Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
File: YsTHQ9XCr88n8QTrbgMWEWyFx94.mft (raw, json)
Hash identifier: d8xWDXGs+cLhpYIj6W0NSGj0iPnSnOUIJzKtrm/l51k=
Subject key identifier: C2:3B:67:56:E4:48:91:16:6B:A3:D5:D4:9E:3D:CE:93:A1:F0:E0:CA
Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Certificate serial: 01A045071F37810206FDE207420777D5D3D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
Manifest number: 0FF3
Signing time: Thu 27 Aug 2026 21:01:29 +0000
Manifest this update: Thu 27 Aug 2026 21:01:29 +0000
Manifest next update: Fri 28 Aug 2026 21:01:29 +0000
Files and hashes: 1: QrszOClIEQh3elMo6v8ATkV3fJ0.roa (hash: VAU1sjN6ik5JtfJ9K0j96yl5ekT9sKWTrHI+CDnGb7U=)
2: YsTHQ9XCr88n8QTrbgMWEWyFx94.crl (hash: FvZaCmZYOp/BvqSbvVCQ1RLGPwefkVXsWNV+iimtc9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:45:07:1f:37:81:02:06:fd:e2:07:42:07:77:d5:d3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Validity
Not Before: Aug 27 21:01:29 2026 GMT
Not After : Aug 28 21:01:29 2026 GMT
Subject: CN=c23b6756e44891166ba3d5d49e3dce93a1f0e0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:be:7d:f4:c3:25:5d:4a:32:35:09:ff:74:
07:56:d2:ac:8d:25:20:42:08:ff:16:8a:28:2b:2c:
79:fd:14:9b:5c:de:dd:74:0b:41:ca:d9:c3:4f:07:
af:59:80:31:3b:53:23:61:1b:f1:80:77:d4:a1:06:
c4:1d:62:73:8a:45:02:53:04:49:8c:a4:5c:c3:44:
9e:ab:c4:a5:00:0f:bf:d1:12:6c:37:af:8e:9f:dd:
28:b6:92:f7:ff:b4:df:be:a9:a0:06:b2:08:b3:06:
19:25:d8:12:2a:0b:39:59:c7:5a:72:7a:f8:1c:6a:
76:f3:4c:2a:88:24:0a:96:16:0c:8c:76:51:95:d6:
99:3f:fc:0f:1c:9e:bc:96:2d:fc:80:8b:31:38:23:
0c:f5:ce:54:06:da:56:ee:70:bc:47:03:c4:d6:1c:
3e:59:05:13:a5:8c:03:4a:c7:39:f7:6b:ae:ef:73:
20:8c:9e:80:9f:76:23:b5:a8:e7:20:d6:41:93:2a:
a8:d5:7f:9e:6e:b0:57:9c:db:7e:93:58:76:cd:40:
a8:ba:26:89:93:1a:e1:30:7c:43:04:69:02:3d:09:
3e:46:e2:40:cc:c7:0c:35:46:b7:27:a0:30:6e:9b:
65:b1:cc:c0:25:90:71:50:5d:59:d3:b5:cd:d5:bc:
40:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3B:67:56:E4:48:91:16:6B:A3:D5:D4:9E:3D:CE:93:A1:F0:E0:CA
X509v3 Authority Key Identifier:
keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7a:62:72:51:62:7e:67:64:0e:e0:8b:a4:e5:5c:7e:e8:2c:
ac:50:9c:d6:4d:ec:83:6c:20:b3:6a:26:9e:97:84:8a:3b:93:
25:83:e8:92:47:df:f1:3a:6b:aa:2d:6d:4b:36:80:db:29:f5:
90:07:7d:12:2d:bc:01:72:41:aa:5f:fb:ed:cb:53:50:f3:69:
c3:63:10:33:7f:fc:20:2b:88:41:e9:52:9b:9c:0d:32:ad:7c:
37:cf:d8:1e:a8:63:31:dc:70:25:7c:b9:13:2c:db:cb:0b:a6:
d1:b7:f0:b6:6e:9d:39:51:83:6a:5d:1e:2c:58:97:1c:54:2d:
06:48:52:3e:46:c2:0d:8b:c5:34:d1:c5:2a:f0:47:73:61:cb:
b4:5e:ce:b0:0f:bd:d4:63:d4:61:38:c9:72:7f:b5:6e:1c:1e:
70:5c:b7:0d:c2:f1:13:38:8b:ca:b7:28:32:ef:17:f0:ac:f5:
08:99:33:06:04:f8:af:77:c2:1a:df:17:fa:9a:62:26:ee:a3:
97:6d:b7:b6:f3:75:e9:f2:62:ad:bd:70:eb:fd:dd:3c:1c:f3:
4e:10:39:5a:52:c1:59:de:46:41:77:65:ed:f1:13:bd:8d:ed:
b0:c0:df:f3:14:6a:61:40:35:18:64:c4:3d:98:78:c4:c9:7e:
6d:eb:67:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 07:21:07 2026 by rpki-client