Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
File: YXvGPTvl98AszEqZ_C8vVSiKLWc.mft (raw, json)
Hash identifier: aiyC+cD4Vk8kbYgEgsIKL5sKyQkwA6z+5pqxUWm0iUQ=
Subject key identifier: 75:DF:C2:87:A8:6B:46:A6:2C:1A:89:37:C2:5F:52:36:0D:DD:B9:1D
Authority key identifier: 61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
Certificate issuer: /CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Certificate serial: 01A17BF1E09302AD13CFC7FFEA2C274C48DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
Manifest number: 029F
Signing time: Tue 27 Oct 2026 06:00:11 +0000
Manifest this update: Tue 27 Oct 2026 06:00:11 +0000
Manifest next update: Wed 28 Oct 2026 06:00:11 +0000
Files and hashes: 1: YXvGPTvl98AszEqZ_C8vVSiKLWc.crl (hash: s59sP/hB8EkFVW6mxoGToC+5gOWlFeCJZSjY3UkI3jg=)
2: oC8MNAr3RRJD7iVzFgvjH2c0fSg.roa (hash: zQGn/viKIKxmP8Pxorl9pkhqm4xAapY3F6TTAuu6mlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f1:e0:93:02:ad:13:cf:c7:ff:ea:2c:27:4c:48:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Validity
Not Before: Oct 27 06:00:11 2026 GMT
Not After : Oct 28 06:00:11 2026 GMT
Subject: CN=75dfc287a86b46a62c1a8937c25f52360dddb91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dd:63:a0:ed:ec:d4:f5:2f:b5:8e:b2:02:a5:
57:7f:09:77:9e:ae:4f:1a:97:1d:7d:24:ae:76:cf:
c7:0e:c3:bf:30:35:ba:74:70:6e:8f:fe:e6:df:45:
53:d7:2f:e0:45:eb:d4:21:3d:1a:27:42:73:a0:2d:
1d:39:03:ee:76:7a:b1:07:f8:4d:cf:ff:41:55:6c:
a4:3e:e3:ba:0c:d7:f4:d8:64:3e:26:8e:93:a7:d4:
27:72:50:ca:6d:c5:26:27:90:1f:69:82:b6:02:a7:
7f:0b:64:b6:bf:b1:95:5d:6c:f0:4c:5e:cf:d5:aa:
66:39:9d:96:12:e6:85:54:04:b6:b2:f9:b3:5c:7d:
8d:3f:c6:5e:c7:44:3d:87:4e:ad:4c:b1:08:a6:a1:
1a:8b:01:70:de:58:e5:e2:c7:c4:92:3b:f2:f6:50:
d4:3f:e8:32:da:52:f9:59:26:dc:b7:a0:7b:59:55:
c1:a7:0e:63:3b:30:ac:17:0a:a8:aa:cd:46:be:5e:
97:71:18:d4:45:2c:6d:17:4f:d5:04:d3:d6:cf:7b:
1f:9c:7a:2c:e2:da:eb:48:bd:f9:7f:4b:9f:a8:3b:
03:0d:73:52:a2:3d:7d:bf:5b:da:7f:93:2e:7a:39:
a7:4f:4c:ab:72:7c:bf:31:a5:cf:4b:7d:28:64:41:
7c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DF:C2:87:A8:6B:46:A6:2C:1A:89:37:C2:5F:52:36:0D:DD:B9:1D
X509v3 Authority Key Identifier:
keyid:61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f7:d6:b9:7c:5c:c1:fc:62:55:67:28:e8:6c:0d:a9:c4:ef:
8e:7a:57:2d:aa:aa:76:31:43:26:1b:0d:e7:e6:54:73:e6:a5:
36:e5:91:f5:79:ba:91:90:b5:54:e1:1a:27:69:64:eb:7c:6e:
dd:94:3d:df:d1:2d:54:d9:52:b8:02:b2:09:1c:ff:65:aa:34:
7a:f8:ca:06:22:85:89:b9:10:18:61:9d:93:87:6c:6e:2e:fe:
f2:2d:c1:d2:76:70:07:1c:39:ba:cf:a8:6c:30:ed:e1:2e:30:
a7:55:d5:13:3f:14:33:69:86:a3:90:11:56:e8:30:cc:53:a7:
99:c6:c9:b7:08:e2:0d:8d:d0:96:f8:6b:a9:2c:dc:20:97:df:
6c:53:96:3d:79:14:5e:10:70:da:e1:03:76:b6:f8:e2:27:fa:
f4:84:af:55:2a:08:37:dd:c0:19:20:4b:85:6d:b0:98:db:1c:
5b:f7:ca:fc:f6:33:7d:b1:70:89:39:65:4b:7b:1c:b0:b2:b4:
c5:89:a0:18:a1:61:8a:7c:2e:2c:20:b7:05:a1:00:06:58:85:
34:2d:6f:21:06:c0:56:d4:e6:b2:b7:d8:e9:21:30:7b:85:01:
30:e3:93:be:b4:94:bb:c7:68:f6:0d:f0:93:06:19:4d:00:cd:
34:55:05:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:30:03 2026 by rpki-client