Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
File: YXvGPTvl98AszEqZ_C8vVSiKLWc.mft (raw, json)
Hash identifier: 9/Pl+juj7ZyvEJag8QNqekftCiByScZA3AYq+gL8n1E=
Subject key identifier: B6:D9:52:BB:B2:14:E9:08:8D:1F:DF:17:FF:C3:2C:76:E0:C5:38:74
Authority key identifier: 61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
Certificate issuer: /CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Certificate serial: 01A08A8C6A136F1A739E64206825182A9E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
Manifest number: 0222
Signing time: Thu 10 Sep 2026 09:00:53 +0000
Manifest this update: Thu 10 Sep 2026 09:00:53 +0000
Manifest next update: Fri 11 Sep 2026 09:00:53 +0000
Files and hashes: 1: YXvGPTvl98AszEqZ_C8vVSiKLWc.crl (hash: hQvKRjaocH9OGxmY0qMXMZG8J0eawPRfqOp3K3+2Kyo=)
2: oC8MNAr3RRJD7iVzFgvjH2c0fSg.roa (hash: zQGn/viKIKxmP8Pxorl9pkhqm4xAapY3F6TTAuu6mlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:6a:13:6f:1a:73:9e:64:20:68:25:18:2a:9e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Validity
Not Before: Sep 10 09:00:53 2026 GMT
Not After : Sep 11 09:00:53 2026 GMT
Subject: CN=b6d952bbb214e9088d1fdf17ffc32c76e0c53874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:36:35:a8:f0:04:28:30:79:eb:07:fb:0f:21:
83:50:3e:cc:ef:b1:eb:9c:27:6f:9c:33:31:59:a9:
8d:95:bf:53:53:aa:e7:4f:32:04:8b:74:10:fd:f9:
95:41:f4:7c:e7:76:ec:82:66:f5:8e:55:98:08:79:
87:4e:70:0e:5d:31:cc:8a:17:22:a0:39:85:f9:de:
97:9d:58:03:55:bc:93:3c:bb:e8:53:07:0a:ed:78:
bd:11:4f:36:7a:2a:5f:02:dd:6c:d7:91:65:a2:e9:
85:63:a7:8b:e9:be:50:16:8f:d1:1c:8b:e1:c8:73:
e5:57:7d:34:a0:35:22:6e:8c:24:5c:63:2b:5f:1e:
83:42:1c:43:3d:09:8b:ea:a1:42:48:d9:42:3f:d3:
3d:e7:ff:77:88:a5:b0:44:ea:64:d1:d2:21:bd:8d:
1d:41:ac:e8:69:09:99:a9:d0:7b:80:ea:f4:67:a0:
c0:3d:37:5a:4d:f1:47:c0:66:0f:25:b8:bf:05:a9:
21:27:8b:74:df:28:54:b5:3c:36:7a:bd:a3:12:61:
0c:4c:20:83:06:d5:c9:26:be:49:73:3c:ea:6d:e4:
c9:33:e0:69:5b:9d:01:e5:01:20:a2:77:e5:d5:ff:
01:39:f8:b2:e8:73:02:ca:8d:5e:3f:9d:2a:81:c4:
8c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D9:52:BB:B2:14:E9:08:8D:1F:DF:17:FF:C3:2C:76:E0:C5:38:74
X509v3 Authority Key Identifier:
keyid:61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:db:d6:59:e9:77:ea:f3:29:c9:f1:ad:85:d7:c8:7b:c2:48:
63:f3:50:e0:88:e7:70:bc:e6:f7:2f:5d:47:41:92:16:c2:18:
f7:87:08:74:dd:59:70:92:13:9e:50:dd:1a:c5:5e:a2:15:6f:
39:39:70:fa:1d:cd:43:d8:cc:32:92:81:0c:c3:6a:d0:f7:cd:
4e:bd:72:1b:65:70:52:13:3a:c9:32:f8:a2:15:b7:25:4b:31:
e9:81:b7:ae:d6:0b:e6:d9:e9:21:3f:1b:b6:29:27:ef:3f:29:
a3:68:aa:3a:3f:6d:ab:4e:5c:4f:60:54:a4:0b:d0:a1:0c:f4:
48:35:36:85:ad:e4:4d:c6:4c:62:1f:e6:c6:7e:f2:31:ce:31:
57:81:9d:31:1e:24:d0:3d:ec:07:10:64:36:08:74:cf:48:f7:
29:69:d3:09:c0:4c:0a:e1:23:14:ae:77:09:b2:5d:79:1e:ed:
a3:92:0d:9e:d8:b7:21:3a:d0:1f:c8:77:a0:a0:91:94:52:b2:
75:94:dc:fc:a1:dc:bf:9e:10:3c:25:71:a0:48:c5:6a:3d:2a:
aa:ae:f9:f7:eb:b8:b1:e6:15:a6:6b:6e:7e:1f:26:e7:02:0b:
5c:4d:67:65:e9:a1:c8:5a:75:1e:ee:26:b6:10:f9:60:40:0a:
6c:6c:0f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:57:38 2026 by rpki-client