Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier: srTYZSC0tTpMonb+e0wxSFajeAnCs091MQhnbkJvv68=
Subject key identifier: E1:18:2C:A8:8C:7F:31:E7:55:9B:5E:F7:70:8E:35:45:86:E8:0F:8A
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 01A0E286CDA10392082DAAA6DC829D83FD49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number: 0F5D
Signing time: Sun 27 Sep 2026 11:01:20 +0000
Manifest this update: Sun 27 Sep 2026 11:01:20 +0000
Manifest next update: Mon 28 Sep 2026 11:01:20 +0000
Files and hashes: 1: 1lPDb-Qc7dgd58_k0ugXvgO36w8.roa (hash: up0wKM+by5cZA7R34zmGPf+ho8Ei16Ys0MiWkd/R1jk=)
2: NbUyaKZBv1RnKePQIxmyxsT9zGw.roa (hash: YfuIIb8IL5a5Ql6qciTZgKEuG43i9WjmWByHoP25V3M=)
3: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: vtOC9uWf9mH6aTcBF8GvHX1iytdPVZjHBnBkEIRLKDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:86:cd:a1:03:92:08:2d:aa:a6:dc:82:9d:83:fd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: Sep 27 11:01:20 2026 GMT
Not After : Sep 28 11:01:20 2026 GMT
Subject: CN=e1182ca88c7f31e7559b5ef7708e354586e80f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:64:3e:6f:37:0c:a0:bc:ef:31:3c:8c:94:
0d:b3:e1:d2:69:20:1f:50:5d:55:a5:ca:a5:58:7a:
7b:37:57:88:0b:b6:fa:b8:55:4e:05:fe:b9:fc:09:
b9:a9:a8:58:6b:0b:8c:2c:e9:65:9a:fe:ba:96:3f:
d7:8a:64:a5:cf:78:18:1d:0c:87:d4:dc:70:80:4f:
16:42:cb:a2:67:a4:92:f7:84:1f:91:00:af:05:f8:
1e:14:9e:0b:68:15:c1:d9:79:58:e8:37:00:2b:7a:
74:91:b3:f9:42:24:ad:22:a7:c9:74:50:b2:a8:a9:
61:ce:eb:cf:84:78:a9:be:a7:a6:83:58:25:b0:b2:
15:28:1f:8c:ce:7c:2e:9d:cf:00:cc:f0:21:d3:b6:
5c:a1:cf:39:b9:38:ed:5c:71:da:b1:ab:bb:47:64:
2c:0e:96:2d:09:36:f4:4c:e8:b8:80:5a:69:c6:db:
f4:57:a1:ea:54:65:4f:6c:eb:4a:03:42:7c:e5:1e:
1f:25:3d:f9:8d:de:c3:6b:05:59:12:4e:df:22:24:
10:31:c2:1d:22:3d:fa:9e:bf:48:58:aa:a5:a5:73:
ef:e1:f8:f4:45:16:3e:b3:df:87:17:0a:20:63:71:
02:0e:ce:4d:95:d0:f9:37:f6:40:67:ac:8a:85:1b:
69:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:18:2C:A8:8C:7F:31:E7:55:9B:5E:F7:70:8E:35:45:86:E8:0F:8A
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c1:ca:e4:a0:da:65:40:db:a4:c2:20:7d:c4:30:90:99:1c:
30:4d:1f:0d:e1:5a:50:fe:6c:48:5a:97:54:ca:fd:6a:65:fe:
3a:0e:e6:d2:9e:b1:07:39:2d:6f:1d:2b:35:2a:cc:85:e9:8e:
2c:e7:e1:9f:28:10:bb:f9:cd:d7:53:21:9f:5f:fa:1e:bc:f8:
1d:a5:4f:ca:f5:39:76:88:94:23:dd:0a:38:85:20:b5:04:e0:
0b:3e:41:b5:21:ad:b0:0c:31:df:cb:59:cd:1d:1d:ea:4e:61:
b6:d3:80:c1:c9:4c:7b:12:da:40:e7:9f:20:c0:a6:59:12:3e:
0b:c8:b8:ed:c6:d3:0b:50:96:56:38:35:d2:87:8b:e6:c9:f9:
65:6d:0b:65:8a:11:ec:47:a9:2d:f6:fa:3d:1e:6a:87:0c:26:
5e:94:2c:83:09:4b:46:0c:6e:df:33:3e:ee:dc:b9:ae:7c:45:
34:13:ae:e8:be:a6:17:30:91:4c:46:b5:76:ad:59:cb:3e:9d:
c4:93:dc:cb:86:a6:de:e5:5a:21:26:36:73:fe:a1:01:3a:4c:
89:da:99:19:da:ca:06:eb:41:c8:a8:b9:7d:a6:b8:f3:1b:23:
07:9c:e0:51:15:2a:7c:80:97:a9:cc:df:1a:92:59:63:8d:9d:
d9:a6:22:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:32:47 2026 by rpki-client