Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
File: YfTZxfoK42S02B7bxNGCAPAPvH8.mft (raw, json)
Hash identifier: H1ugj2PiNxuedSE71m3WcDA2SEwfI5UJREY6bXNDyRE=
Subject key identifier: C2:4B:E1:1A:8B:97:15:18:98:3C:FC:2B:A8:62:78:5F:F9:8F:0A:F4
Authority key identifier: 61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
Certificate issuer: /CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Certificate serial: 01A1DD27312848F56BC1C88663D02E73D800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
Manifest number: 04AC
Signing time: Sun 15 Nov 2026 03:01:35 +0000
Manifest this update: Sun 15 Nov 2026 03:01:35 +0000
Manifest next update: Mon 16 Nov 2026 03:01:35 +0000
Files and hashes: 1: YfTZxfoK42S02B7bxNGCAPAPvH8.crl (hash: 9zXAWbc6fE+g2xwbASd5WZbC7XFfa2zwVGvUPCX72e8=)
2: i757eDGPyWXy1WJ59_NsKxP9nBk.roa (hash: aclUO+YpHA3b3E++8LC8TZOgc8p99LqEe7lxYmVbjYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:27:31:28:48:f5:6b:c1:c8:86:63:d0:2e:73:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Validity
Not Before: Nov 15 03:01:35 2026 GMT
Not After : Nov 16 03:01:35 2026 GMT
Subject: CN=c24be11a8b971518983cfc2ba862785ff98f0af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:49:69:84:c6:eb:a0:65:e2:cd:48:3c:9e:
3d:c5:97:49:ae:71:11:48:4d:aa:b5:09:e6:2e:ab:
e8:e1:3b:c5:99:45:ce:e9:e2:67:69:83:a0:f6:3f:
69:b5:d6:9b:2b:ab:a8:5c:69:6a:b2:98:41:4d:64:
40:84:a7:0a:c9:4b:87:45:81:05:98:27:23:93:48:
8d:c1:e3:96:d1:d8:fa:f5:3b:7b:28:59:53:21:b5:
4c:62:50:47:73:11:de:23:5e:35:c4:0d:4e:4f:7c:
6f:cb:d1:5d:88:ed:e5:3f:83:41:46:46:92:20:58:
87:fb:28:e5:14:2f:01:77:07:45:ec:01:1c:e6:07:
ae:cf:14:19:8e:81:b8:4d:89:f3:0d:6c:71:90:26:
4c:e8:97:9d:ed:68:cc:7e:fc:0f:cb:da:4d:ce:68:
e8:f8:1c:44:0a:34:19:3a:b8:dd:bd:81:93:df:09:
b8:23:9c:c8:75:58:a3:08:50:26:9b:98:f7:32:a5:
80:66:24:63:c2:d5:fd:56:cd:1c:38:bf:65:d0:2b:
d8:9d:16:ef:bd:e6:57:3e:c3:c1:ee:d3:9e:0c:49:
a6:fb:01:54:ea:bd:30:28:43:84:f2:63:fd:06:e0:
e8:43:b4:72:83:ad:5b:65:cf:76:26:91:a6:97:a3:
b1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4B:E1:1A:8B:97:15:18:98:3C:FC:2B:A8:62:78:5F:F9:8F:0A:F4
X509v3 Authority Key Identifier:
keyid:61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:45:81:06:94:dc:6e:52:43:f0:4d:29:c4:70:61:bf:9e:0b:
0f:7e:03:98:37:94:e1:9b:b7:44:16:ac:28:76:b1:f7:18:61:
01:1f:d5:ea:09:83:e1:d2:64:a5:90:5e:8b:a3:42:15:74:69:
19:94:cc:24:67:8c:05:f0:17:4e:93:32:de:10:6b:12:4a:7f:
e3:53:f7:8a:bf:16:1a:07:56:2f:62:eb:d4:59:b4:a1:83:85:
4e:c2:96:c7:5c:c2:83:42:5a:cd:4f:e9:39:6c:31:83:6d:75:
1b:09:6a:6c:46:9c:87:c3:fc:b5:5b:36:5f:9f:b7:33:e0:96:
a1:5a:da:7b:38:06:6b:c5:44:d4:12:94:9c:08:a1:2c:bb:9d:
f3:7c:40:f0:1f:58:63:4f:eb:f0:6a:8c:79:f2:db:8f:d0:f8:
1f:ec:54:b3:30:61:73:78:96:db:5f:0e:ff:13:e0:1e:8a:40:
85:bc:05:94:b8:71:a0:cd:6f:87:ed:46:af:85:bb:50:1d:3e:
70:5b:6c:cf:b2:4a:b9:3c:e5:ed:78:e7:29:91:16:b4:a3:6f:
d5:e1:9a:f1:08:f5:53:d5:44:97:0d:ff:51:c2:0c:84:bd:ff:
d9:a0:28:6f:92:11:10:d2:24:ad:5e:03:d5:2d:d1:e8:4e:bc:
01:d8:5d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:16:56 2026 by rpki-client