Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier: NCuzNwHVhPx5/H6jyvy3j2S4bp+WD/gp9EoVvIL4t4g=
Subject key identifier: 45:84:B5:D7:0C:10:D0:FF:F2:F5:17:50:79:FB:B3:0A:0E:9D:86:3C
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 01A08C439CDE4210E2288AE48E09BD88382B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number: 1890
Signing time: Thu 10 Sep 2026 17:00:36 +0000
Manifest this update: Thu 10 Sep 2026 17:00:36 +0000
Manifest next update: Fri 11 Sep 2026 17:00:36 +0000
Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: DhQwV6atMqQan8W01fGf8pqwLT5iNxTh4rODfbBEiFk=)
2: tCO87qgLeHdiJcQ1IV_bd46Jvho.roa (hash: 2SSHDUuNwyIUrIbmZYF0QjOFxPKwxanOkPswUq79oUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:9c:de:42:10:e2:28:8a:e4:8e:09:bd:88:38:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: Sep 10 17:00:36 2026 GMT
Not After : Sep 11 17:00:36 2026 GMT
Subject: CN=4584b5d70c10d0fff2f5175079fbb30a0e9d863c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2e:ca:4a:6a:62:c6:e5:d8:82:43:9e:dd:85:
83:a4:94:ab:5a:90:32:c8:f2:7e:c8:ef:31:aa:7f:
3c:61:91:4b:63:7f:27:43:96:35:63:d3:6e:54:4c:
41:8d:dd:12:9c:03:4b:7e:10:f7:6d:01:43:af:bf:
fb:16:ee:86:6f:ee:77:cd:f9:9c:7c:cc:97:6b:0e:
f0:68:2f:69:1e:11:99:c5:0c:05:49:5a:4e:9d:0a:
60:02:55:28:e8:66:3e:58:ba:18:36:bb:23:10:33:
a1:3c:1f:a1:63:04:00:5a:eb:94:0f:56:34:4f:69:
90:df:3e:24:56:ff:0e:ca:90:67:3e:4b:fe:6a:65:
08:48:7f:cd:dc:e9:76:70:6c:a6:da:31:b8:60:c0:
fd:30:2f:72:49:b9:d2:67:4a:d7:59:54:97:fd:93:
26:52:04:b7:40:e1:ff:a0:a6:d2:82:3f:2f:38:31:
00:5b:17:80:7b:27:2d:46:01:84:3b:b2:e5:67:c0:
46:01:23:2e:38:26:f6:32:e7:18:66:71:24:3f:ac:
1a:a7:ac:8c:1c:cd:72:ba:68:4a:1f:84:9a:93:d3:
48:38:02:b2:30:41:32:6d:f6:c2:b3:39:51:ee:9b:
04:2d:84:7e:d1:67:81:31:95:85:f1:5f:3a:a2:9b:
27:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:84:B5:D7:0C:10:D0:FF:F2:F5:17:50:79:FB:B3:0A:0E:9D:86:3C
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0f:9f:cc:fe:1c:fb:3b:2b:22:92:6f:a6:7f:c8:8b:12:a4:
b1:70:59:d8:72:65:88:86:a1:50:7d:6e:f0:5c:a3:68:20:5a:
4f:95:3d:81:ca:c1:fc:4b:26:29:9b:e4:19:58:52:03:05:6d:
bb:71:d9:78:cb:a5:99:93:cd:c5:2a:9c:06:3a:ff:1c:34:9b:
e3:d7:cb:48:d7:b2:bd:bb:8d:f6:b1:b1:5a:39:23:b9:4f:39:
38:8c:e5:f4:c6:e6:b5:69:77:da:b4:c5:c3:c7:47:49:3b:40:
ab:e9:a4:d8:c2:b2:51:96:39:8d:e5:b8:05:e1:cb:6e:7e:9a:
69:bf:b2:cd:b4:4a:aa:33:05:9b:22:7e:77:1b:c6:f0:82:57:
be:5e:5c:29:1e:51:2e:eb:f2:57:90:9a:7a:6a:a6:69:0e:6f:
f4:af:55:69:9e:93:d4:40:15:46:87:4b:4f:ec:a0:c3:53:46:
66:4c:d2:e5:15:64:c3:40:e8:d9:82:0e:9d:4a:65:d9:6d:1d:
8c:7d:bf:5a:2f:17:71:1b:af:8a:2e:33:57:99:c4:93:1d:2a:
47:da:04:0a:c1:f8:a5:80:68:ff:2a:a6:6f:af:57:8d:4d:68:
21:b8:89:bf:e5:8b:d4:14:c0:3d:49:38:56:a5:d1:a3:c8:a5:
6d:1b:db:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:37:48 2026 by rpki-client