Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
File: YlK_stYtvrdoczSHSHy2BMrvw5Q.mft (raw, json)
Hash identifier: ByKeG9K9AgV/oykGfhljRXsoQqjh0+cndCHa0y7AH7o=
Subject key identifier: C1:8B:34:D2:D6:CF:BC:95:C9:BF:2D:16:F8:57:96:54:83:D7:BA:60
Authority key identifier: 62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
Certificate issuer: /CN=6252bfb2d62dbeb768733487487cb604caefc394
Certificate serial: 01A025EF7FBEECB3EDFB351A2E615D3E89D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
Manifest number: 17
Signing time: Fri 21 Aug 2026 20:07:27 +0000
Manifest this update: Fri 21 Aug 2026 20:07:27 +0000
Manifest next update: Sat 22 Aug 2026 20:07:27 +0000
Files and hashes: 1: 5gRMtqI57AgUFx0bmKKvNKtlpmQ.roa (hash: nWda5ucuuixosYxBuhMOBCgPLt0+jFaQKtwPZ3ntpys=)
2: YlK_stYtvrdoczSHSHy2BMrvw5Q.crl (hash: n7nstdkvz8PkAQL9u/z9toJLUH+UWZTpjoa8S7EMr6U=)
3: q4EovP81zKZgrYXxKcn2NtVe16k.roa (hash: zKPCrBv/KRqxhjPFUCwxek+3QNN7HWhiO4Bklp+aRkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:ef:7f:be:ec:b3:ed:fb:35:1a:2e:61:5d:3e:89:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6252bfb2d62dbeb768733487487cb604caefc394
Validity
Not Before: Aug 21 20:07:27 2026 GMT
Not After : Aug 22 20:07:27 2026 GMT
Subject: CN=c18b34d2d6cfbc95c9bf2d16f857965483d7ba60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:b0:88:2c:72:3b:76:13:77:83:6c:da:ab:
dd:ad:3c:0d:fb:b7:ee:5d:5d:9c:2c:94:00:81:2e:
08:ea:25:aa:7c:4f:3a:24:22:33:a9:db:0e:14:76:
d9:50:f4:be:49:2e:4b:8b:cf:34:b5:0a:11:c7:28:
e4:8a:36:60:e6:4f:8b:4e:0d:80:5a:69:1f:2c:42:
53:d7:c1:41:31:bc:d5:26:3e:c7:65:03:e8:12:72:
20:be:16:a5:3a:84:78:9f:1d:5b:89:51:d9:9d:eb:
a1:b5:72:66:c4:cd:e8:4e:ba:64:c6:cb:8c:59:63:
17:49:17:4f:0e:9e:82:53:c8:b3:85:21:a2:fd:cc:
8c:8b:fb:45:2c:fd:84:2d:fe:85:b0:68:18:0b:9f:
c8:3b:2b:d3:a6:21:fa:56:c1:8e:9a:c7:ea:a6:c5:
fb:94:85:a7:2c:21:bd:06:14:66:62:d0:90:c4:03:
7f:b2:83:1a:28:b4:c5:33:8e:21:8f:be:a6:2d:a0:
01:e7:3d:c4:51:72:92:0b:ac:8c:7e:46:00:03:cc:
8a:a8:3f:e9:6a:3f:c0:07:aa:99:5f:29:94:2f:5a:
1a:2f:74:be:e1:55:90:49:0d:f5:58:a2:08:48:09:
d7:7b:d3:b0:d9:b7:b3:72:0d:62:ac:7f:7b:60:1a:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8B:34:D2:D6:CF:BC:95:C9:BF:2D:16:F8:57:96:54:83:D7:BA:60
X509v3 Authority Key Identifier:
keyid:62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:92:77:10:53:2c:c3:dc:ac:1d:be:3d:be:e0:36:75:97:0e:
72:a2:43:0c:a4:2e:71:6a:9a:70:9a:45:f4:50:30:8b:c4:c8:
33:e0:ba:de:10:e1:1f:1e:c0:f4:05:43:5e:a6:40:ca:94:ea:
30:98:d2:9f:1b:96:e9:f5:1a:af:31:57:52:eb:ff:c4:dd:92:
85:96:e3:dc:ec:d4:69:17:1a:4b:7a:05:10:76:88:dc:05:62:
a1:2f:af:44:76:50:1e:13:42:fc:39:db:1e:a6:65:ad:5f:c4:
9b:2c:a2:ae:a9:24:87:83:55:af:ca:7d:a5:cc:47:82:37:7e:
f0:87:53:36:3c:7f:4b:0c:fd:ef:6d:a1:eb:bb:f6:cf:a4:d9:
1b:f7:ac:ae:37:9c:63:11:95:0d:d5:9a:91:2d:30:69:f8:34:
37:9b:c1:0a:9d:1f:e8:ae:4f:d7:b3:9c:89:59:69:75:f2:ed:
9d:c2:99:87:29:69:36:a0:f5:c4:05:92:00:9a:bc:83:18:a6:
95:b0:74:40:71:38:17:b5:e6:95:01:6f:b5:3b:f6:67:c1:7a:
ac:26:8e:0b:27:cd:7e:37:e4:be:a4:09:12:f7:a7:42:19:5c:
1c:ce:cb:f9:32:10:cf:81:89:d3:e3:21:48:40:cd:a2:bd:7a:
c8:1c:23:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:07:52 2026 by rpki-client