Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.mft
File: ykYrWgu5S_tgEDzbR_j3P_hUvX8.mft (raw, json)
Hash identifier: Cpjvf5XkzTUbkvUhhkJHM6kcem7Jjy8Y0Y/BiN65JSE=
Subject key identifier: A4:A5:8B:28:E1:97:F7:6C:1E:2C:9C:05:0A:8D:85:68:65:07:DC:9F
Authority key identifier: CA:46:2B:5A:0B:B9:4B:FB:60:10:3C:DB:47:F8:F7:3F:F8:54:BD:7F
Certificate issuer: /CN=ca462b5a0bb94bfb60103cdb47f8f73ff854bd7f
Certificate serial: 01A0D8722AAFE7F525C9F983F7850F478C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykYrWgu5S_tgEDzbR_j3P_hUvX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.mft
Manifest number: 8D
Signing time: Fri 25 Sep 2026 12:02:35 +0000
Manifest this update: Fri 25 Sep 2026 12:02:35 +0000
Manifest next update: Sat 26 Sep 2026 12:02:35 +0000
Files and hashes: 1: ykYrWgu5S_tgEDzbR_j3P_hUvX8.crl (hash: OAHXY5it/xJxpFa8VEq3hFd9uGBdUIgL0ZpI8blAhBk=)
2: z4jSNTQXcMmCspjrIlFpHfl6FSI.asa (hash: HC4VZ6EQp42dSfiAeX0/EE2K5gXr9+fsZFToTEQUfVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykYrWgu5S_tgEDzbR_j3P_hUvX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 12:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:2a:af:e7:f5:25:c9:f9:83:f7:85:0f:47:8c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca462b5a0bb94bfb60103cdb47f8f73ff854bd7f
Validity
Not Before: Sep 25 12:02:35 2026 GMT
Not After : Sep 26 12:02:35 2026 GMT
Subject: CN=a4a58b28e197f76c1e2c9c050a8d85686507dc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:93:4b:00:59:49:7b:be:bf:91:3f:81:16:c2:
77:62:9c:0b:77:0e:25:21:a5:4c:85:20:81:a4:d2:
b9:0b:0c:27:83:54:72:1a:a2:52:bf:2c:16:c6:89:
35:a3:1e:f7:fe:f8:92:bb:0f:50:b2:d0:23:df:73:
9e:f5:d4:cc:ae:ea:30:ef:95:d0:a6:d7:9b:69:21:
4a:ef:b7:08:07:6b:3e:97:e4:2d:5c:3b:f5:e5:5a:
0f:12:c9:c9:91:e0:12:08:c1:5a:ee:0e:43:6f:ac:
2e:1b:1f:20:62:ca:bb:93:02:72:df:cf:40:a3:d9:
6e:d2:d4:2e:ca:83:36:fb:8e:a9:1d:05:2e:e5:91:
a3:ec:e6:0e:91:8c:a1:0e:cf:b4:51:f3:7b:ef:90:
1f:43:b7:c9:4f:00:34:ff:31:aa:0f:38:a4:81:c1:
fd:19:36:c8:5b:86:9c:02:58:34:cd:b4:29:72:98:
ac:bc:ab:62:5e:cf:a4:0b:d8:d9:c9:62:76:31:b4:
2d:fa:40:af:d3:9a:f8:ab:fc:d7:19:19:35:58:13:
92:96:56:f9:49:57:29:7f:4d:1c:82:96:fb:af:95:
4d:3d:82:3d:75:a6:f2:96:93:61:d3:57:8a:90:6f:
6f:1a:5e:64:68:95:cf:c0:66:e5:fc:cb:0c:6d:6d:
a7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A5:8B:28:E1:97:F7:6C:1E:2C:9C:05:0A:8D:85:68:65:07:DC:9F
X509v3 Authority Key Identifier:
keyid:CA:46:2B:5A:0B:B9:4B:FB:60:10:3C:DB:47:F8:F7:3F:F8:54:BD:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykYrWgu5S_tgEDzbR_j3P_hUvX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a1:82:ec:88:e0:97:b9:2a:05:a4:fc:33:44:8a:1f:52:db:
26:5b:e3:65:5b:cd:3c:7f:b6:b1:c7:9e:ca:61:17:b2:fd:2a:
9c:9e:e4:f0:75:fc:7d:cd:65:c5:f3:72:33:b7:34:f8:c7:94:
a8:11:9b:3e:22:54:86:de:7d:e8:66:62:1d:9d:a8:54:42:e1:
a3:d8:52:61:3c:3c:0d:31:7f:aa:b3:b2:76:b3:de:eb:70:67:
a7:9b:1f:24:89:a6:90:a8:2e:33:3a:86:db:7d:c9:78:db:bf:
15:c8:00:4b:4f:ea:2b:2f:cf:1a:15:e7:e5:6c:c0:63:de:d9:
4f:e4:bb:7e:c4:53:13:5f:d5:89:bc:51:0a:97:57:ca:63:df:
3f:78:1c:d5:0b:6f:b1:cc:cf:b7:b9:70:d5:be:d5:a5:76:33:
e8:2e:d5:c7:f2:7d:79:32:dc:dd:cd:a4:01:68:47:a7:7c:f4:
2f:c5:05:19:46:2d:29:c9:03:ea:83:b0:e9:38:10:54:5f:3a:
fd:cf:27:f3:20:cc:ed:36:eb:a9:bb:d6:f8:a6:60:67:35:a0:
97:fd:d6:2c:03:e8:e2:70:3d:4e:f5:e6:5f:4d:a1:d1:8e:89:
76:9d:93:8b:2d:81:c2:c4:16:25:4a:31:f6:c0:b5:43:20:3c:
77:09:12:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:59:59 2026 by rpki-client