Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
File: YRs47qO8cHP29KpNIe1BNmXXyic.mft (raw, json)
Hash identifier: ejmk6/ybF56YAY2V5IeOS/cXtTJTk83n6FesM5rD79E=
Subject key identifier: FD:49:A0:83:68:D7:44:CC:6C:87:16:1D:CE:A0:A0:B4:C0:22:F6:54
Authority key identifier: 61:1B:38:EE:A3:BC:70:73:F6:F4:AA:4D:21:ED:41:36:65:D7:CA:27
Certificate issuer: /CN=611b38eea3bc7073f6f4aa4d21ed413665d7ca27
Certificate serial: 01A08A8C6D964942F3E55DDC875F94E1EE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
Manifest number: B2
Signing time: Thu 10 Sep 2026 09:00:53 +0000
Manifest this update: Thu 10 Sep 2026 09:00:53 +0000
Manifest next update: Fri 11 Sep 2026 09:00:53 +0000
Files and hashes: 1: TcaCPZlW9b7nUjd0B-e1yd0zAE8.asa (hash: Oy2UJlXOZ8xOLUsWDNeaDlW0wd+hjDN8NHEzf1/ZIt0=)
2: YRs47qO8cHP29KpNIe1BNmXXyic.crl (hash: J+KfZNSln2g/sTt2TJN95OX02ex6vs1UJy7hvvHZp2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:6d:96:49:42:f3:e5:5d:dc:87:5f:94:e1:ee:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611b38eea3bc7073f6f4aa4d21ed413665d7ca27
Validity
Not Before: Sep 10 09:00:53 2026 GMT
Not After : Sep 11 09:00:53 2026 GMT
Subject: CN=fd49a08368d744cc6c87161dcea0a0b4c022f654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:f5:2a:24:04:6f:46:b8:89:c5:75:8c:14:
6b:85:6c:03:46:74:23:d1:2b:7e:a6:79:d1:88:b1:
5f:dc:62:5c:69:5e:ab:3c:8e:7d:93:06:2c:45:96:
e5:24:63:40:1a:70:be:b5:09:77:32:02:30:d0:d1:
18:ab:f2:8c:45:32:07:e5:50:2c:46:f3:cf:32:4e:
1a:eb:5f:67:bf:3f:39:d0:ad:a2:69:40:34:57:ea:
b2:4a:69:7e:ac:90:3f:e7:65:68:79:cb:55:35:b6:
23:eb:4b:26:3d:c7:c8:df:66:ea:ca:3f:51:b0:fe:
53:d8:db:52:43:62:11:a3:b9:56:be:ea:17:91:12:
b3:e5:8a:db:68:d7:50:1c:14:69:40:dd:a2:3b:ed:
dc:5d:82:0b:78:58:17:e4:56:8f:8e:0f:0f:ce:90:
69:80:cd:41:fd:2c:ef:35:2a:b2:0c:fc:f7:3c:2d:
87:d5:8a:c6:9e:52:45:ad:91:3b:22:75:5c:d5:11:
5f:46:c1:e1:b4:3d:3c:f3:b6:3f:58:23:ba:81:7e:
9e:2b:6c:23:80:76:66:94:58:22:47:db:57:c4:ab:
b7:fe:8e:36:92:13:50:09:30:9a:61:15:d2:22:07:
bd:8b:c2:17:c5:6a:1d:67:ab:a1:da:13:f7:77:5a:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:49:A0:83:68:D7:44:CC:6C:87:16:1D:CE:A0:A0:B4:C0:22:F6:54
X509v3 Authority Key Identifier:
keyid:61:1B:38:EE:A3:BC:70:73:F6:F4:AA:4D:21:ED:41:36:65:D7:CA:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8f:22:eb:3d:4d:19:aa:53:9d:08:ce:e7:8b:7b:81:2a:23:
52:a7:e9:fa:e5:fa:30:bd:66:3c:eb:96:79:70:99:6c:b0:38:
55:bb:ae:51:4e:65:1d:53:51:62:40:9b:56:56:0b:15:af:59:
44:78:5c:00:02:ad:2e:19:61:c8:1b:f5:13:77:70:a9:6b:92:
fd:c9:a2:75:4b:b8:bb:dc:a6:2a:36:c8:25:06:2d:14:82:6b:
f3:4d:d3:2f:a0:51:cb:bd:e3:9e:a7:0f:9f:71:d4:ce:6f:53:
ea:77:88:95:de:5e:a4:0d:3f:ef:d2:c8:44:57:1d:e5:58:cc:
47:c9:9a:3f:cf:97:9a:47:24:14:a8:f4:65:b4:47:85:81:7e:
fe:5b:4d:17:7a:16:74:86:a2:64:36:8d:43:38:d8:46:81:b9:
f0:05:3e:bc:21:b6:9e:23:51:17:0c:d0:6f:18:9f:de:aa:60:
ef:85:51:84:e6:98:65:45:16:9f:b4:75:53:bb:24:3b:2d:67:
e0:4b:2c:af:ec:2b:26:5a:40:09:02:c8:55:a0:b4:6d:36:67:
bf:c3:2c:6d:3a:58:06:56:3b:f0:92:bd:98:72:6d:51:c0:f5:
50:e2:ab:aa:59:31:61:d1:ef:72:b3:74:5b:df:f8:b5:e4:67:
55:b1:fa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:20:59 2026 by rpki-client