Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
File: YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft (raw, json)
Hash identifier: 7qRDTzoXL7lftSIXyVpa3L4/rBgdnKDyIsdeOF3JlBw=
Subject key identifier: 5A:B3:8D:1D:FB:46:74:2E:90:1C:B5:12:4D:14:15:13:14:CB:74:A8
Authority key identifier: 60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
Certificate issuer: /CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Certificate serial: 019FA260A1CBB06FFF12B6ACF0A7C5686622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
Manifest number: 0D94
Signing time: Mon 27 Jul 2026 07:01:09 +0000
Manifest this update: Mon 27 Jul 2026 07:01:09 +0000
Manifest next update: Tue 28 Jul 2026 07:01:09 +0000
Files and hashes: 1: YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl (hash: IevKfxIqDqwOfj3H+D3TNjn2f1uwRTZFu7VQSxQmVZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:a1:cb:b0:6f:ff:12:b6:ac:f0:a7:c5:68:66:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Validity
Not Before: Jul 27 07:01:09 2026 GMT
Not After : Jul 28 07:01:09 2026 GMT
Subject: CN=5ab38d1dfb46742e901cb5124d14151314cb74a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:b5:d3:dd:63:4d:ee:82:29:88:b1:11:dd:
5f:45:3f:b4:96:01:89:3c:21:40:23:f2:11:b1:1b:
81:f8:a4:10:8c:9e:e5:2a:86:b6:ac:dc:3b:ed:7b:
1d:f6:8a:9f:f4:84:06:f7:64:39:58:37:ca:c8:ef:
ee:dd:ee:66:27:ad:31:8a:3f:3d:63:a8:b5:40:0b:
7e:89:d4:00:6d:85:9e:cf:c1:59:8f:b6:5d:97:00:
55:18:42:b8:1d:1b:67:3b:2e:26:90:f5:db:c0:37:
dd:99:aa:4c:f9:d5:79:6f:a5:50:1a:b6:0a:09:7d:
0f:a8:b2:1a:eb:0c:ec:00:c9:8f:37:77:a9:cc:f0:
fa:1d:b1:3f:0e:3b:63:d9:50:3a:36:ce:65:b3:85:
c5:3d:f3:37:4e:48:8d:45:37:70:c1:b9:92:b0:92:
51:07:a3:61:5d:6e:70:74:cd:30:7c:62:71:ca:ed:
22:10:96:83:75:1f:b4:84:c0:dc:81:12:01:bf:a4:
3f:64:7d:b6:2e:6a:2f:92:fe:79:ad:38:45:e2:22:
05:f5:43:b7:97:22:12:b4:ca:8b:26:04:ba:d2:a7:
99:c7:46:76:b4:90:04:db:81:f9:a2:15:dd:7a:c8:
af:97:1a:f9:31:5d:36:9a:43:20:d3:ee:7f:c6:41:
90:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B3:8D:1D:FB:46:74:2E:90:1C:B5:12:4D:14:15:13:14:CB:74:A8
X509v3 Authority Key Identifier:
keyid:60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ef:9d:a7:72:1c:17:f8:0c:48:07:6b:88:26:5d:24:df:cc:
f0:e1:eb:f6:3a:00:ec:7c:43:17:0f:0f:36:54:63:49:25:d1:
f1:7c:f2:b5:2b:01:e6:2d:36:fc:aa:38:49:99:c9:cb:90:49:
bc:6b:3c:41:80:3a:7a:c0:1f:ca:83:5a:be:50:1e:54:28:b6:
66:d9:11:71:e5:78:60:2f:d4:bb:39:7d:f4:18:20:5f:42:48:
9e:91:02:36:fd:53:1f:6e:1b:0c:57:b3:6d:9f:04:46:b4:2d:
ae:21:d5:0b:75:17:d7:15:3d:f2:39:06:5d:c0:1d:ee:01:f4:
08:1a:b6:d1:c1:db:35:65:12:ce:2d:0c:e0:74:f0:df:36:a6:
4d:1b:77:66:94:13:77:0e:62:98:9f:fb:be:d1:c4:f5:fe:9d:
f0:8d:6c:e0:dd:9d:59:4b:cc:32:20:3f:8e:d4:d9:a4:44:23:
55:01:06:cb:1d:65:7c:27:1e:a9:0d:b8:bb:ef:60:bf:9a:58:
50:11:d9:da:60:9a:58:c2:ea:21:cd:c2:83:ae:5e:d8:2f:62:
44:3c:27:6b:e1:7b:a8:3c:dd:2a:4b:6c:8a:32:f0:fa:b5:1c:
e4:ed:93:9a:9b:fa:51:7d:56:ae:3b:c6:4f:d1:b1:ab:4f:01:
a3:ff:c1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:19:02 2026 by rpki-client