Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft
File: Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft (raw, json)
Hash identifier: ArQy3fO8V5rf97z1/otUNDoNQP6tdsQgIrQeo7NbE74=
Subject key identifier: 52:60:02:85:75:35:5F:2C:7E:F9:85:EF:8D:04:08:C1:C5:A6:3E:3F
Authority key identifier: 62:3D:8F:99:DF:A3:09:2D:1F:67:57:EF:AC:B4:9F:9E:00:E6:D4:B9
Certificate issuer: /CN=623d8f99dfa3092d1f6757efacb49f9e00e6d4b9
Certificate serial: 019FA2293A6EF64E6F5F64977AA85B750F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft
Manifest number: 0AB8
Signing time: Mon 27 Jul 2026 06:00:38 +0000
Manifest this update: Mon 27 Jul 2026 06:00:38 +0000
Manifest next update: Tue 28 Jul 2026 06:00:38 +0000
Files and hashes: 1: Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.crl (hash: ifipHrgrhZGtMYkL8tBa6N3ajyn8ygp2Y/hR41oWaKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:3a:6e:f6:4e:6f:5f:64:97:7a:a8:5b:75:0f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623d8f99dfa3092d1f6757efacb49f9e00e6d4b9
Validity
Not Before: Jul 27 06:00:38 2026 GMT
Not After : Jul 28 06:00:38 2026 GMT
Subject: CN=5260028575355f2c7ef985ef8d0408c1c5a63e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:8f:b8:89:b6:bb:61:ff:98:d1:7b:22:80:
1a:bc:79:aa:40:34:76:be:a4:3a:60:08:d6:7e:77:
3b:3e:ea:41:88:9d:8b:65:bb:5c:cb:ed:b0:7d:e2:
ee:86:79:bf:30:a7:62:28:ed:ea:71:44:26:67:2c:
83:da:22:3f:23:f7:cd:62:c6:08:2b:52:1e:e0:7b:
89:b8:50:2e:be:c2:1a:0e:14:45:9a:da:03:46:61:
b7:ae:c9:ab:34:1a:ae:e7:cb:2c:8f:1b:7d:1f:87:
68:cf:54:c5:b6:da:19:63:a8:96:8e:3a:f9:0e:cd:
cf:63:6a:2d:fe:24:72:05:f8:0c:7a:1d:0f:b7:62:
f6:de:dd:73:65:ef:32:31:30:e3:4c:76:b1:58:a8:
58:46:83:53:9a:47:a0:a0:e4:e4:e7:55:93:4b:6d:
64:22:f4:2b:1c:3f:c5:c8:06:03:bf:14:c7:09:f4:
0f:1e:bd:e3:9c:4f:f9:63:8b:a3:b1:83:02:7e:85:
02:79:f4:57:64:0c:b6:00:4e:1f:84:e3:4a:0a:2a:
9a:7f:de:6b:d2:e2:f0:db:63:9b:b1:54:b2:a7:36:
69:3d:9c:e0:9c:98:b8:ca:7b:be:b8:74:8c:da:55:
0d:35:20:5b:79:4e:53:2d:42:42:69:ff:d7:b6:39:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:60:02:85:75:35:5F:2C:7E:F9:85:EF:8D:04:08:C1:C5:A6:3E:3F
X509v3 Authority Key Identifier:
keyid:62:3D:8F:99:DF:A3:09:2D:1F:67:57:EF:AC:B4:9F:9E:00:E6:D4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:36:a8:3f:82:ef:2f:dc:10:46:56:51:0c:6d:f4:91:19:ba:
54:fd:9a:4c:c7:98:c9:4f:b1:80:ad:9e:6b:ea:c3:65:92:56:
fd:2b:4b:16:3e:87:c2:2f:ae:e1:92:49:22:1e:d7:4b:3e:d7:
70:89:35:a8:fb:ef:d8:03:9e:6e:3c:88:e7:ca:46:b1:ee:0b:
b3:61:0b:d6:41:75:44:c6:0f:be:3d:fb:72:db:fd:50:18:92:
a5:23:ab:81:b6:14:d3:d8:70:b8:90:b1:84:85:e9:83:e3:32:
3c:97:01:aa:bb:4f:a6:ec:36:01:63:92:ee:d2:b2:30:2f:d4:
eb:f0:16:7a:33:1e:36:c5:f3:eb:a0:9a:a0:6f:c3:32:27:4e:
84:e0:02:fc:34:42:bb:5c:84:ba:a0:ed:37:0d:35:f1:e7:9a:
0d:2b:33:69:a2:77:83:e2:27:a9:a4:39:12:b5:c3:a0:a0:72:
ae:16:60:fc:48:e6:49:84:1d:46:d3:68:7a:a2:3a:f7:01:6b:
18:ae:c2:2d:71:a1:c6:3c:fd:bb:b0:62:f6:96:57:d9:b1:7d:
e8:80:f3:dc:be:4e:80:c6:fa:cb:40:6e:db:50:8a:8b:4d:a7:
06:fd:95:a2:87:bb:d9:b9:12:30:14:b7:2f:96:6a:a1:c7:5c:
9a:e2:83:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:15:05 2026 by rpki-client