Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
File: YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft (raw, json)
Hash identifier: FtvntU7MfwnVm5lbE66gai4EHmh2YzxMBSr7FDaKlZ8=
Subject key identifier: 21:D9:05:63:DF:0E:CB:7D:4D:C5:6B:D8:26:A8:A0:CC:83:CA:7F:E5
Authority key identifier: 60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
Certificate issuer: /CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Certificate serial: 01A08A8D91B604B59F0BDA159C00676FE67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
Manifest number: 0FDB
Signing time: Thu 10 Sep 2026 09:02:08 +0000
Manifest this update: Thu 10 Sep 2026 09:02:08 +0000
Manifest next update: Fri 11 Sep 2026 09:02:08 +0000
Files and hashes: 1: YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl (hash: Bi8l49N+1exQ/g3cYslS3gWdJcIe1KdvlRWFmpluhjI=)
2: kpscRgt1dWh-e--UZ-snvDVaW_w.roa (hash: IsbQ4B6Zgegpb0g9cDD/2L4au9/OQroMRlOlBHTs7Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:91:b6:04:b5:9f:0b:da:15:9c:00:67:6f:e6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Validity
Not Before: Sep 10 09:02:08 2026 GMT
Not After : Sep 11 09:02:08 2026 GMT
Subject: CN=21d90563df0ecb7d4dc56bd826a8a0cc83ca7fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:08:e3:cf:3a:75:06:c9:48:d4:24:48:1d:
45:f5:6f:b8:b0:9e:43:b7:8d:7e:76:f4:b4:3d:04:
55:b3:74:f2:62:c0:fc:db:e3:13:93:a8:92:b6:23:
a2:8f:b9:87:f0:a0:d7:a3:ec:98:d3:9e:cc:74:af:
70:bb:4c:42:5f:7b:28:68:eb:10:7c:52:bd:17:cf:
4c:f7:02:58:40:36:28:7b:a1:f7:8d:c7:3d:5d:1a:
0f:0a:80:47:0d:c9:6a:32:e4:2b:db:2e:2c:52:5b:
8b:3a:6e:0a:b7:c6:de:19:1e:9a:80:43:52:8e:8d:
06:34:28:84:dc:23:21:d6:c8:3b:ab:e6:97:f8:27:
e8:6e:e5:13:4e:bb:6a:43:e0:41:c8:52:e5:0c:80:
25:92:f8:3d:91:02:af:ac:38:e9:4b:6f:82:40:12:
18:4b:6b:b5:7e:4f:19:7b:2d:28:fd:f3:74:b3:7b:
87:31:39:95:59:74:b2:1a:01:e5:96:c5:68:c3:bc:
7d:4f:57:5f:5e:6f:d2:aa:26:49:26:46:38:a4:84:
19:60:0c:b1:35:37:26:7c:bc:f6:95:a0:13:3a:c8:
b3:7a:78:b1:e1:88:dc:01:3c:3d:a6:90:41:6f:a6:
06:b3:a8:0b:d4:4c:c6:a4:b3:27:b9:e1:6e:ca:27:
62:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D9:05:63:DF:0E:CB:7D:4D:C5:6B:D8:26:A8:A0:CC:83:CA:7F:E5
X509v3 Authority Key Identifier:
keyid:60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:66:b4:3c:60:17:93:bf:7b:e0:fb:c7:c4:2b:37:57:74:b9:
1a:48:b4:45:30:4d:0a:17:be:8b:66:04:6e:5d:fd:ee:72:bd:
86:b9:d4:ea:09:7d:c3:65:47:36:17:0e:8b:ef:c7:af:2b:1f:
e9:f3:63:a2:71:70:eb:1a:fe:12:9f:dc:6f:5f:10:86:d7:a0:
ba:c7:c8:aa:5d:a6:a1:e2:3b:0f:63:97:49:24:27:43:b2:ed:
30:94:21:e2:62:15:c7:12:8c:6a:d7:14:b6:55:29:74:52:36:
23:76:a3:96:00:82:29:9f:f9:d8:f0:58:53:3f:62:06:83:68:
41:ec:7d:1c:43:ce:a0:9a:a4:f3:83:2c:27:43:56:36:db:5e:
f0:ec:4a:b7:6f:1a:67:ee:51:8d:29:83:13:58:61:dd:2d:83:
3d:57:45:7e:7c:5c:6e:ae:c2:5c:0c:36:fb:cd:31:40:43:a4:
c0:4c:1c:e8:b4:f5:1f:3d:e9:45:e1:1c:f9:9e:47:86:3a:c2:
d2:cb:82:ac:d9:78:23:67:93:66:81:b9:71:8f:9f:49:a3:7a:
d9:08:2e:01:0f:b1:ed:80:e7:5d:c5:8c:fe:a8:ab:5a:e3:7f:
e5:29:24:0d:a4:a8:c8:b3:93:ba:16:10:15:88:1f:e8:c9:37:
0a:a9:77:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:52:52 2026 by rpki-client