Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
File: YXvGPTvl98AszEqZ_C8vVSiKLWc.mft (raw, json)
Hash identifier: BRncW8FZrR37T9rnnXk+7PjwpjbA4fBfAMRkL7p9KRQ=
Subject key identifier: E1:75:75:61:3C:74:E5:7D:29:8C:93:86:E6:46:54:B9:6C:3B:DF:ED
Authority key identifier: 61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
Certificate issuer: /CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Certificate serial: 019F935B7EF253311D9CEB90DDC2B010D39C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
Manifest number: 01A2
Signing time: Fri 24 Jul 2026 09:01:14 +0000
Manifest this update: Fri 24 Jul 2026 09:01:14 +0000
Manifest next update: Sat 25 Jul 2026 09:01:14 +0000
Files and hashes: 1: YXvGPTvl98AszEqZ_C8vVSiKLWc.crl (hash: kYIcjyv3vKHhOMBV5HdEizFANqCh72X6JL3ih20NF3w=)
2: oC8MNAr3RRJD7iVzFgvjH2c0fSg.roa (hash: zQGn/viKIKxmP8Pxorl9pkhqm4xAapY3F6TTAuu6mlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:7e:f2:53:31:1d:9c:eb:90:dd:c2:b0:10:d3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Validity
Not Before: Jul 24 09:01:14 2026 GMT
Not After : Jul 25 09:01:14 2026 GMT
Subject: CN=e17575613c74e57d298c9386e64654b96c3bdfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:22:6b:b8:70:6e:fb:17:f2:d9:f4:63:2c:24:
e8:78:d3:b9:a4:f3:4e:8c:97:72:b4:d3:74:92:53:
fa:e8:fc:b6:ed:1e:60:3e:24:ea:b2:ec:01:04:d2:
0a:d9:a8:36:df:51:65:58:e4:f7:2d:c0:7a:ac:b8:
9b:7d:4b:84:46:21:5f:db:80:5d:e5:9e:d8:42:e7:
32:3b:f3:db:16:97:9e:68:30:02:36:bf:1e:72:9a:
9d:0b:0b:7c:c2:81:f1:55:64:24:5d:b3:b4:84:28:
19:1d:c7:42:a8:6c:1e:06:0f:d8:88:75:6e:3d:c4:
25:35:a5:bd:4b:1d:56:e5:ca:87:ff:1e:9d:52:72:
f5:13:54:c2:c7:8c:d2:3d:d2:30:7c:02:19:76:ed:
66:07:aa:b7:77:da:80:c3:42:14:bc:fd:ad:c6:b0:
1f:03:9f:59:b1:74:95:bd:96:a1:82:88:2b:67:df:
48:0a:38:87:0f:25:4a:7c:1e:bb:96:41:51:d8:8f:
7c:81:24:c5:42:49:b5:26:d7:92:22:31:ec:e4:52:
18:98:bb:1c:c6:5d:8b:06:da:56:a0:e8:1e:d2:fb:
d1:9e:c9:0d:e6:f8:e2:a3:90:07:80:9b:05:60:30:
79:da:af:5f:51:81:51:80:98:d4:5c:8e:7d:11:f8:
81:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:75:75:61:3C:74:E5:7D:29:8C:93:86:E6:46:54:B9:6C:3B:DF:ED
X509v3 Authority Key Identifier:
keyid:61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:af:1f:37:aa:a9:1a:84:fd:46:df:b7:f4:24:e6:46:01:b2:
56:eb:b5:9d:ec:56:e4:76:7e:5b:2d:19:e3:f9:81:4d:33:d6:
85:c2:9a:cf:6d:f2:d4:86:64:0b:9e:c5:8f:c3:31:e0:0a:d9:
0f:18:3d:3e:17:a5:c2:a7:a5:e5:0c:b5:4e:f4:55:30:6a:f8:
3a:c6:ef:eb:fe:00:37:f6:77:57:32:be:7b:76:c3:7d:f9:a4:
eb:37:41:c5:66:b5:74:1c:7c:e9:4f:0c:8e:c7:41:66:61:44:
8b:1b:cf:b3:be:9f:88:be:1a:00:22:de:80:48:fc:b4:77:45:
59:20:c7:ac:71:ca:4a:f3:45:23:0e:5d:28:2e:d9:38:20:ec:
93:fd:8a:8a:7e:b8:15:72:e0:39:0d:2f:d4:6d:19:9d:54:9b:
69:87:6b:00:77:af:48:4d:f3:98:e9:7a:a8:d1:e4:61:10:7d:
25:46:df:76:bc:e0:da:4c:0d:80:62:a2:bb:fc:6d:36:e5:8b:
55:76:19:6e:d8:59:ae:87:b6:ef:d6:74:02:b9:1c:94:6c:ce:
78:29:7e:4c:bd:9c:c5:1e:59:c2:99:d0:57:b0:8e:5e:34:2d:
e5:d2:22:cb:4b:b1:6d:49:af:b9:82:a3:1c:f3:be:48:9f:87:
44:eb:1c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:49:32 2026 by rpki-client