Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
File: yPV2sjbj7l0fmZnD27fBbEUfnh8.mft (raw, json)
Hash identifier: 8jlk7ORIl/EVCJWtAW5s9W3rym4e+AiIj4sLAiqabiU=
Subject key identifier: 23:E8:3E:87:91:63:4E:E4:A0:93:FC:62:3F:96:C6:D3:A3:2B:0C:D8
Authority key identifier: C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
Certificate issuer: /CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Certificate serial: 01A03D83D428B7D54D9A89AB56D4F692BB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
Manifest number: 023E
Signing time: Wed 26 Aug 2026 10:00:44 +0000
Manifest this update: Wed 26 Aug 2026 10:00:44 +0000
Manifest next update: Thu 27 Aug 2026 10:00:44 +0000
Files and hashes: 1: GHERZqz049rvjNTnBfQO3YvbOyk.asa (hash: KCArC3c+jaUI8BAVlQiNYZY3QjPqtZfUkf0IF/lrrUk=)
2: Z1BNJVKh2ny5tUlNxHWm6XyekEg.roa (hash: MctVPkPLj8G1XZDtzvRO5+zUVkqW2h2X0xDRR0+8PzM=)
3: yPV2sjbj7l0fmZnD27fBbEUfnh8.crl (hash: lkTYj8u1uO3FRQqVlWG2w4gqQIvo9oI4Nr5/b/PNHJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:83:d4:28:b7:d5:4d:9a:89:ab:56:d4:f6:92:bb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Validity
Not Before: Aug 26 10:00:44 2026 GMT
Not After : Aug 27 10:00:44 2026 GMT
Subject: CN=23e83e8791634ee4a093fc623f96c6d3a32b0cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:c3:cf:ea:aa:a4:51:8d:67:80:0f:93:8f:
de:a3:c0:cd:b0:e7:20:9e:33:e1:4f:e6:98:4b:c1:
51:dd:e3:4c:47:23:d6:f5:7b:1d:65:85:a4:43:91:
30:63:4b:a5:81:65:cc:8d:be:6a:a5:0c:3c:07:26:
a4:4d:b0:a0:d3:a7:d4:70:fd:bd:88:e6:da:09:6a:
e0:5c:e4:d9:49:81:b9:04:2f:84:fd:39:ed:e0:b1:
63:24:7e:5e:4d:39:13:79:45:35:06:79:d4:36:b6:
a1:3e:9a:fd:1e:00:98:fa:43:24:bd:c1:dc:79:59:
be:37:24:55:19:81:6f:81:61:27:20:ba:6f:2b:64:
c8:5c:77:b8:d7:fc:26:03:a5:49:a3:2b:39:a4:4a:
10:19:b3:03:69:0e:e0:6b:5c:4c:4d:3b:d3:94:2d:
7f:77:8a:5e:99:f6:81:46:5d:24:b9:42:54:20:04:
57:ef:af:3b:c9:c3:7a:0a:01:a4:71:b6:dc:04:55:
51:4a:06:43:f4:a2:99:82:47:6d:4e:b7:44:52:c2:
6f:b4:fb:0a:08:f3:b2:29:99:b9:af:7f:53:e0:62:
b2:85:ee:de:ac:03:8c:5d:16:26:95:c2:1c:db:9b:
fa:e2:b5:53:25:3e:48:68:ae:75:2a:3b:90:a7:21:
c5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E8:3E:87:91:63:4E:E4:A0:93:FC:62:3F:96:C6:D3:A3:2B:0C:D8
X509v3 Authority Key Identifier:
keyid:C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:63:88:fd:6b:06:99:ac:48:36:9e:3b:b3:68:46:bd:8b:d2:
99:5a:2a:e5:d5:44:5f:cb:1d:44:92:65:b7:da:43:49:78:11:
6d:a6:c9:6d:39:da:83:3b:88:73:cf:46:c4:68:04:7b:69:9e:
f3:6d:57:ec:f1:a2:49:e1:47:53:05:e1:dd:21:6d:a8:2f:1d:
75:68:cc:99:26:60:f3:58:55:a4:dd:0e:e6:29:10:fe:51:60:
b1:ab:83:55:a0:44:95:fc:2b:12:1e:8d:9e:3b:dd:30:56:46:
82:c4:96:49:b7:d5:d8:7d:84:2c:cc:29:71:70:19:01:17:da:
62:86:7f:79:96:eb:7d:50:74:8b:92:eb:d2:6d:78:ba:a7:48:
3c:2d:24:d7:4a:22:f6:5b:83:73:bc:d2:ec:c1:41:39:f2:be:
cd:8e:1c:9a:32:0f:68:42:f4:79:41:f5:fa:6a:43:3b:87:de:
e8:69:18:5c:df:1e:af:f5:7f:ee:33:ef:48:ed:bf:19:d4:09:
42:d4:3e:bf:af:88:5f:2f:4d:15:04:58:2c:b8:0f:5f:4e:30:
7a:f7:cf:92:84:f8:48:de:9d:86:63:fd:5d:9c:fb:e0:90:76:
08:ca:42:e1:b8:2e:4a:64:38:7a:f3:6c:89:d4:b4:be:b9:1c:
b5:be:24:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:02:57 2026 by rpki-client