Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
File: YXvGPTvl98AszEqZ_C8vVSiKLWc.mft (raw, json)
Hash identifier: jT4ZB0Wj0W0JVzXJNSGJ+R80DQDX7ZTelGvJeAfkeV8=
Subject key identifier: C1:B8:86:99:4D:AB:06:70:FA:DA:04:44:67:45:B2:58:E4:BB:52:13
Authority key identifier: 61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
Certificate issuer: /CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Certificate serial: 01A0DBAA2003B3EDC4ABC6D1180D858D6075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
Manifest number: 024C
Signing time: Sat 26 Sep 2026 03:02:34 +0000
Manifest this update: Sat 26 Sep 2026 03:02:34 +0000
Manifest next update: Sun 27 Sep 2026 03:02:34 +0000
Files and hashes: 1: YXvGPTvl98AszEqZ_C8vVSiKLWc.crl (hash: 56JtfBfH4ypWumSzuwyB0bvqfrhY+WACm8dqUwDbXog=)
2: oC8MNAr3RRJD7iVzFgvjH2c0fSg.roa (hash: zQGn/viKIKxmP8Pxorl9pkhqm4xAapY3F6TTAuu6mlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:aa:20:03:b3:ed:c4:ab:c6:d1:18:0d:85:8d:60:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Validity
Not Before: Sep 26 03:02:34 2026 GMT
Not After : Sep 27 03:02:34 2026 GMT
Subject: CN=c1b886994dab0670fada04446745b258e4bb5213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:86:37:4c:a0:dc:0a:a9:32:b2:d2:a6:45:
5e:f1:65:81:77:14:5e:04:84:71:eb:d2:e3:87:fa:
0b:a3:6a:2e:3e:93:ab:fd:e3:1f:31:c7:30:45:06:
11:01:80:ec:2a:14:df:ee:ec:e0:17:47:8c:40:b2:
8d:e8:1b:40:a6:03:7b:0c:2f:ac:ad:dc:c7:a5:68:
20:71:86:97:28:a6:31:c2:73:fa:c0:1a:b1:7c:14:
a5:16:c2:73:34:52:46:23:2f:c9:a3:f0:fd:a5:5f:
6f:75:aa:b9:90:a9:e6:b4:ea:8b:a2:60:ec:e1:a7:
3a:4c:c3:97:78:33:13:2c:9b:ab:fb:87:6b:43:93:
09:ef:5b:9c:a8:5d:79:74:e0:09:f5:31:2c:6e:36:
98:37:b0:d9:a7:b3:b1:19:f4:d4:05:db:43:12:68:
fd:69:bc:c8:dd:67:ea:5f:e8:f9:ce:78:20:a8:8b:
7e:c5:62:4e:19:83:1e:2c:96:34:61:b4:5f:00:9a:
79:9e:45:df:3f:43:a5:00:fb:7b:a5:4c:be:a6:55:
5d:7f:f4:06:3d:62:65:9c:f1:1c:af:44:5e:58:00:
d1:0b:8b:be:0e:78:44:bb:85:a7:4e:69:9d:00:fc:
6e:e6:fc:09:25:25:bc:fa:18:2e:2f:ea:43:fe:ce:
93:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B8:86:99:4D:AB:06:70:FA:DA:04:44:67:45:B2:58:E4:BB:52:13
X509v3 Authority Key Identifier:
keyid:61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:17:5b:23:c2:32:83:60:34:03:73:65:7a:c7:78:a7:ba:69:
ab:59:e2:ce:a9:76:1d:cf:2d:0e:94:0e:71:a7:08:67:e9:f0:
33:16:58:ab:c0:42:9b:a8:2a:3f:f0:8d:22:b6:34:fa:0b:11:
ac:af:3d:72:35:f9:28:5b:bd:93:6b:73:bc:a3:5e:30:42:10:
6d:37:37:8c:68:87:64:cd:29:3a:dd:8e:a9:8b:ff:b9:39:5e:
e5:dc:3e:3d:03:9f:a1:48:57:1b:ad:2f:f6:6e:e1:51:b1:04:
50:1b:55:c8:31:c7:72:8c:36:d4:e8:f2:88:4b:1d:9a:ca:aa:
9f:8f:6a:9d:51:83:74:48:f9:f4:44:07:bf:04:87:4d:23:67:
09:f0:32:2f:64:0e:1d:bb:db:b1:e8:2b:19:81:d9:a3:31:aa:
7c:d4:7f:cd:b8:aa:53:62:9f:0a:75:81:43:eb:3b:ea:38:f0:
0f:11:2e:6c:fa:6b:8e:ad:8b:21:66:9e:c9:cf:be:e7:81:77:
fa:1e:fa:05:49:26:5b:3d:b9:1b:a0:4f:89:7e:90:7d:60:da:
85:cc:a9:45:f0:29:4b:a8:98:4e:e3:3f:95:77:dc:85:45:15:
aa:75:60:88:ef:e0:9b:6c:48:31:4b:83:ac:a4:7b:2d:d5:60:
a7:fc:76:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:07:20 2026 by rpki-client