Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
File: YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json)
Hash identifier: WgFtAqdg15Jn9ZCMdHsmmyB9ObPgyih6ytbo9Dp31qk=
Subject key identifier: C3:9B:2E:5B:CB:EE:50:62:54:F0:B4:04:41:9D:D4:7D:AC:0F:87:FB
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial: 01A059695CACF176D6964AEF8E0744D9EA92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
Manifest number: 14D3
Signing time: Mon 31 Aug 2026 20:01:12 +0000
Manifest this update: Mon 31 Aug 2026 20:01:12 +0000
Manifest next update: Tue 01 Sep 2026 20:01:12 +0000
Files and hashes: 1: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: Q++ouYkW/YSFxvwIWfhl9PXxqsCJAFheVMrJaDA+4Wo=)
2: sRtXhXnTV3BV5O7Uk5pPU6e6DHY.roa (hash: kK2zj8c+pEZD+bWtboW9Noev8kavvORxA7HxKk4tpBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:69:5c:ac:f1:76:d6:96:4a:ef:8e:07:44:d9:ea:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Validity
Not Before: Aug 31 20:01:12 2026 GMT
Not After : Sep 1 20:01:12 2026 GMT
Subject: CN=c39b2e5bcbee506254f0b404419dd47dac0f87fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:8c:92:9f:36:63:92:b7:04:fa:44:47:3f:
d1:9e:4a:4b:5d:de:2a:1a:9e:ff:4e:e9:ce:8d:31:
33:55:9e:d7:94:da:73:ca:7f:64:53:f5:96:82:ca:
9e:d6:4a:96:e3:30:22:25:c6:53:bf:4a:32:64:f8:
a1:ce:2d:22:d9:d4:40:45:66:1f:63:b1:1f:45:55:
4c:c2:71:71:6a:c3:70:dc:a2:81:19:8a:a8:25:3a:
a6:24:ac:2c:0e:ff:88:38:5d:90:97:b9:a9:f6:36:
9c:91:3b:b7:c4:ec:9b:7b:43:9b:48:e6:32:50:ab:
d9:c1:e7:e5:b4:06:02:85:fa:96:3f:71:16:5b:1a:
1b:54:83:3f:0b:67:c7:10:1c:e2:6e:62:4c:fb:c1:
33:b0:15:83:b8:aa:bd:51:6f:0b:b0:32:2f:73:58:
14:c1:51:d4:58:69:5f:4b:20:9f:82:3a:85:57:6b:
dc:8a:99:0e:d5:2a:16:c5:fc:25:6a:c9:35:a1:b3:
d4:af:ea:0b:43:47:83:6d:a5:3a:71:77:13:a9:65:
17:17:59:51:a3:ee:e9:87:db:fd:8a:a3:8a:4f:28:
00:0f:e6:ce:79:1d:c6:20:32:2b:4d:66:b4:6f:95:
57:60:c2:91:3e:93:c1:85:d4:ee:5a:7f:7e:b7:e6:
39:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9B:2E:5B:CB:EE:50:62:54:F0:B4:04:41:9D:D4:7D:AC:0F:87:FB
X509v3 Authority Key Identifier:
keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:58:d2:29:6e:4f:bd:e3:50:37:6f:9d:d4:27:74:ad:33:d0:
2e:ed:1f:36:f1:39:ea:f5:4b:2f:04:8a:0d:31:54:d7:de:82:
1c:dc:71:d1:32:33:25:c9:da:c6:65:fd:c6:b8:16:ec:fc:ca:
7a:f8:5a:5d:d5:8b:9c:66:82:31:15:38:ca:6a:a4:4d:c8:76:
ca:ca:63:ea:72:b3:a7:07:31:1e:9e:4b:52:0b:e6:cc:29:e0:
31:01:c4:30:46:49:d1:1e:24:d5:36:24:4e:9f:58:1a:d0:9a:
9b:6c:5b:9a:09:9e:9d:60:4b:a2:01:73:07:45:46:46:d7:1b:
0a:e0:58:e5:eb:7a:83:b6:b8:4d:75:b3:93:ad:45:e8:71:1e:
42:e0:7e:01:6e:b4:f0:9d:31:a6:18:f4:67:be:ed:be:37:ae:
ad:18:82:6f:6b:5e:08:19:b3:f3:0f:ea:19:13:ee:2d:fc:c7:
23:aa:63:c2:e4:52:84:42:14:2a:9c:9f:cf:cb:53:17:af:fc:
42:dc:78:d9:c0:16:cb:28:57:d6:e1:ec:07:5b:1c:50:41:09:
35:23:b4:84:f8:db:93:a6:73:b1:dd:2e:b7:73:d9:6c:d0:92:
68:7d:53:4f:78:3f:74:5d:c4:b0:75:bd:4a:1f:69:0d:41:60:
55:03:e4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:33:29 2026 by rpki-client