Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File: YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier: E+VLCNzlB0eLOt5y3gqIRE6pwgpKi/cbm2QdEaIX3ho=
Subject key identifier: BD:3B:72:2C:D1:5B:00:43:FD:88:FD:CD:67:D5:55:45:D6:95:21:F5
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer: /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial: 01A05A451ADE0B54BED6A8C9893DE19D1E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number: 1356
Signing time: Tue 01 Sep 2026 00:01:13 +0000
Manifest this update: Tue 01 Sep 2026 00:01:13 +0000
Manifest next update: Wed 02 Sep 2026 00:01:13 +0000
Files and hashes: 1: TNfS4qjFMyp6FRl_4ldjm_Y_i3Q.roa (hash: V9e1y2xxqghsyNge3bSzEeJvbCQltZtzBhjXNsBZP/k=)
2: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: FowWHNxkiImWuHVtiVsTlEaQnsVty+/MZO/Bu63lL8k=)
3: aL2Fa93Pq0uyo59pgUgspQyUPKc.roa (hash: Bga4XDZkfRChSZnLWZqmel++JYpGqGLT7JPEKTaVvO0=)
4: rxVxvq80s018HousURd0ic36W10.roa (hash: 4vWzh852MFR+K32Ov40708je2OYVViB9fVjK6c0oRMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:45:1a:de:0b:54:be:d6:a8:c9:89:3d:e1:9d:1e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Validity
Not Before: Sep 1 00:01:13 2026 GMT
Not After : Sep 2 00:01:13 2026 GMT
Subject: CN=bd3b722cd15b0043fd88fdcd67d55545d69521f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:84:23:5f:75:5c:f0:b8:7d:84:a4:cb:7d:75:
a7:33:f2:b8:93:70:f5:6b:31:0e:77:f0:82:68:fd:
e0:19:f8:e1:1b:fe:20:7c:95:f5:63:ff:b6:2a:6d:
34:09:66:de:ce:34:ea:13:29:ea:1c:42:af:86:da:
07:22:1f:ac:e5:0e:37:d5:69:e5:60:d4:c9:8e:35:
b7:a5:1f:58:ba:72:ca:f4:ef:96:69:ab:66:d8:ac:
46:c1:75:36:ca:0e:ac:fb:ef:82:5f:7d:b9:ff:08:
49:58:44:db:9f:6d:e5:a5:b9:cc:a6:6d:bd:c7:00:
26:b0:8b:1c:7d:30:f9:78:1a:78:da:f8:65:05:1f:
70:88:3c:db:f2:b1:d8:47:17:8b:98:b4:2f:a4:5a:
da:56:7a:ab:84:56:1e:60:26:9c:63:d4:be:ed:a4:
a6:a5:a5:62:f5:13:9a:b9:11:b1:72:07:92:eb:d0:
ce:75:2f:ed:02:86:41:16:b9:70:3e:a8:e0:8f:d8:
19:a4:dd:1c:c1:ea:0b:56:ab:ce:8f:6c:ac:0c:0a:
13:c1:b7:21:5b:28:48:7d:fd:4a:94:c5:76:c1:e5:
38:f3:ed:bd:3d:45:43:61:bb:2d:af:50:d4:db:aa:
07:03:0d:1c:54:e4:d4:9a:33:cb:6e:92:0d:81:93:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3B:72:2C:D1:5B:00:43:FD:88:FD:CD:67:D5:55:45:D6:95:21:F5
X509v3 Authority Key Identifier:
keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:14:ca:3c:92:45:e5:f5:6c:69:7a:82:7d:24:fb:95:f6:3f:
4b:74:c1:96:57:06:38:29:b5:5d:42:5a:7d:cc:80:d6:82:02:
f9:10:34:01:0d:d6:3e:dd:f1:24:89:d7:10:60:ca:60:42:fc:
11:f7:df:42:9b:58:7e:76:06:12:e1:d4:39:0e:59:70:37:ff:
b2:19:61:ac:35:7d:01:0b:95:99:cd:39:31:6d:a5:9f:02:95:
92:7d:6b:4c:96:66:a4:0e:79:f5:42:74:6a:cc:64:13:84:14:
94:5f:5a:44:0f:73:82:d8:46:b8:57:ae:42:04:fb:34:98:64:
e0:00:e4:63:c6:ef:a7:ec:5f:03:1e:0a:56:af:a2:e1:2f:af:
27:81:dc:8c:15:f9:33:53:b9:a2:b2:c7:0b:23:b1:73:d1:4b:
09:c5:52:70:01:bf:4a:c0:da:5d:6a:44:8a:67:01:54:b3:5a:
2c:13:3b:41:ea:4b:e4:77:5d:66:08:6c:8d:50:30:3e:be:d1:
9e:55:9c:65:2a:95:e1:a4:93:9b:89:02:10:de:62:ae:4b:15:
7c:6e:e7:b1:c6:f8:d7:60:83:36:84:9d:ce:58:11:19:d3:a7:
f4:c1:51:e7:b5:76:4d:cd:76:ff:6a:e0:17:a6:be:ed:da:2a:
99:9d:38:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:20:24 2026 by rpki-client