Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.mft
File: YiEr2gPikIllk3hQroSRo3O6h9Y.mft (raw, json)
Hash identifier: fMsiMsmcorOVJPv4tEsku0VEoGY3qsRctBddoqVW2oQ=
Subject key identifier: 2C:6F:D3:CE:B9:C2:9F:4C:D8:06:F8:17:00:F2:6E:AB:33:20:CE:5F
Authority key identifier: 62:21:2B:DA:03:E2:90:89:65:93:78:50:AE:84:91:A3:73:BA:87:D6
Certificate issuer: /CN=62212bda03e2908965937850ae8491a373ba87d6
Certificate serial: 01A181BEBE138B25D621D1765FD19CD6145A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiEr2gPikIllk3hQroSRo3O6h9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:02:03 +0000
Manifest this update: Wed 28 Oct 2026 09:02:03 +0000
Manifest next update: Thu 29 Oct 2026 09:02:03 +0000
Files and hashes: 1: J5ndYN47GulHNdd8j26GfEdBb4o.roa (hash: iuNL8Ztc0MFggBQFipuWLLh7iLuDAe58bhFd6SGPtXk=)
2: YiEr2gPikIllk3hQroSRo3O6h9Y.crl (hash: YGMx9+pR9EtyrfpjIyq+l/EtDSsEEhr0EKirgvwYLME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiEr2gPikIllk3hQroSRo3O6h9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:be:13:8b:25:d6:21:d1:76:5f:d1:9c:d6:14:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62212bda03e2908965937850ae8491a373ba87d6
Validity
Not Before: Oct 28 09:02:03 2026 GMT
Not After : Oct 29 09:02:03 2026 GMT
Subject: CN=2c6fd3ceb9c29f4cd806f81700f26eab3320ce5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b3:58:62:85:04:61:9f:66:43:15:53:c6:7a:
22:62:7a:ed:dc:2a:97:56:f3:3b:cc:e6:f3:7a:e3:
f1:38:18:a0:12:a4:73:05:f8:3c:b9:a2:b1:fc:a8:
42:70:5b:ad:57:5c:3b:09:ea:29:6e:c6:32:68:4d:
81:a7:dd:4e:5c:4d:03:0b:fe:44:db:59:49:16:a7:
1e:d8:89:a5:bb:f5:a0:6e:8f:2f:f8:ed:6d:b1:fa:
1b:fc:84:65:a8:56:88:d0:6a:a3:6f:94:0d:05:63:
e9:0d:7a:bf:62:9e:fb:57:00:d2:67:52:21:e2:4e:
a4:e6:bc:9f:29:1f:a2:42:db:3b:6d:ad:26:4a:79:
d1:b5:90:0d:93:cf:84:91:f7:0b:e6:64:ce:2c:72:
58:f9:ef:67:54:11:0f:8b:d2:ff:c8:89:1b:b3:af:
0a:a1:44:7a:18:9e:ae:b8:b2:6d:94:43:7f:08:64:
ab:8b:92:d5:c4:e6:63:a8:9b:ac:0c:ca:b8:f4:12:
18:31:5a:e0:64:eb:a4:48:a5:3f:2e:f4:f4:23:75:
dd:08:20:c4:59:41:2c:37:70:6b:b6:15:9a:36:38:
3d:40:8a:89:89:9a:b5:d8:6f:be:73:c5:b4:db:87:
76:eb:30:4c:0b:b4:53:e6:17:39:32:3e:ff:e0:af:
95:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6F:D3:CE:B9:C2:9F:4C:D8:06:F8:17:00:F2:6E:AB:33:20:CE:5F
X509v3 Authority Key Identifier:
keyid:62:21:2B:DA:03:E2:90:89:65:93:78:50:AE:84:91:A3:73:BA:87:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiEr2gPikIllk3hQroSRo3O6h9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b6:31:8d:d8:5b:75:13:58:89:18:7f:2d:4d:6f:a5:01:d2:
9d:1b:a7:4f:d0:76:db:b3:76:8a:55:97:dc:c7:7f:5e:a3:c1:
92:91:1b:92:0e:16:0d:1d:ac:fc:41:5e:aa:f9:d0:c8:99:13:
33:9c:7d:73:bc:ac:19:cb:4b:d0:2e:ec:03:49:5b:6a:81:b7:
21:f5:c1:61:1b:31:4a:3e:4b:4f:c7:48:a9:3b:6d:9a:61:ab:
fd:e0:4b:6b:0e:aa:02:c9:2a:0a:41:b4:f5:df:16:10:ae:a7:
8f:0c:98:5b:14:6d:92:3d:1b:3b:5a:3b:52:76:f8:95:b7:76:
12:3b:62:bc:2b:58:f1:99:d4:e7:fc:c4:f2:49:44:43:73:14:
f2:39:37:57:02:de:d3:c0:9c:0a:b1:9f:c2:36:d8:73:50:6c:
f3:e8:ae:fe:cd:1b:c1:c3:c8:cc:74:77:a0:34:eb:8a:bc:e3:
34:69:87:c6:68:8d:d1:be:2e:f6:39:c9:20:02:26:ea:9e:f5:
7b:b3:90:58:a2:e4:dc:f5:78:4c:10:39:35:37:db:d9:3d:a8:
54:de:01:0b:e3:7e:91:bd:2c:ea:12:22:a1:d2:70:b3:17:23:
b8:df:4e:57:67:d1:f2:ed:37:ab:ae:a6:b2:68:1b:5f:41:29:
a3:f1:6b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:44:08 2026 by rpki-client