Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/Yu32KoGIYqbSD3178dLzH5KSDD8.mft
File: Yu32KoGIYqbSD3178dLzH5KSDD8.mft (raw, json)
Hash identifier: VnfuOnVr8VqUYMszUBKiWpO6QkgubpXUHfE7dknB+Xc=
Subject key identifier: 2D:76:59:40:54:3E:C4:36:BE:17:65:C7:CA:BE:8C:AE:86:1B:79:F0
Authority key identifier: 62:ED:F6:2A:81:88:62:A6:D2:0F:7D:7B:F1:D2:F3:1F:92:92:0C:3F
Certificate issuer: /CN=62edf62a818862a6d20f7d7bf1d2f31f92920c3f
Certificate serial: 01A03F3BD9B3B76DA40B2A0F74E00417DD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yu32KoGIYqbSD3178dLzH5KSDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/Yu32KoGIYqbSD3178dLzH5KSDD8.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 18:01:21 +0000
Manifest this update: Wed 26 Aug 2026 18:01:21 +0000
Manifest next update: Thu 27 Aug 2026 18:01:21 +0000
Files and hashes: 1: Yu32KoGIYqbSD3178dLzH5KSDD8.crl (hash: QfaxyOqOBDlEXw0r/pg+f/TV9UZ+RjknExhP62crNJQ=)
2: dWX59-IgymwSWp5lVJHTizv1LNg.roa (hash: 7OpM1Q/nHvN11x8BC9ZSmIDVqJ0iu0AQ8UlElrKQjM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/Yu32KoGIYqbSD3178dLzH5KSDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/Yu32KoGIYqbSD3178dLzH5KSDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yu32KoGIYqbSD3178dLzH5KSDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:d9:b3:b7:6d:a4:0b:2a:0f:74:e0:04:17:dd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62edf62a818862a6d20f7d7bf1d2f31f92920c3f
Validity
Not Before: Aug 26 18:01:21 2026 GMT
Not After : Aug 27 18:01:21 2026 GMT
Subject: CN=2d765940543ec436be1765c7cabe8cae861b79f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:76:f8:b5:94:6e:4a:cd:3f:f2:57:f1:a1:
39:b6:5c:30:02:16:8a:9a:29:1d:fa:f0:77:a9:70:
3c:a0:3d:f1:bd:92:6f:57:66:b7:cf:2d:03:15:b0:
f0:b0:84:8b:99:c3:e0:6c:65:e9:68:c5:b0:2b:dc:
02:bf:24:82:79:27:45:a3:fb:32:b3:cd:37:bd:b1:
32:34:44:54:ef:5b:6d:37:59:8d:28:6b:5f:ba:5a:
ff:78:bf:36:78:50:03:c5:b0:f1:d1:0b:10:5f:da:
b4:47:9c:96:b5:59:c0:78:77:37:30:48:1a:76:42:
2c:ca:ba:d4:91:af:2d:01:05:86:d1:6f:fd:8c:5d:
cd:fc:43:cd:f8:7a:af:a9:69:30:d7:be:4d:42:8f:
64:3c:04:ed:26:10:09:70:1d:f0:c4:4f:61:75:5e:
3f:fe:43:cb:a3:0c:21:fe:dc:a2:60:a7:62:1b:d3:
69:b3:f3:42:5c:ba:6a:00:51:22:7a:5d:38:8e:4b:
d2:06:28:54:25:b4:f1:24:e7:44:15:03:61:ae:09:
06:50:2e:f4:a6:3a:36:bc:cc:19:af:81:ea:9d:a4:
18:5a:89:1e:71:0a:87:c2:7d:64:e4:dc:f0:c1:bb:
4c:ee:d4:ba:2d:86:42:9d:40:a0:1c:55:c7:7c:d1:
d3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:76:59:40:54:3E:C4:36:BE:17:65:C7:CA:BE:8C:AE:86:1B:79:F0
X509v3 Authority Key Identifier:
keyid:62:ED:F6:2A:81:88:62:A6:D2:0F:7D:7B:F1:D2:F3:1F:92:92:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu32KoGIYqbSD3178dLzH5KSDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/Yu32KoGIYqbSD3178dLzH5KSDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/Yu32KoGIYqbSD3178dLzH5KSDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c8:93:48:f3:57:c8:b6:a2:ae:41:19:b5:bd:68:e5:d1:74:
54:ab:71:ca:c1:1b:eb:59:64:2c:e7:71:95:9a:31:e1:2b:b1:
db:04:65:3f:12:4b:a7:fb:ce:0d:bd:75:44:96:e2:20:3a:2a:
2a:fb:76:2a:37:48:9f:b7:b7:a4:d0:88:f3:38:64:d9:99:67:
d7:ab:33:eb:17:b6:20:8d:6e:f3:53:32:4e:f9:45:e1:46:4d:
e4:94:c9:a0:3c:59:1d:37:ef:2b:d9:4c:b5:e9:0b:a3:ac:30:
b0:75:1e:da:5c:67:39:f6:c7:0d:6d:c1:fd:75:b6:ca:5e:a6:
3e:e9:c3:dc:8b:47:54:bd:6d:07:2a:a2:77:86:27:3f:87:c1:
fc:2e:34:36:73:e4:e9:05:81:bd:dd:f1:ab:c1:24:13:01:f1:
45:9e:81:52:69:0c:7a:44:f0:e6:fa:6d:78:12:31:e4:ef:5d:
68:af:b1:c2:27:ad:cc:ad:2e:11:2b:35:dd:44:2f:3e:c1:ff:
7d:21:17:0d:3d:51:91:ae:e9:85:d9:cf:40:b7:53:ae:45:d1:
3a:f7:19:de:03:71:43:da:30:13:68:2e:be:85:c5:5d:37:03:
ef:04:f9:d9:7f:3a:8f:95:fe:70:2d:46:f0:eb:1d:5f:bf:0f:
b2:8f:b7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:34:32 2026 by rpki-client