Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
File: YsTHQ9XCr88n8QTrbgMWEWyFx94.mft (raw, json)
Hash identifier: bLvXapN3AaVDmo1zolBgcAfvnUhHJmWKf4tcYarKFrc=
Subject key identifier: 2C:00:2F:5B:4E:B1:B5:D2:49:A3:09:DD:21:1C:E3:86:A1:EB:98:21
Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Certificate serial: 01A17DE2173DD36F3744154F1ED3E81B3026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
Manifest number: 1095
Signing time: Tue 27 Oct 2026 15:02:11 +0000
Manifest this update: Tue 27 Oct 2026 15:02:11 +0000
Manifest next update: Wed 28 Oct 2026 15:02:11 +0000
Files and hashes: 1: QrszOClIEQh3elMo6v8ATkV3fJ0.roa (hash: VAU1sjN6ik5JtfJ9K0j96yl5ekT9sKWTrHI+CDnGb7U=)
2: YsTHQ9XCr88n8QTrbgMWEWyFx94.crl (hash: ZojPNJh06xbj3afsTccgVRS9ff6p2VS8I+vr+SSJ8Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e2:17:3d:d3:6f:37:44:15:4f:1e:d3:e8:1b:30:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Validity
Not Before: Oct 27 15:02:11 2026 GMT
Not After : Oct 28 15:02:11 2026 GMT
Subject: CN=2c002f5b4eb1b5d249a309dd211ce386a1eb9821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:0c:1a:32:8c:15:5b:44:a2:7a:79:e1:ec:
7b:a6:95:ec:41:f9:28:5a:08:3d:03:1f:2c:bc:2b:
d7:d8:df:3a:56:6e:11:3b:bb:73:b3:aa:de:35:a7:
2f:9f:81:89:b4:8f:bb:4d:bf:ce:a5:99:bb:3b:e1:
64:c6:ee:1a:4d:3d:86:a8:bc:83:b5:bf:ff:a9:3d:
2b:65:46:76:03:e0:3d:99:b9:4b:28:15:7c:b1:c4:
a7:90:9f:5a:7b:95:29:24:99:9f:e9:d1:19:9c:76:
65:94:f9:e0:ab:93:b1:0b:e6:1d:18:47:a6:33:48:
30:8c:3c:8e:1a:09:7c:43:1f:67:a3:05:67:d9:7f:
07:62:8a:cd:30:3e:e8:12:f9:7c:dd:95:fa:b7:9d:
0d:86:c2:76:ac:a0:3c:9c:5c:ed:41:1f:ea:ed:ff:
bd:14:dd:c4:21:9d:b9:4c:bc:52:ca:cb:63:16:71:
cc:9c:1b:24:16:54:c4:ee:28:a9:6a:e1:e0:3e:4a:
ef:7e:00:67:3d:09:4a:1f:4b:24:08:01:96:e5:d0:
fb:7f:9e:df:8e:ad:88:7f:bb:b3:89:bc:39:96:bf:
c1:b1:18:62:04:23:d0:be:fa:21:1b:76:09:fd:a0:
d8:0f:f2:28:3a:72:7d:cb:c1:95:16:5f:f5:3e:93:
24:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:00:2F:5B:4E:B1:B5:D2:49:A3:09:DD:21:1C:E3:86:A1:EB:98:21
X509v3 Authority Key Identifier:
keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9e:86:7d:5c:0a:0f:23:19:3b:5b:d5:cd:a4:ff:55:8f:e1:
a0:4a:05:dd:14:bf:e4:58:a5:01:e9:95:89:fe:74:95:8a:ff:
17:dd:49:13:c3:b8:36:de:aa:78:5d:83:3d:b8:b1:73:0e:61:
7e:21:7f:a5:bf:c4:77:4b:c9:5c:59:ca:46:34:01:21:62:cc:
dc:c5:0e:4b:ea:39:a3:30:a3:22:83:86:dd:ac:06:fd:1b:35:
ec:27:aa:dd:0b:b3:9c:1e:96:16:74:ad:0d:bc:98:23:0f:53:
4d:75:9f:56:79:8a:01:87:5d:79:e6:e1:da:ea:87:9a:b3:d7:
55:03:ff:54:1e:aa:18:f3:9b:6b:c1:7f:8b:50:c8:2b:78:66:
f3:e6:18:ef:dc:5c:f8:f0:80:46:a2:b2:b7:9a:88:cc:66:a2:
5a:df:ca:3b:58:6f:44:f5:ba:10:07:7d:51:bf:35:ce:04:66:
59:a3:24:a1:23:2f:bc:3b:ea:0a:00:58:8a:13:93:dc:38:6d:
39:df:14:fc:b4:7a:ae:68:fb:98:9d:09:47:cf:0d:be:44:82:
1a:fe:12:3c:aa:fa:e9:64:d3:47:78:cc:fb:38:7a:59:71:ef:
77:fa:e8:b8:2a:11:fc:07:0c:82:42:81:38:ee:bc:87:e3:d2:
af:76:6f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:19:20 2026 by rpki-client