b7:a4:b1:6f:03:e1:a2:03:9f:63:1c:24:3c:ec:02:37:1e:
50:da:8b:72:da:aa:11:e9:0d:ca:24:e6:9c:94:12:cb:8c:d7:
e4:e7:9b:fa:bc:92:3b:60:c5:98:5e:3e:4a:83:d5:84:1b:ad:
eb:b6:67:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:21:40 2026 by rpki-client