Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
File: YXvGPTvl98AszEqZ_C8vVSiKLWc.mft (raw, json)
Hash identifier: 6MtrM4KYCKYgnj6MyccGKwMz1VqBxZI5RUnkrBvScAY=
Subject key identifier: B7:BA:3E:69:00:66:97:AC:A0:02:B6:36:48:04:F8:B7:27:4A:68:E5
Authority key identifier: 61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
Certificate issuer: /CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Certificate serial: 019EB921D42CB0633E71CDA3E1687C01263E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
Manifest number: 0131
Signing time: Fri 12 Jun 2026 00:01:02 +0000
Manifest this update: Fri 12 Jun 2026 00:01:02 +0000
Manifest next update: Sat 13 Jun 2026 00:01:02 +0000
Files and hashes: 1: YXvGPTvl98AszEqZ_C8vVSiKLWc.crl (hash: DalbRXrTvosHykhT8E8ZKZhd3e55KPC4iQhdqHtCVHk=)
2: oC8MNAr3RRJD7iVzFgvjH2c0fSg.roa (hash: zQGn/viKIKxmP8Pxorl9pkhqm4xAapY3F6TTAuu6mlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:d4:2c:b0:63:3e:71:cd:a3:e1:68:7c:01:26:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Validity
Not Before: Jun 12 00:01:02 2026 GMT
Not After : Jun 13 00:01:02 2026 GMT
Subject: CN=b7ba3e69006697aca002b6364804f8b7274a68e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:d0:14:26:e4:f7:a9:6c:e9:1e:99:ff:08:
2a:68:b1:cc:2e:1b:83:39:f1:38:16:07:54:64:7f:
43:e2:37:de:e2:7f:7c:0d:bc:b8:9f:61:8f:d9:53:
5c:f1:c3:f1:ac:95:03:8a:02:df:2c:e5:7b:91:83:
b7:9b:f4:bf:77:ec:80:c3:6c:e6:d3:e7:c6:28:a7:
5f:96:d5:a9:4d:9f:72:df:0b:b8:df:20:6a:53:17:
e1:a5:fc:cd:4b:89:15:50:81:d1:da:2c:7e:45:65:
5d:a7:c0:44:1e:fc:16:1b:05:3d:c0:28:f3:e1:eb:
c5:41:5c:8c:e2:0f:be:80:e7:a8:ea:e3:d9:9c:a5:
f2:2f:37:5c:24:08:44:a2:fc:ee:33:ad:2c:22:c1:
b2:80:56:d4:8c:e7:fe:0c:16:98:01:2e:b7:28:d9:
cf:ef:47:18:de:cd:39:c5:11:b2:d8:6e:17:1e:d3:
6b:c0:f4:7a:eb:ea:cc:4d:62:d1:9b:d2:0e:24:bb:
8a:bd:44:a5:a0:ad:15:03:da:bf:95:c9:46:cf:a0:
cb:51:7d:8d:9b:95:e9:21:38:94:78:20:d4:c0:7f:
5a:53:12:b7:c6:9a:77:0d:93:7b:46:4d:cc:57:d7:
af:f3:fb:69:eb:ec:4e:1d:fc:64:75:c1:68:26:6a:
f7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BA:3E:69:00:66:97:AC:A0:02:B6:36:48:04:F8:B7:27:4A:68:E5
X509v3 Authority Key Identifier:
keyid:61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e7:8a:2c:ff:a6:3d:74:bb:dd:6b:0c:c7:d8:27:f5:92:cf:
36:2a:7f:80:89:98:dd:73:43:f3:86:68:fa:c0:6d:25:8f:bf:
33:97:b9:bb:c5:8a:2e:53:b0:2d:ec:c6:14:19:ae:1e:a4:a7:
96:89:21:30:ef:55:54:6a:b1:3b:bc:5b:66:d5:0d:9c:9d:b2:
0d:5b:aa:d3:f0:bc:81:31:fb:98:99:8a:4a:2b:1a:f5:df:09:
8c:ed:90:ef:a5:24:e4:1b:ae:d1:7b:2e:cb:a2:3e:64:91:7a:
1c:8a:e6:bb:dc:32:7b:b2:2c:ac:02:61:ca:7e:1d:f3:71:20:
f2:ed:24:26:b7:e5:fd:41:ef:a9:af:a0:46:72:e8:56:53:14:
97:44:69:b3:38:13:7d:1d:d6:e2:35:83:19:b9:9d:e1:4c:f2:
e5:fe:5c:59:a0:2b:9a:1e:82:74:91:e5:86:e0:de:2e:ac:ac:
ff:a2:4e:50:34:b4:12:c1:04:59:69:8d:b9:13:6d:e4:38:ca:
28:79:83:66:70:45:07:d3:17:c7:da:7b:b8:dd:a9:cf:38:d9:
b2:d4:2d:c3:5d:9f:10:ff:a2:e6:e0:2a:b2:83:d3:e4:a8:b4:
22:84:f8:67:30:cc:d9:ef:00:17:62:68:66:f0:41:2a:27:bf:
cd:79:b9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:11:15 2026 by rpki-client