Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
File: YfTZxfoK42S02B7bxNGCAPAPvH8.mft (raw, json)
Hash identifier: QDo1h3UprGJEDX1jB5ekLximiy0fUNUEhI6hh5BXlYg=
Subject key identifier: 55:03:65:09:31:E8:BD:0E:EE:17:2C:CC:E8:49:10:F5:52:28:42:B9
Authority key identifier: 61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
Certificate issuer: /CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Certificate serial: 01A0D0B69F365E8B73739CEA7622A8CDC2ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
Manifest number: 0421
Signing time: Thu 24 Sep 2026 00:00:24 +0000
Manifest this update: Thu 24 Sep 2026 00:00:24 +0000
Manifest next update: Fri 25 Sep 2026 00:00:24 +0000
Files and hashes: 1: YfTZxfoK42S02B7bxNGCAPAPvH8.crl (hash: mTrSWJOXIbr2LJKAA1TU656ofmsL8A0Rzv58QMvLfN8=)
2: i757eDGPyWXy1WJ59_NsKxP9nBk.roa (hash: aclUO+YpHA3b3E++8LC8TZOgc8p99LqEe7lxYmVbjYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:9f:36:5e:8b:73:73:9c:ea:76:22:a8:cd:c2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Validity
Not Before: Sep 24 00:00:24 2026 GMT
Not After : Sep 25 00:00:24 2026 GMT
Subject: CN=5503650931e8bd0eee172ccce84910f5522842b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:ec:aa:73:c6:77:d5:d1:c2:84:5d:5a:10:85:
b6:ce:f8:5d:fd:85:d2:bd:85:e3:47:cf:a9:65:d3:
da:c5:b8:4f:40:07:ef:48:3d:d5:86:46:f4:cf:1a:
62:49:36:10:64:79:0d:5e:5e:a2:3e:c1:55:8a:49:
93:1c:61:8c:7f:65:0e:2f:8b:74:bf:f7:87:51:4a:
d8:4c:c5:91:4c:a4:c6:14:bd:7b:6d:57:8d:ab:ab:
69:57:b1:8c:8d:c7:6c:29:05:97:15:a7:38:0d:0e:
eb:94:af:69:85:70:f7:e5:a5:4b:3a:0a:5c:2b:4f:
f0:69:fe:22:fc:5e:ed:83:8d:be:d4:87:5a:02:75:
89:ec:72:22:7d:d2:45:af:d9:e0:d2:4a:95:3d:86:
d8:eb:00:cc:61:e3:ef:18:fe:4d:2c:92:ac:86:19:
1e:05:d6:aa:8c:17:2a:1c:be:82:68:99:cf:0a:7a:
57:43:ce:eb:01:ad:97:38:d2:92:12:73:70:0a:dc:
1b:a8:c4:23:45:2c:9f:79:d5:60:be:07:51:39:dd:
f4:4c:b4:6d:2c:ba:e3:8e:46:0e:a2:ca:20:99:89:
d5:af:46:29:bc:92:32:17:46:e2:c9:c9:f0:e6:8d:
e1:c3:e9:07:6d:1d:eb:39:49:65:41:ba:d3:a8:92:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:03:65:09:31:E8:BD:0E:EE:17:2C:CC:E8:49:10:F5:52:28:42:B9
X509v3 Authority Key Identifier:
keyid:61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5f:93:82:2a:f5:a6:be:5d:c3:ac:65:42:a6:21:4e:a3:94:
5a:5a:4e:4d:38:38:3a:e6:2d:e7:6f:3f:93:65:03:8f:55:ba:
38:e1:6d:26:4f:44:31:0a:1a:a1:4b:66:82:4c:36:7c:4f:a5:
4e:6d:a3:b2:3a:bf:ed:66:11:60:74:67:94:7e:1b:08:0e:11:
f5:e2:6f:f5:91:5c:f7:03:8e:ca:cd:d1:a9:6f:b3:f8:37:80:
8a:06:55:20:91:ad:8b:fc:8a:74:4e:e6:fd:9e:6d:02:60:c1:
46:f1:87:21:7d:f2:3e:ab:2d:af:1b:d9:cf:e6:de:a8:0d:62:
78:e1:7e:52:39:d2:56:9f:39:29:bd:dc:8c:6a:f9:8b:25:b0:
ad:27:6c:17:5f:08:3f:65:61:af:d2:8e:b4:d0:c0:a3:46:12:
23:92:e0:b6:5a:14:1e:84:0e:7c:05:e7:78:06:81:a2:07:be:
cf:bb:4f:99:da:dd:8d:fb:fd:a5:f0:21:9a:1c:dc:26:01:f6:
de:88:aa:ab:0e:58:02:07:c9:02:5d:92:4d:68:55:b3:0e:b7:
ed:22:21:45:e9:74:69:6b:5a:0f:2f:08:f1:0d:b7:1d:64:5e:
fc:b0:f4:94:18:d2:22:cd:b9:f4:30:8d:1d:63:e8:d2:c8:8d:
25:34:53:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:01:42 2026 by rpki-client