Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
File: ybssFI7w7gD_WiIa8bxhx-GKpLw.mft (raw, json)
Hash identifier: jJ9y/IMY+gssfOzeqENcQecEa+/C+UefIs6lXeOt8hQ=
Subject key identifier: 2B:46:A7:58:49:F5:19:F6:7B:A6:11:5E:5C:82:3C:77:F9:8B:53:55
Authority key identifier: C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC
Certificate issuer: /CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
Certificate serial: 019F909078B39C31C92410295152AA9FA7F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
Manifest number: 01D8
Signing time: Thu 23 Jul 2026 20:00:14 +0000
Manifest this update: Thu 23 Jul 2026 20:00:14 +0000
Manifest next update: Fri 24 Jul 2026 20:00:14 +0000
Files and hashes: 1: 2vfd_kX6R8_1pSce-qH7ueF_CFI.asa (hash: gyU2q6SGexsT0na8dPH6q8my1zwHUMQLEgtgSUYyBL0=)
2: ybssFI7w7gD_WiIa8bxhx-GKpLw.crl (hash: Tb9tIKK3Ogi+Syi/1/wlnO1RrLPgDqXSWkcUxQ/eRZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:78:b3:9c:31:c9:24:10:29:51:52:aa:9f:a7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
Validity
Not Before: Jul 23 20:00:14 2026 GMT
Not After : Jul 24 20:00:14 2026 GMT
Subject: CN=2b46a75849f519f67ba6115e5c823c77f98b5355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:c8:71:1e:d8:98:fc:69:a8:ca:33:23:75:
6e:59:95:46:03:fc:53:cd:3f:34:03:ae:98:45:ed:
a2:b2:0a:05:8d:b1:77:d9:67:50:96:d2:2e:8e:3d:
70:ba:ec:52:23:1b:f5:56:7a:3e:01:c6:8d:09:65:
58:99:86:1e:f1:65:91:8f:02:ff:fb:81:e6:ea:f1:
97:42:18:d2:72:31:7d:ba:a7:f1:84:2c:d0:f8:7e:
b2:03:19:85:c8:e3:f5:bf:cf:1c:9b:cc:21:41:1e:
12:97:26:26:4c:4e:5e:48:85:a5:ac:a5:1d:ba:6e:
fd:7f:16:66:b3:03:b9:e5:a2:fb:fa:71:84:7a:13:
ce:9a:27:56:ae:e5:20:12:6d:b1:62:1c:c8:bf:28:
5c:83:d0:44:0e:0d:a8:1a:37:de:c0:21:43:3b:97:
da:7b:84:2e:fa:57:e0:db:ec:de:cd:21:81:2d:d7:
45:ab:a6:09:37:8f:25:28:aa:a6:01:0c:47:d6:88:
b7:d0:59:16:f6:41:9a:4b:89:91:d0:c0:bb:f7:44:
ff:0a:ae:f1:66:8a:7c:4e:bc:14:4c:6f:70:e9:27:
5a:88:4d:bf:13:8c:a9:23:8b:cd:51:1a:88:e8:e2:
3a:40:77:94:2a:4a:6a:da:89:2d:0a:09:99:d4:e5:
1f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:46:A7:58:49:F5:19:F6:7B:A6:11:5E:5C:82:3C:77:F9:8B:53:55
X509v3 Authority Key Identifier:
keyid:C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:32:ed:a8:4f:f9:2f:b3:99:2f:ec:10:eb:90:a6:f7:46:12:
93:cc:46:d8:23:b4:98:f0:32:31:8a:1c:cb:b4:83:ef:b0:4d:
e3:bf:ee:fc:65:bf:f1:0a:ec:78:95:25:f2:07:72:28:90:87:
27:0d:d2:7c:ca:0c:0f:96:7d:bd:47:a4:eb:d3:35:50:24:68:
8a:19:00:ca:6b:f4:d1:9f:fe:f5:05:e8:3e:28:b9:50:67:38:
13:19:3d:b3:32:9f:8d:0f:63:19:c1:37:0d:1f:18:84:d4:64:
b4:da:29:b2:9a:34:d3:bf:e3:65:cf:e1:a3:26:25:fc:09:e4:
96:df:76:15:8b:e6:db:d3:43:82:f9:cd:79:ec:aa:3d:b6:5f:
23:b0:96:5f:bb:eb:47:15:e5:1a:25:8b:43:89:6a:59:a6:87:
c9:fe:46:30:81:9b:cd:98:74:9b:b4:77:86:f7:64:ae:bd:3f:
70:61:fa:74:22:9a:9e:a7:ff:ed:88:df:cc:36:ad:37:3d:36:
01:3c:8f:c1:08:a3:53:ef:63:4c:1d:86:66:f2:66:94:a4:4f:
68:33:c0:f8:30:cf:3a:75:7b:91:f7:a6:7c:f3:4f:ae:6b:cd:
5f:be:36:bb:60:c1:5d:8f:05:f8:19:6a:54:58:3e:c1:8c:1c:
8a:e1:b3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:44:39 2026 by rpki-client