Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
File: YXvGPTvl98AszEqZ_C8vVSiKLWc.mft (raw, json)
Hash identifier: hdIaZFq+q+S2z19LK1/uJ5Ht7EaygMFX3+eKyIY3OXY=
Subject key identifier: 6D:2F:89:44:6B:AC:B8:CD:B7:C0:3A:32:1B:C4:7D:DD:1A:51:E4:28
Authority key identifier: 61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
Certificate issuer: /CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Certificate serial: 019DCF751EB094D055F194100C266E3B4F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
Manifest number: B8
Signing time: Mon 27 Apr 2026 15:00:52 +0000
Manifest this update: Mon 27 Apr 2026 15:00:52 +0000
Manifest next update: Tue 28 Apr 2026 15:00:52 +0000
Files and hashes: 1: YXvGPTvl98AszEqZ_C8vVSiKLWc.crl (hash: r8iV43rKXlI02kXtOygJnjVJaO9RSqfcyxIpjGYt7fQ=)
2: oC8MNAr3RRJD7iVzFgvjH2c0fSg.roa (hash: zQGn/viKIKxmP8Pxorl9pkhqm4xAapY3F6TTAuu6mlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:1e:b0:94:d0:55:f1:94:10:0c:26:6e:3b:4f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Validity
Not Before: Apr 27 15:00:52 2026 GMT
Not After : Apr 28 15:00:52 2026 GMT
Subject: CN=6d2f89446bacb8cdb7c03a321bc47ddd1a51e428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:3a:fa:5f:12:7e:6b:b9:26:a1:7d:91:cb:
04:47:a8:6f:6b:50:68:f6:a5:62:5f:32:7e:7a:77:
4f:2a:2c:b9:60:ae:7f:4c:99:e5:1b:00:94:38:1c:
a2:e4:62:29:1f:13:dd:30:3a:ca:88:97:7e:02:0d:
2f:fd:d3:a3:77:e5:5f:0c:f9:e4:7a:51:6b:42:7a:
97:b5:d0:96:2d:6a:28:33:2a:bb:0d:d2:ed:a3:45:
62:33:67:3e:3b:ea:cd:40:76:c7:80:bf:3b:ea:fb:
af:ab:59:d3:7b:ca:c6:78:6d:47:66:dc:d7:1b:ff:
8b:d9:5c:5c:11:a5:e1:28:e0:f5:cf:a3:ad:98:d4:
bd:20:b2:34:8b:51:ba:71:d3:11:59:ae:52:04:60:
82:e6:63:20:9d:60:f5:15:8d:d3:aa:0e:e7:0d:27:
99:f4:c2:f9:aa:a4:95:b7:e0:94:32:47:9f:6f:01:
37:4e:f7:6d:3d:15:7d:a1:62:51:96:38:81:b5:43:
28:c0:51:81:e0:04:80:3f:17:24:56:10:b3:f4:fa:
fe:39:90:1a:95:d5:fa:b3:6a:f6:0a:79:52:be:41:
c9:e1:20:51:ab:0c:94:54:fb:86:6d:0a:82:2f:35:
b1:e8:6e:21:0e:e7:8e:af:3a:4d:35:02:b5:44:2a:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2F:89:44:6B:AC:B8:CD:B7:C0:3A:32:1B:C4:7D:DD:1A:51:E4:28
X509v3 Authority Key Identifier:
keyid:61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d2:40:fc:f0:36:36:20:86:ce:f6:37:08:9a:ab:94:ed:99:
9e:b5:9a:16:a7:71:b9:1a:ca:32:56:17:7d:d1:3e:af:61:e6:
cf:6b:01:a8:29:71:42:51:2e:ec:5d:3f:7c:08:af:b0:e4:41:
bb:a4:4d:01:af:da:35:e5:3c:fb:e3:be:b7:55:b8:84:23:71:
ac:5c:a0:92:7b:cd:fe:3f:5d:13:70:df:52:88:f4:6e:44:ae:
2e:b6:d4:4d:9f:bb:ec:fe:7a:a6:de:df:b3:b4:e9:bc:54:77:
0c:af:d6:80:bc:4f:7c:25:25:38:57:b2:65:d3:47:be:0d:86:
a4:d5:53:c0:df:7d:4c:99:b9:85:44:6b:3b:10:80:6c:ed:7b:
7f:a5:bc:60:56:10:4a:ba:6e:ea:7e:bc:de:4b:27:97:b4:34:
9b:a6:33:66:d7:ea:09:1e:87:1d:af:51:d3:5d:38:3c:6d:c2:
f7:f4:3d:f6:1c:e8:4c:74:51:68:e9:30:8d:d3:81:45:48:18:
a0:15:36:29:70:8c:b0:22:05:37:f2:5d:e9:30:04:c6:fe:22:
74:10:4a:c9:43:98:fb:71:af:28:73:cc:42:6f:bd:63:ca:48:
3d:6b:e4:45:22:81:6e:ae:c6:09:b0:61:3d:84:ae:ac:91:24:
a6:4b:d2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:14:20 2026 by rpki-client