Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
File: ybssFI7w7gD_WiIa8bxhx-GKpLw.mft (raw, json)
Hash identifier: NTXb5+5vRe8BtY5tjIQGjDAyQws2UaN3eYm8tcAtM00=
Subject key identifier: 24:DE:45:35:60:FA:E2:E9:FC:64:83:C2:0F:4A:B7:83:EF:F1:ED:F1
Authority key identifier: C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC
Certificate issuer: /CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
Certificate serial: 01A18C78CC71194928BABF2603E0C096CC5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
Manifest number: 02DF
Signing time: Fri 30 Oct 2026 11:01:29 +0000
Manifest this update: Fri 30 Oct 2026 11:01:29 +0000
Manifest next update: Sat 31 Oct 2026 11:01:29 +0000
Files and hashes: 1: 2vfd_kX6R8_1pSce-qH7ueF_CFI.asa (hash: gyU2q6SGexsT0na8dPH6q8my1zwHUMQLEgtgSUYyBL0=)
2: ybssFI7w7gD_WiIa8bxhx-GKpLw.crl (hash: qF7rHBdOqYFKGuIuh6vP3gD4ATuut8ar2pxKJ/PxGxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:78:cc:71:19:49:28:ba:bf:26:03:e0:c0:96:cc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
Validity
Not Before: Oct 30 11:01:29 2026 GMT
Not After : Oct 31 11:01:29 2026 GMT
Subject: CN=24de453560fae2e9fc6483c20f4ab783eff1edf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:0d:e0:84:b7:49:24:0a:de:ee:15:e0:b4:
73:19:ba:33:14:80:fa:70:2c:ca:5f:b1:28:f6:c6:
ad:a2:2c:7d:8f:47:6d:44:17:f5:0b:1d:75:34:be:
a5:fc:68:95:49:81:aa:13:c4:8a:40:4d:60:27:44:
cc:af:76:5e:7e:44:fc:35:a9:fc:c2:6c:f2:09:61:
5b:87:03:a7:94:d8:8b:f9:73:06:16:37:72:ce:b7:
02:1e:67:78:ef:bc:f1:05:95:18:5f:b9:95:e3:91:
91:13:6a:e4:33:01:db:d0:01:f9:2e:17:e1:21:eb:
0d:61:d0:80:cd:1f:a3:0a:a3:d5:3f:35:12:c4:c6:
f0:d6:6c:b8:5b:75:24:7b:11:62:8b:47:3c:4d:8a:
d4:5c:57:22:57:75:33:2a:ec:28:66:90:b7:a9:71:
5a:94:de:e6:9c:89:2c:69:3f:ec:c4:1b:54:e5:37:
e3:ab:7b:5c:38:5c:6e:3b:fb:1b:62:79:d7:dd:40:
d3:e6:5f:13:e1:d3:fb:a5:29:48:5a:58:4a:5f:e8:
c3:0f:1a:00:58:e9:32:54:e2:5a:0b:15:cc:ab:1c:
97:ea:5a:4a:14:28:8b:dd:44:01:5b:7b:c1:83:a8:
24:75:1f:1e:6c:c8:25:f7:09:87:4d:30:99:fe:0b:
62:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DE:45:35:60:FA:E2:E9:FC:64:83:C2:0F:4A:B7:83:EF:F1:ED:F1
X509v3 Authority Key Identifier:
keyid:C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:aa:07:39:bd:2a:3b:70:9c:6e:1d:40:e3:69:77:72:e7:8c:
51:5b:3f:7b:80:76:2a:21:e4:0f:89:09:c7:7f:4e:53:62:27:
3a:ff:37:3c:62:ce:34:61:a0:9d:ef:6a:01:4a:22:3b:6f:e5:
cb:83:4d:7f:15:f8:7d:a6:b9:26:0f:d5:6d:b1:46:e7:1a:b4:
2f:6f:98:5b:03:40:5c:bb:60:21:58:1a:5d:1b:26:11:ab:63:
ba:99:e5:36:e0:35:98:8b:6c:be:88:b7:90:77:03:19:50:40:
1f:d0:a0:2a:9a:9c:c0:72:94:db:ce:8f:44:da:ef:4e:35:e3:
de:e1:4c:16:10:36:68:29:34:65:14:dd:c7:a3:a6:5b:1d:27:
49:03:e4:e8:0e:2b:dc:75:67:ff:a7:62:c3:d6:2f:ef:4a:0c:
f6:83:eb:b9:e1:a7:c8:dd:4d:83:f2:67:a3:a1:52:df:d0:87:
5b:8c:7c:de:cd:d1:d5:1e:e1:78:33:8b:f5:8c:43:52:26:00:
60:bf:0f:5f:f3:74:20:02:14:97:4d:c7:39:82:05:cd:ef:03:
12:fd:b8:fd:6c:23:f7:60:10:bd:9c:5a:19:73:4f:54:02:49:
61:e5:0a:7f:a0:19:fb:61:c8:9c:1d:be:78:ec:c7:08:fe:fc:
51:9c:69:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:10:05 2026 by rpki-client