Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
File: YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json)
Hash identifier: y1v8V02yspVK6urB33UtEzNOGt+PTaqxGxTMxeuzvWc=
Subject key identifier: 4A:77:90:94:B1:C2:9E:46:D1:F8:FF:AE:40:81:17:15:CF:2C:98:28
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial: 01A0EC2EBAF797CAD6646279A823CA9E0FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
Manifest number: 151F
Signing time: Tue 29 Sep 2026 08:01:20 +0000
Manifest this update: Tue 29 Sep 2026 08:01:20 +0000
Manifest next update: Wed 30 Sep 2026 08:01:20 +0000
Files and hashes: 1: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: 6LnK2Agyi/H0m0+F+gkzFT8lMRxaQToAOuhsVAniHIM=)
2: sRtXhXnTV3BV5O7Uk5pPU6e6DHY.roa (hash: kK2zj8c+pEZD+bWtboW9Noev8kavvORxA7HxKk4tpBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:ba:f7:97:ca:d6:64:62:79:a8:23:ca:9e:0f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Validity
Not Before: Sep 29 08:01:20 2026 GMT
Not After : Sep 30 08:01:20 2026 GMT
Subject: CN=4a779094b1c29e46d1f8ffae40811715cf2c9828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:63:4e:3c:1e:9f:51:09:df:c1:51:73:53:90:
48:df:38:66:74:76:d2:d9:9a:17:84:19:98:02:82:
64:a1:9b:20:09:5c:19:0a:10:fa:11:59:be:a3:91:
51:98:f1:e0:e1:22:03:98:f2:c3:0b:30:8b:7b:a4:
05:7d:35:65:b5:51:7f:f8:ec:e7:73:9c:17:27:40:
37:7e:da:9a:7b:d5:24:b3:5b:e6:e9:e9:21:fd:8b:
63:de:0f:93:5c:bb:17:f5:d2:ad:19:8e:9f:27:9e:
2c:da:c4:bc:fa:44:04:0d:61:f2:8a:04:e1:90:c1:
b3:2b:d9:22:1a:2f:7d:b5:fe:e5:bb:e1:1e:37:ad:
52:2d:6c:23:39:51:21:ae:01:83:f9:2e:f0:e5:ea:
00:74:60:8e:89:0f:b3:62:eb:cd:0d:80:7a:5a:c9:
90:8e:08:d6:fb:6d:82:3b:96:f3:58:ad:c0:e2:86:
18:17:7b:5d:c4:7b:2c:9f:1b:18:6a:f0:41:fd:b2:
e2:0e:21:87:e0:e5:0a:fd:dc:0e:6e:2a:60:3a:b2:
25:4f:f6:29:e2:24:57:c6:0e:49:38:00:13:5e:6e:
12:4d:1f:a8:b3:d7:7e:8d:3e:12:b1:ed:8f:28:66:
39:db:de:1b:d2:3d:da:86:3b:12:c1:46:65:f6:a4:
90:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:77:90:94:B1:C2:9E:46:D1:F8:FF:AE:40:81:17:15:CF:2C:98:28
X509v3 Authority Key Identifier:
keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5d:91:23:8b:d4:25:1e:6e:34:91:3e:e6:31:8c:1e:58:2c:
3d:00:99:c3:da:ed:c6:15:6a:44:21:31:84:01:ee:16:89:64:
39:46:e2:cc:18:93:75:af:2d:12:16:98:89:02:78:75:6c:e1:
6a:62:3a:f1:13:60:f9:6e:0e:f0:9d:4d:71:17:dd:64:24:82:
2e:6a:56:bb:0f:e9:e3:5b:1d:c0:4b:fd:9b:62:de:7e:f2:2d:
1b:00:27:0f:cc:22:a4:4a:b3:61:02:c7:30:73:90:fb:84:20:
bf:3b:1b:76:d0:cd:b4:2a:eb:e0:3e:68:8a:f9:70:43:87:6c:
24:47:7c:17:96:34:68:9f:37:67:3b:39:9a:c5:b5:81:2b:1c:
9a:95:b1:fe:4d:c8:48:69:3e:78:97:d9:b2:20:92:e2:6d:af:
81:1c:41:2e:e1:30:1e:db:9f:74:39:03:b7:e9:1a:1c:37:e5:
a5:a9:89:14:8d:af:49:08:d5:47:08:d1:df:39:c9:ff:fe:26:
d2:5b:9b:fa:b1:0d:f2:a4:26:64:08:78:21:87:61:37:61:1b:
7a:d6:e9:ba:1e:26:4f:66:20:b0:10:37:57:9a:96:f4:d2:9f:
0f:c5:42:e2:62:44:7d:5b:63:8f:d4:25:f7:4c:1c:4b:82:6d:
49:47:16:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:22:28 2026 by rpki-client