Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/YmzaiC-KLTqUZufABPVEEO-Dras.mft
File: YmzaiC-KLTqUZufABPVEEO-Dras.mft (raw, json)
Hash identifier: dBTlFlAt2ZcHn4gr7YAUnSvNwoJF8YiIih9bg5Q5S2Y=
Subject key identifier: 72:EB:40:C0:E2:79:33:EE:EC:AD:8C:58:AC:51:98:86:DB:C8:7B:1B
Authority key identifier: 62:6C:DA:88:2F:8A:2D:3A:94:66:E7:C0:04:F5:44:10:EF:83:AD:AB
Certificate issuer: /CN=626cda882f8a2d3a9466e7c004f54410ef83adab
Certificate serial: 01A0D23712EA4048A93CB86A16D14836D902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmzaiC-KLTqUZufABPVEEO-Dras.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/YmzaiC-KLTqUZufABPVEEO-Dras.mft
Manifest number: 86
Signing time: Thu 24 Sep 2026 07:00:19 +0000
Manifest this update: Thu 24 Sep 2026 07:00:19 +0000
Manifest next update: Fri 25 Sep 2026 07:00:19 +0000
Files and hashes: 1: TaPTcaQHtpTiKk6L3LVp5BFOkXc.asa (hash: +3830vvKwcHUa2vT9pDGLDHYnV9hdJPoJoELEDn5XPg=)
2: YmzaiC-KLTqUZufABPVEEO-Dras.crl (hash: vluCzq2+5Qh9zurEsunCKzAQZDdsX4UJ0kO8zGiPoVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/YmzaiC-KLTqUZufABPVEEO-Dras.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/YmzaiC-KLTqUZufABPVEEO-Dras.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmzaiC-KLTqUZufABPVEEO-Dras.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:12:ea:40:48:a9:3c:b8:6a:16:d1:48:36:d9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626cda882f8a2d3a9466e7c004f54410ef83adab
Validity
Not Before: Sep 24 07:00:19 2026 GMT
Not After : Sep 25 07:00:19 2026 GMT
Subject: CN=72eb40c0e27933eeecad8c58ac519886dbc87b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:57:12:5e:e1:43:ff:93:65:93:82:52:05:
ce:b7:ff:f0:4f:75:22:6e:7c:71:a3:8f:e4:d0:bf:
91:75:7a:f4:c0:cf:42:8f:f4:c6:ac:e2:2f:6b:61:
0c:f7:98:1f:bf:22:db:60:4c:16:63:f4:95:c7:6c:
8c:f5:e7:ea:59:7f:1b:c9:ef:d0:8d:74:27:8b:39:
e3:09:b6:8b:c2:82:83:d9:81:59:23:d8:e9:32:16:
3d:a9:23:cb:a5:ec:cd:b3:0b:e8:de:b9:1d:a5:4d:
1f:8c:0e:a5:8f:25:86:0b:57:ba:92:1e:7f:2f:dc:
c8:5b:ff:d7:dc:8d:8d:a9:78:77:25:5b:de:c7:6c:
27:7d:11:cc:1c:29:f5:95:57:72:cf:ea:e2:61:73:
08:d4:15:d9:42:c7:56:86:30:f3:ec:22:d2:2f:fc:
f7:7d:55:e6:bb:6b:cd:42:90:37:70:5c:f5:9e:2f:
6e:ec:88:0a:32:c7:b1:a7:dd:95:31:b1:56:4a:57:
29:27:ab:81:1a:a3:ed:30:fc:cb:f1:5f:16:52:59:
43:4c:51:4f:31:41:da:34:fb:e2:8f:48:69:72:18:
b0:be:ec:b9:2e:73:0d:6f:43:66:01:01:fd:94:46:
4b:64:6a:4d:94:02:05:5a:02:70:87:1d:55:e6:63:
eb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EB:40:C0:E2:79:33:EE:EC:AD:8C:58:AC:51:98:86:DB:C8:7B:1B
X509v3 Authority Key Identifier:
keyid:62:6C:DA:88:2F:8A:2D:3A:94:66:E7:C0:04:F5:44:10:EF:83:AD:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmzaiC-KLTqUZufABPVEEO-Dras.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/YmzaiC-KLTqUZufABPVEEO-Dras.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/YmzaiC-KLTqUZufABPVEEO-Dras.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:52:67:2b:5f:01:8e:a2:7e:93:9d:76:ef:66:87:a1:27:4e:
88:13:89:b9:a4:b8:24:fe:4a:ed:52:4c:31:67:be:3b:ec:33:
0e:9c:0a:66:4c:4e:41:1f:e3:7e:d8:55:69:50:8a:24:d5:15:
9e:ae:ea:43:db:8d:b6:b4:3a:c8:80:75:a0:da:78:cb:2c:13:
90:ed:76:8e:f7:8d:e3:81:30:b1:a9:82:f9:a8:cf:2b:5f:b4:
c5:ca:51:6c:df:17:97:e2:ea:7e:67:97:8b:e4:98:57:ea:4d:
15:4e:04:df:88:ac:3c:80:c2:df:4b:f1:0f:19:e3:0e:25:ac:
e4:2a:f3:cf:b8:ba:ed:b4:a4:56:44:c5:78:b9:1a:98:22:bb:
d1:f0:1b:b7:d0:b0:da:25:90:6c:21:5a:47:47:d4:dc:df:e8:
d4:d4:ca:17:62:81:a6:3d:3b:cb:f6:3d:2c:ca:30:c5:2c:23:
b4:3f:66:2e:db:78:00:78:87:d2:2b:c5:1c:95:eb:ea:52:f9:
de:79:d0:d6:51:84:dd:1c:7d:8d:60:93:a5:79:71:99:63:d6:
bf:30:c8:42:c5:2b:b1:d1:9a:6e:3e:53:b3:9b:15:89:4f:88:
b9:f4:71:51:3c:d4:6d:81:17:77:1d:9c:a6:32:60:13:ef:ab:
6e:33:7b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:10:36 2026 by rpki-client