Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
File: YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft (raw, json)
Hash identifier: Y3OgExeq9JQ7ZZLWIOWSD1glu/JsmdPWj25+RQoRAiM=
Subject key identifier: 20:B2:22:DE:9E:96:CB:24:4F:F1:AC:2D:D8:59:88:74:EF:4E:35:A9
Authority key identifier: 62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
Certificate issuer: /CN=62719c6d8b9950378a7489315fb078111a18ad55
Certificate serial: 01A06E02D446AB5B377B251D9B4FB8B38600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
Manifest number: 0353
Signing time: Fri 04 Sep 2026 20:01:14 +0000
Manifest this update: Fri 04 Sep 2026 20:01:14 +0000
Manifest next update: Sat 05 Sep 2026 20:01:14 +0000
Files and hashes: 1: 2iC8kbXKFjWmx_dbdVyppAM0-6Y.roa (hash: tmWp7mxjB9vdgjX2gtWUKioc5qEfAmveNcok4dIUQAo=)
2: GRea9lk1vceom4TFm3UHffkyQH8.roa (hash: 7sx9fKJ6zSwa6txM9tmVfdAR/9hActQM7paLbf+Thbw=)
3: YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl (hash: kJVLauPdm3kPPp7ITPTzFUjAn6LwTqXgWO5veaIwv5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:02:d4:46:ab:5b:37:7b:25:1d:9b:4f:b8:b3:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62719c6d8b9950378a7489315fb078111a18ad55
Validity
Not Before: Sep 4 20:01:14 2026 GMT
Not After : Sep 5 20:01:14 2026 GMT
Subject: CN=20b222de9e96cb244ff1ac2dd8598874ef4e35a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cc:dc:48:f4:5b:db:73:e4:6c:1d:45:85:8f:
12:2d:a0:bd:c9:87:df:1d:b8:d9:5f:30:5c:e5:3c:
a1:63:48:ec:16:57:26:1d:8c:52:3e:2d:dd:c1:3d:
24:60:f6:7e:4e:46:d1:a2:3f:80:33:33:06:11:a0:
32:c5:ff:71:e0:8e:02:5b:af:c1:8a:6a:d1:ec:75:
6a:51:95:24:bb:39:7c:41:9f:28:d0:56:4b:cd:2d:
23:da:bb:f3:57:4c:3e:21:9d:3e:d6:2f:a5:c3:f4:
29:23:2b:59:55:fd:d2:87:a4:cb:00:bd:0a:b3:ad:
ab:28:60:53:8c:93:c8:20:aa:83:6c:96:09:c3:10:
fa:4a:a4:be:d5:db:0b:a0:86:b1:90:c9:bc:c0:27:
aa:1c:2d:7e:5b:26:30:0e:c2:3a:0a:af:f7:a1:38:
3e:43:7e:c7:88:23:79:f7:f6:25:63:ed:1f:e5:b8:
32:60:e2:79:5a:69:f0:be:d9:9c:cf:d1:52:97:95:
3a:4a:7e:95:13:c4:74:14:fc:3d:48:80:b9:24:0d:
40:c6:ae:77:0f:80:d6:22:63:0f:23:10:f7:33:cd:
24:56:8f:7d:b9:29:76:ce:8a:96:7b:c3:9f:d4:84:
f6:bf:aa:ab:36:5f:c9:f3:dc:40:21:88:89:01:d6:
87:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B2:22:DE:9E:96:CB:24:4F:F1:AC:2D:D8:59:88:74:EF:4E:35:A9
X509v3 Authority Key Identifier:
keyid:62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:04:8c:52:19:c9:5d:45:90:39:7a:81:49:57:d4:ce:3e:ec:
4a:07:07:3b:18:38:70:80:d4:fe:51:20:2b:b5:9e:e7:09:09:
0b:8a:ad:99:3b:87:44:27:47:45:f8:90:11:dd:17:e7:27:21:
1e:9d:8b:dd:5d:89:65:12:fa:3e:89:10:e2:10:65:8f:bb:cf:
2c:16:94:bb:58:42:c2:b9:b7:88:51:01:bf:b4:14:59:25:a5:
62:b8:d3:e8:80:8e:3f:ac:58:96:90:84:49:ba:9f:ea:b1:24:
11:a7:8b:4b:e1:d2:de:e7:ba:d7:e7:2d:6d:e9:09:a4:95:5f:
98:4e:2b:6c:81:4d:0a:56:c2:15:5a:af:4d:62:20:83:ca:b5:
97:97:b7:5e:64:72:a6:77:e4:1e:43:02:94:80:da:88:2a:6c:
66:97:da:66:e8:4a:31:5b:c4:a5:7f:4c:2f:38:8b:a7:95:2a:
e8:b2:72:cd:45:c8:81:bb:b5:da:61:8e:ae:f0:57:7d:ee:01:
c9:05:ca:33:b7:44:ce:bf:61:8f:17:cd:52:c8:56:0e:2a:8f:
90:68:4f:62:c9:72:51:c5:b6:5a:61:1d:f1:6a:03:f6:9a:6a:
8d:a1:73:a6:8a:00:a9:c2:cd:72:a5:63:8c:15:41:97:72:50:
8d:13:2f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:05:08 2026 by rpki-client