Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
File: YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft (raw, json)
Hash identifier: L8HqhpXQxakcZFcepuiMGS4eZ1MeECP7tlViUHjtYY4=
Subject key identifier: 76:E4:3E:21:CA:CA:4B:FD:AF:54:62:EA:43:CC:27:89:1C:43:34:2F
Authority key identifier: 60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
Certificate issuer: /CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Certificate serial: 01A08C0DA2E25AF50131ACC4443207D9CC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
Manifest number: 0E0D
Signing time: Thu 10 Sep 2026 16:01:38 +0000
Manifest this update: Thu 10 Sep 2026 16:01:38 +0000
Manifest next update: Fri 11 Sep 2026 16:01:38 +0000
Files and hashes: 1: YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl (hash: xfiSBg7FaxwXZtTK7qPYE31V9NdgN411suyhaFOPWmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:a2:e2:5a:f5:01:31:ac:c4:44:32:07:d9:cc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Validity
Not Before: Sep 10 16:01:38 2026 GMT
Not After : Sep 11 16:01:38 2026 GMT
Subject: CN=76e43e21caca4bfdaf5462ea43cc27891c43342f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3e:d2:c9:d3:9e:48:4f:9c:27:01:3a:b7:0e:
be:16:27:9e:5d:38:8a:be:a2:e5:ce:11:55:48:62:
a9:3d:11:46:03:f9:6e:75:33:36:37:ae:c7:ec:76:
19:50:a5:b2:06:ac:8b:19:2b:66:45:33:c1:41:e3:
eb:23:61:d2:43:7d:e3:8a:0e:62:60:f6:86:78:2b:
e6:ff:46:b3:a9:35:e7:33:a2:c3:ef:37:f8:b2:eb:
2f:d9:8c:b6:10:77:80:81:24:c2:77:67:7f:c9:e1:
00:aa:a9:75:f9:5a:ec:66:34:e7:78:bb:c8:ad:d7:
9b:fb:08:dd:0a:5b:93:9c:65:67:a6:7e:c0:82:a4:
b7:2a:77:74:b4:54:3d:28:28:7e:bc:95:b3:fb:08:
a4:57:8e:8b:78:44:9a:97:e5:ab:92:7c:43:da:56:
3c:56:50:6a:ab:51:d4:5a:c7:f3:39:b5:86:e2:e2:
20:f1:9d:9b:79:d2:13:0f:64:5f:72:40:38:d5:7a:
33:c7:35:ab:1d:57:85:59:4a:0f:ab:04:a1:52:ff:
70:d3:8d:2f:76:31:94:97:bd:a8:dd:43:5b:0a:d1:
8f:ff:0a:35:cc:c6:e4:aa:f4:35:f8:fe:7b:ea:65:
8d:ea:10:9a:e7:8e:df:d1:89:4d:96:2b:bd:2f:5c:
1c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E4:3E:21:CA:CA:4B:FD:AF:54:62:EA:43:CC:27:89:1C:43:34:2F
X509v3 Authority Key Identifier:
keyid:60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:25:74:ae:b2:c2:00:3e:1c:f0:f7:ad:3b:ae:f5:a9:cc:07:
6e:90:05:83:4d:01:19:16:21:59:10:fa:ea:3d:b6:2c:3e:03:
88:17:91:62:02:9f:3b:38:67:db:5c:21:e6:f8:7c:e1:b3:15:
7c:ab:b6:bd:31:0f:9d:ad:31:0b:e7:c8:68:67:27:4a:49:ff:
9d:8d:8b:5c:db:74:c2:96:44:fd:41:b3:b8:16:3d:83:75:46:
ce:0e:05:87:e4:2f:9b:1f:07:e8:56:0d:27:87:47:4f:45:54:
90:15:66:47:49:a7:df:81:3e:c1:58:10:c5:32:e1:ee:97:3e:
18:20:1c:bf:3d:96:f3:44:e7:2b:08:ce:66:8d:0b:a5:41:36:
b7:98:16:d1:49:7d:42:4a:ea:50:ae:4e:09:3c:be:e0:71:e2:
81:4f:86:5e:6e:c7:37:63:7b:91:c7:d0:5c:7f:c0:83:b1:53:
e5:95:6d:f4:36:ee:da:f7:93:5e:63:35:5e:b8:11:67:28:c0:
7a:ce:94:60:39:e8:3f:6c:1c:82:fb:8b:e8:8a:9b:3c:1d:bb:
75:4e:d6:9d:11:fb:b8:ef:e0:65:fe:92:a1:3f:21:fc:ad:40:
8d:5e:8a:13:6b:af:27:49:e5:20:b0:29:de:4c:67:f3:7b:34:
24:15:d3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:41:21 2026 by rpki-client