Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File: YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier: 70UO9VDnnYogcUh/QfNxuye/aM1rCbUvDWl8US1D/t0=
Subject key identifier: BB:F3:35:67:74:CA:B9:1A:9F:2C:3A:34:95:31:7B:E9:07:63:C9:39
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer: /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial: 01A137B5F1493DDFEDEEB72C078AC24D57A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number: 0F2C
Signing time: Wed 14 Oct 2026 00:00:32 +0000
Manifest this update: Wed 14 Oct 2026 00:00:32 +0000
Manifest next update: Thu 15 Oct 2026 00:00:32 +0000
Files and hashes: 1: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: XVSHZYMgRg1es75Bj0JPgjQX/Xzy4E6POqMLYPT2Gd8=)
2: kGLxA9onzrf8JLssDr-KbBw0Iso.roa (hash: iCYCJqbAYcmF46KnTkB1atw07n5B8BjwCirxzmxkzlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:b5:f1:49:3d:df:ed:ee:b7:2c:07:8a:c2:4d:57:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Validity
Not Before: Oct 14 00:00:32 2026 GMT
Not After : Oct 15 00:00:32 2026 GMT
Subject: CN=bbf3356774cab91a9f2c3a3495317be90763c939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ab:f1:c0:9f:3a:4f:87:c2:15:7a:70:ba:05:
61:c3:fe:09:f3:00:09:67:46:c9:dc:79:92:05:16:
e8:ca:70:99:c7:db:09:9c:4b:f5:2f:74:7e:d0:25:
ad:37:73:60:fb:b4:2f:74:43:fc:5d:5f:c4:69:06:
6f:21:8a:a5:63:db:27:e2:ef:c4:7f:ac:85:28:b8:
e0:a2:92:b9:e2:8d:06:c1:a2:ed:da:94:bd:c8:38:
e1:a5:d5:03:a0:b9:8d:94:01:94:d4:88:3d:02:c4:
64:1f:90:6a:51:86:03:7a:f8:55:db:25:96:e9:d8:
39:1b:db:06:fe:d9:83:02:44:88:6d:45:d2:83:6f:
51:f5:63:32:77:46:c2:45:76:32:cb:07:53:05:c5:
22:e4:c0:8a:d0:d3:80:16:c8:d5:9e:0e:e1:e7:37:
5a:2f:97:ed:28:1f:c2:dc:57:c0:ae:88:4f:c0:56:
2e:dc:f6:d1:b5:2a:52:2f:7f:1d:97:24:2d:dd:2c:
ca:0a:53:b1:e5:cc:a7:45:61:ce:00:fb:b4:c7:39:
2d:ef:33:a2:d9:3e:13:74:0c:d0:4e:fd:3b:29:18:
3f:64:6c:4b:6d:7a:4b:ef:0c:6e:0d:1e:68:00:f5:
c0:15:a2:8a:bc:c1:f6:8a:61:dd:79:84:38:07:ff:
f0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F3:35:67:74:CA:B9:1A:9F:2C:3A:34:95:31:7B:E9:07:63:C9:39
X509v3 Authority Key Identifier:
keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5e:50:5e:ba:03:22:9e:03:15:87:a4:f7:b2:ed:2b:ac:7a:
05:69:6e:25:bf:2d:98:83:e9:16:6f:d9:94:36:91:d6:7e:08:
49:4d:2d:d5:80:86:e3:67:60:4e:fb:c7:6e:08:3f:25:70:4e:
28:67:a0:02:6d:8f:ca:c2:98:eb:12:68:40:c5:f5:cb:18:36:
72:75:35:8e:d2:08:9f:0e:a7:02:83:7c:bf:c2:6b:99:94:75:
29:29:00:f0:84:96:32:48:fd:42:af:19:cf:6a:dd:11:7a:65:
12:8d:c9:80:0e:c9:fb:92:38:a8:03:28:0f:b8:f9:a3:c3:91:
5f:ef:ff:7c:04:ed:7c:10:60:ef:00:23:5c:43:81:ac:0b:91:
92:3e:9e:21:35:9a:d3:dc:ec:81:35:14:1a:41:c9:66:ce:11:
82:d3:fe:27:51:df:e4:c7:25:7c:51:d4:b3:30:90:97:cd:a4:
ac:0a:dc:e6:14:4f:6c:3b:ba:6e:2a:42:4e:c9:17:ff:11:65:
59:39:17:fb:f6:77:48:95:2a:7d:8a:d6:1a:85:ed:70:98:04:
de:9c:f2:ba:ce:46:54:fa:88:3a:81:7b:11:97:39:fa:61:91:
cd:23:14:55:01:cd:13:5d:c6:2a:54:a6:56:68:cd:4c:36:6d:
05:a4:59:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:29:13 2026 by rpki-client