Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
File: YXvGPTvl98AszEqZ_C8vVSiKLWc.mft (raw, json)
Hash identifier: lskk9/jsYxsx4oMnqEe8ugb5TNSJYGq/T94vEBsTkfw=
Subject key identifier: 4F:B9:55:81:36:C6:9A:E3:00:9D:3C:79:E7:A1:07:96:86:0E:4C:92
Authority key identifier: 61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
Certificate issuer: /CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Certificate serial: 019E2091ACF4D2D2E7F767BA6972886D7772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
Manifest number: E2
Signing time: Wed 13 May 2026 09:01:18 +0000
Manifest this update: Wed 13 May 2026 09:01:18 +0000
Manifest next update: Thu 14 May 2026 09:01:18 +0000
Files and hashes: 1: YXvGPTvl98AszEqZ_C8vVSiKLWc.crl (hash: 2g0Z2LQmOYXwXaM3dEUhGP7TB+OavxPIref4SA+nd2A=)
2: oC8MNAr3RRJD7iVzFgvjH2c0fSg.roa (hash: zQGn/viKIKxmP8Pxorl9pkhqm4xAapY3F6TTAuu6mlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:ac:f4:d2:d2:e7:f7:67:ba:69:72:88:6d:77:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Validity
Not Before: May 13 09:01:18 2026 GMT
Not After : May 14 09:01:18 2026 GMT
Subject: CN=4fb9558136c69ae3009d3c79e7a10796860e4c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:c8:7f:f2:74:ef:24:76:ab:fe:dc:cf:20:
49:3f:3b:ed:bb:a0:15:a8:03:f6:4a:cf:df:e2:b5:
e0:09:8c:13:c7:e5:8f:52:92:18:3f:ad:5c:83:ca:
e0:40:b6:f4:75:3e:3f:03:05:ad:5a:be:07:67:1f:
23:b3:fd:28:95:57:be:ed:6e:15:cc:83:ee:74:05:
fc:ed:6a:6d:ad:fe:7a:16:b7:b7:57:c1:9b:6f:de:
4b:16:9e:8e:2e:c4:4e:2a:31:53:b3:82:8f:ec:19:
74:75:e7:cc:af:d7:ad:cc:45:80:dc:a4:f6:f4:4b:
ff:d4:7a:23:bf:a5:21:c1:00:da:e7:75:e3:66:26:
04:ed:85:de:e9:49:10:66:af:5b:37:87:2f:59:15:
81:56:dd:44:d0:62:98:6e:d2:76:37:1a:e9:26:aa:
97:16:e0:da:e2:82:55:ce:7e:3b:fb:aa:83:da:6d:
cb:67:2f:be:35:fd:92:ba:5d:69:b6:1e:1c:4f:92:
25:9d:a3:de:af:32:e1:25:d8:b4:39:66:52:7f:b7:
e1:40:b5:b0:ae:37:52:90:c5:c1:2b:2c:6b:ff:8f:
17:d7:a9:1d:32:79:50:c0:62:dd:4f:0d:ba:c5:ef:
42:b6:a8:67:12:10:34:8b:39:90:7a:78:b4:23:8b:
22:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B9:55:81:36:C6:9A:E3:00:9D:3C:79:E7:A1:07:96:86:0E:4C:92
X509v3 Authority Key Identifier:
keyid:61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:24:99:85:91:33:f0:b3:f9:44:1b:6c:4d:e3:1a:cf:89:10:
38:95:d7:10:0a:27:97:e3:1f:89:7a:b8:1d:22:ad:67:e4:59:
55:b1:8f:f9:e3:71:c6:b4:61:cd:b3:6c:10:6e:49:dc:b2:65:
dc:fc:91:18:df:02:69:db:33:13:c7:7e:6a:b3:85:81:4a:b1:
34:07:05:3e:48:b8:3d:2b:21:6e:7a:27:7d:fa:7a:f1:67:50:
70:c8:2e:da:5c:5f:1a:36:27:35:4c:d2:a8:a6:c8:68:c1:9e:
4b:3c:2a:bc:52:b7:52:da:55:c0:19:2e:6f:18:77:2b:48:9b:
15:0a:0b:6c:2a:1f:e7:d3:b7:68:6c:e0:e3:26:e4:81:1d:5d:
6b:6e:4d:f4:75:fa:b3:21:54:79:5b:ba:d9:fd:8c:39:8e:d8:
e5:68:1d:77:5d:16:89:25:d3:81:79:f8:ef:bc:34:d5:80:73:
42:1c:c5:64:fc:5c:62:ed:62:40:fa:39:17:3c:40:90:a3:75:
bc:73:36:31:22:2e:a5:52:bc:3a:e2:91:80:62:72:08:74:a0:
b3:53:d7:be:23:0a:b0:0e:07:15:ed:a4:bf:65:a1:e1:ce:a2:
97:88:27:c2:c2:3c:e9:f0:41:63:e0:9e:38:8a:2a:4d:99:05:
03:c0:90:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:30:55 2026 by rpki-client