Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
File: ybssFI7w7gD_WiIa8bxhx-GKpLw.mft (raw, json)
Hash identifier: njMnd7w3jIzabOevM2sLlE9djAGyvOQHiIs0grCTL74=
Subject key identifier: 6D:74:AB:62:26:EC:15:DE:01:E0:74:0E:3C:97:C0:A3:8D:BE:79:A1
Authority key identifier: C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC
Certificate issuer: /CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
Certificate serial: 01A0D1249AFC4249DE570678417994ECFBEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
Manifest number: 027E
Signing time: Thu 24 Sep 2026 02:00:32 +0000
Manifest this update: Thu 24 Sep 2026 02:00:32 +0000
Manifest next update: Fri 25 Sep 2026 02:00:32 +0000
Files and hashes: 1: 2vfd_kX6R8_1pSce-qH7ueF_CFI.asa (hash: gyU2q6SGexsT0na8dPH6q8my1zwHUMQLEgtgSUYyBL0=)
2: ybssFI7w7gD_WiIa8bxhx-GKpLw.crl (hash: qp7LybKS7ZnStHXXQypwCdmHlrVlMY8ZxjJramLlA/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:9a:fc:42:49:de:57:06:78:41:79:94:ec:fb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
Validity
Not Before: Sep 24 02:00:32 2026 GMT
Not After : Sep 25 02:00:32 2026 GMT
Subject: CN=6d74ab6226ec15de01e0740e3c97c0a38dbe79a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ad:6b:d1:da:40:bc:78:eb:be:97:ab:64:98:
50:4f:84:c7:8e:6e:7e:52:d0:ab:15:95:c7:a7:88:
ac:a8:4e:1d:b7:5a:7b:78:3e:b6:03:18:16:ea:a8:
66:8d:fd:5a:84:c3:58:c3:c5:36:0f:6b:68:d6:d9:
2a:3e:dc:30:08:72:a5:e2:4f:d5:6e:b8:95:32:aa:
81:a5:02:34:8e:17:47:38:45:5c:a0:49:54:f2:10:
b4:1e:3d:f1:6c:26:4f:d4:4c:d7:c4:ad:6f:d1:fc:
a5:79:d2:59:ef:85:09:1e:34:63:3f:15:81:96:39:
6b:88:46:e4:ce:27:1b:30:71:36:79:fd:1d:e3:13:
6d:48:a6:46:0b:48:b3:92:68:1a:fc:24:9f:0d:5a:
4f:55:a2:d1:19:88:a9:dc:e1:33:39:8c:f6:0a:5a:
04:66:a2:87:5b:36:84:01:cc:01:8c:32:86:0c:30:
d7:da:44:fa:41:92:5b:83:b6:61:ab:ba:63:83:ea:
80:34:fa:04:ca:60:8c:09:df:b4:d0:a0:60:25:4e:
77:8a:00:8f:16:c6:9c:cd:5d:51:a4:6c:cb:0c:c2:
8d:d1:30:0b:99:8c:ec:bb:73:b2:a1:b6:fc:ef:47:
f0:f7:13:7a:85:24:13:4b:25:d8:4d:cb:86:eb:f8:
b5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:74:AB:62:26:EC:15:DE:01:E0:74:0E:3C:97:C0:A3:8D:BE:79:A1
X509v3 Authority Key Identifier:
keyid:C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:20:90:5a:28:09:a0:78:1e:5f:6e:50:aa:11:f7:ba:97:aa:
8f:12:bb:77:0d:27:73:87:cb:b7:78:d1:59:4c:7d:db:3a:29:
6d:45:43:5b:2b:fb:52:9b:06:5b:3f:35:ef:5e:f6:66:6e:0c:
9b:d4:55:51:e2:37:ee:76:c1:2b:52:b3:49:7b:39:2f:61:4f:
64:48:e4:db:75:ee:95:74:4b:3e:d2:7a:33:22:da:14:14:cf:
08:64:d6:b4:6e:33:81:a2:8f:eb:cc:46:66:fe:06:a2:97:16:
d1:09:46:73:f2:96:96:8e:52:ee:cb:dc:4d:bb:16:a2:2d:98:
c9:eb:19:af:a6:4d:ba:11:e1:92:f4:c8:24:2c:55:6e:07:e4:
a3:28:2c:38:a1:04:0e:f2:a3:7d:37:e6:c2:c8:35:23:14:86:
f8:cb:56:4c:5a:54:e4:9f:9a:5e:a6:6d:44:27:95:84:8c:e3:
6d:3c:0c:19:40:1f:e9:2b:22:97:35:65:d8:a0:25:70:0e:f0:
5a:3d:d0:b9:d1:6d:ec:7e:c8:b2:96:95:3e:89:e5:a2:b7:2e:
f9:08:b3:a0:31:c3:43:83:d9:f0:eb:ca:40:5a:55:7c:e8:c4:
bb:b6:61:b0:99:09:4e:bc:f9:db:95:33:ec:aa:14:2a:5d:9e:
28:7c:d2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:20:17 2026 by rpki-client