Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
File: YlK_stYtvrdoczSHSHy2BMrvw5Q.mft (raw, json)
Hash identifier: nflbh3YirJoVMJlTeeFqRQgfeZKRq0zZFrmM+VwZi+U=
Subject key identifier: 70:09:BE:4E:6C:13:2C:D7:2F:42:FC:63:2D:0D:06:60:4A:7B:2F:CC
Authority key identifier: 62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
Certificate issuer: /CN=6252bfb2d62dbeb768733487487cb604caefc394
Certificate serial: 01A0EC2ED98273BD2DB482C0B8CCAA842FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
Manifest number: 82
Signing time: Tue 29 Sep 2026 08:01:28 +0000
Manifest this update: Tue 29 Sep 2026 08:01:28 +0000
Manifest next update: Wed 30 Sep 2026 08:01:28 +0000
Files and hashes: 1: U83JSwoM78SuBci4bIU3yu1Tbcs.roa (hash: k9vZJbHYBx/dA8DMjVNa9LWbnCs+aqKaVz9gU9NnF8k=)
2: YlK_stYtvrdoczSHSHy2BMrvw5Q.crl (hash: Ih/Zw88Bo509MYRBjVeGabN8baRIHbj9UNxn7WWyz1Y=)
3: q4EovP81zKZgrYXxKcn2NtVe16k.roa (hash: zKPCrBv/KRqxhjPFUCwxek+3QNN7HWhiO4Bklp+aRkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:d9:82:73:bd:2d:b4:82:c0:b8:cc:aa:84:2f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6252bfb2d62dbeb768733487487cb604caefc394
Validity
Not Before: Sep 29 08:01:28 2026 GMT
Not After : Sep 30 08:01:28 2026 GMT
Subject: CN=7009be4e6c132cd72f42fc632d0d06604a7b2fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:01:60:14:56:3d:92:07:a7:0f:0f:8c:18:
f9:34:f3:45:7a:ed:0b:bc:46:1b:82:4b:db:87:0f:
ef:47:7a:8c:dc:99:f3:72:89:06:18:ad:4b:23:83:
24:dc:91:7b:14:2e:84:b1:e0:ef:7e:05:cd:d2:59:
d8:52:fc:18:24:08:4d:d4:af:73:4f:45:6c:9d:48:
50:c4:ad:bc:15:d2:ab:73:b1:dc:e1:4d:93:4d:18:
a9:ee:d8:a1:bc:7c:0a:fa:9d:c5:f0:ff:11:27:1b:
e0:df:ee:5c:d9:64:47:4b:dd:42:2f:ad:74:78:b0:
ad:a6:a3:86:34:00:50:16:3b:d6:ee:64:9a:8a:6a:
a9:55:5e:d3:8b:03:d1:b3:52:66:ba:88:30:f9:a4:
a4:20:55:3c:a0:80:af:78:3c:9c:30:f2:e1:18:ec:
80:10:d1:63:a4:83:d0:50:d4:c8:ca:25:2f:9f:a2:
ad:c9:30:dd:14:84:e4:b5:00:aa:3c:da:5b:69:f5:
b0:cb:63:df:1e:ae:af:1f:bb:3e:7a:cd:24:e7:df:
f8:32:c5:d8:98:7a:6f:e0:36:75:0c:91:39:c4:0a:
a4:8a:ce:6d:4e:b4:cc:4a:fb:8c:d1:67:c3:54:5e:
2c:95:63:0d:54:cd:71:b7:09:45:9e:b2:c9:42:a1:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:09:BE:4E:6C:13:2C:D7:2F:42:FC:63:2D:0D:06:60:4A:7B:2F:CC
X509v3 Authority Key Identifier:
keyid:62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d4:c6:56:4d:c2:39:25:18:9f:94:e3:13:ee:32:99:ac:b7:
d1:40:67:18:11:54:73:3f:9c:2e:a5:f3:e1:bd:a5:e0:58:e8:
7c:9d:20:10:59:bb:16:b3:1d:23:ca:e3:90:6d:96:bf:32:31:
a5:09:99:1f:23:11:a5:38:50:ac:29:36:08:52:6f:2e:ee:2f:
3d:7f:62:31:bf:a4:bf:c1:da:ab:ee:ba:da:80:80:92:e6:10:
4f:0c:75:3a:38:b3:14:2f:d0:83:a9:fa:a3:29:d4:30:ba:fd:
fa:69:d8:ab:9e:c9:57:1e:4e:62:6d:27:80:2c:7d:cd:df:1e:
16:b9:49:8c:fe:19:25:21:92:8e:5a:bd:40:f6:aa:aa:db:f8:
5b:65:5b:19:5b:d7:49:d0:2f:cb:02:a1:bc:85:57:17:cb:1f:
7a:db:f7:ee:16:44:0d:88:c8:c0:7e:41:15:4e:27:da:19:d6:
1c:e7:8d:50:dd:b4:40:cf:c4:05:13:85:57:7f:84:91:53:8f:
7e:c2:ea:dd:8b:27:4d:62:ad:af:fb:30:d6:f5:23:92:97:19:
cc:18:68:e5:be:7c:12:2e:28:a4:af:47:ab:86:05:84:cc:1a:
d1:82:07:ae:bb:cb:04:a2:70:a3:6c:7e:c8:57:3a:a9:11:1f:
e1:83:67:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:12:34 2026 by rpki-client