Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier: gQrxU+cxug5wuTw8jrh9yDXUu8uwP1wmgcCEuRUe3J8=
Subject key identifier: CE:A3:69:F5:31:35:01:05:B7:87:C9:A6:58:A6:8B:2E:77:C0:CF:F5
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial: 01A0EC2EF223EDF1B135CFD547597CD1FDC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number: 1A7B
Signing time: Tue 29 Sep 2026 08:01:34 +0000
Manifest this update: Tue 29 Sep 2026 08:01:34 +0000
Manifest next update: Wed 30 Sep 2026 08:01:34 +0000
Files and hashes: 1: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: oJUW/cSm0Sj0mRY24DO+NOcwSyR30ylYq6fBPYQ+NSs=)
2: zk24Xibi_69XM4miradQH_-zfVo.roa (hash: 8vWhGhRcVD9hGye0zCP9w/L6uhcw5ZBizDAK5O4GtQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:f2:23:ed:f1:b1:35:cf:d5:47:59:7c:d1:fd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
Validity
Not Before: Sep 29 08:01:34 2026 GMT
Not After : Sep 30 08:01:34 2026 GMT
Subject: CN=cea369f531350105b787c9a658a68b2e77c0cff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:72:95:cd:e0:f3:58:37:23:a3:c4:50:67:bd:
cf:62:f3:df:02:b8:a6:6d:19:d0:30:9f:d6:1c:3c:
ee:08:8e:13:25:57:85:80:4a:54:e0:90:06:ff:15:
1f:bd:5a:b0:e8:9a:7e:3e:d7:4c:53:80:01:0b:f1:
91:ba:57:27:1d:1b:57:0d:43:32:b5:1a:10:25:66:
d7:e2:17:e2:17:c6:cc:05:3f:67:ff:83:48:80:47:
b2:45:ba:be:66:71:56:43:70:63:45:fa:6e:aa:0d:
87:32:da:f0:e3:b4:ea:60:3e:22:d7:d8:fd:50:af:
92:da:af:b2:89:26:56:29:0b:34:24:c0:65:f7:eb:
30:e1:3f:3e:9d:86:b4:2b:77:49:3b:1f:ea:4d:54:
b2:49:1b:b4:16:5c:54:7c:47:74:07:ba:32:d5:95:
74:53:a2:e2:1d:b5:b1:ae:5a:1d:36:c5:44:af:33:
d7:4d:11:80:ae:ef:c1:de:f1:dc:51:12:91:68:10:
3b:f7:c4:e0:27:07:1d:95:f7:bc:0e:1f:97:67:5e:
25:2b:5b:16:fc:f8:70:58:c8:d8:e0:41:12:c3:40:
40:d9:b2:06:62:8e:09:9c:17:d6:24:2b:b9:13:c3:
7e:92:4e:5c:95:17:35:2b:ec:e7:ba:a2:0e:c2:7f:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A3:69:F5:31:35:01:05:B7:87:C9:A6:58:A6:8B:2E:77:C0:CF:F5
X509v3 Authority Key Identifier:
keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:be:ca:7a:ba:ec:fd:27:21:6a:65:e2:25:43:52:a1:b6:be:
67:15:f2:6e:06:a5:a0:c5:96:fc:dd:2d:58:ec:40:a3:2f:33:
fb:4d:60:ef:dc:1d:df:b6:98:3a:9c:7a:88:75:95:44:16:72:
85:db:0c:db:e8:90:05:e4:4a:91:b0:96:c3:e8:05:4a:65:82:
ee:4b:4c:5b:dd:d8:95:b7:2e:28:56:52:1f:b9:d4:3b:ce:34:
e1:8e:2c:86:6f:42:fa:67:2c:78:08:2d:df:3d:ed:7a:b4:b1:
7c:8c:51:12:90:45:19:12:1e:f5:a0:a0:aa:49:69:8e:51:19:
f2:6b:0f:68:81:e2:ed:d4:ed:f3:b8:7d:cc:be:7f:d6:65:10:
03:98:04:7d:83:c2:e4:ce:ab:ba:5f:36:2e:f0:87:be:93:92:
b4:d0:c2:a8:fc:27:a7:40:83:65:ab:31:78:b4:34:5d:42:d3:
73:f3:dd:07:4b:ce:af:9d:c4:b9:9c:77:fe:db:a1:91:80:c6:
63:d5:1b:e7:e9:b5:6d:14:4e:c6:44:c7:5f:c3:71:0d:83:b6:
d7:53:d4:1f:33:c4:5c:e4:69:20:e4:f1:cc:f1:29:5b:c8:7e:
a8:26:9a:40:2d:bb:62:d5:34:39:db:9c:9d:64:8e:5f:b6:f6:
4e:66:ce:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:52:10 2026 by rpki-client