Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
File: YPWqx2_mvykTNdGaZY5kiRBbhp8.mft (raw, json)
Hash identifier: D8iTNVkZKxl6cb3nTrB6iiT87jXUwuZcx4nwySUecr4=
Subject key identifier: 3F:EF:53:80:B8:48:F3:3C:0D:C5:B9:45:50:7C:B0:BF:02:19:C9:A0
Authority key identifier: 60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
Certificate issuer: /CN=60f5aac76fe6bf291335d19a658e6489105b869f
Certificate serial: 01A0CAEB590B40F86D752B56DAE2BF6391D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
Manifest number: 063B
Signing time: Tue 22 Sep 2026 21:00:16 +0000
Manifest this update: Tue 22 Sep 2026 21:00:16 +0000
Manifest next update: Wed 23 Sep 2026 21:00:16 +0000
Files and hashes: 1: YPWqx2_mvykTNdGaZY5kiRBbhp8.crl (hash: 3qsFyvfN3+B+XEBb/pYkmY4zb5puqsC1Hmhi8+ayNUA=)
2: nsMVjB3dBsEs4QDP-UqrSgiiMZk.roa (hash: 4KH9ak7vbK8YvGmfh6MjtuXURmPLUowjhWOo+NHtQgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:59:0b:40:f8:6d:75:2b:56:da:e2:bf:63:91:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f5aac76fe6bf291335d19a658e6489105b869f
Validity
Not Before: Sep 22 21:00:16 2026 GMT
Not After : Sep 23 21:00:16 2026 GMT
Subject: CN=3fef5380b848f33c0dc5b945507cb0bf0219c9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:19:ab:45:45:fa:2a:ae:20:c6:33:e7:ff:3b:
75:99:fc:e5:4e:e3:a8:9c:61:c6:9e:61:a5:d7:bb:
cd:9a:b0:59:c4:b9:7e:05:4e:0d:c6:df:4d:6a:7b:
17:fa:cb:9f:25:16:f1:f0:81:62:71:4b:0b:10:d0:
17:56:b5:29:51:9c:b2:7d:fa:1e:f4:1c:8e:13:63:
83:37:b9:ff:d4:d3:9d:1c:ec:62:c2:53:11:39:6e:
4f:f7:60:05:af:b0:1e:dd:c5:47:82:f0:57:52:d4:
08:a4:81:98:a7:a8:af:96:e3:80:27:d2:04:df:56:
c6:8e:3f:f1:ee:38:f4:96:bd:b4:0e:55:cf:43:8b:
95:4c:02:45:6d:4d:51:c6:99:09:57:e4:f5:7f:ad:
ed:fa:89:1e:ef:e8:19:29:eb:f4:13:a7:06:a9:2e:
bd:26:22:fa:c3:76:09:15:49:cb:27:53:4f:97:0b:
a0:8e:88:d1:5d:38:fc:39:7c:64:c5:51:ce:15:fb:
24:5c:7c:e6:9b:7c:91:e3:ea:7d:c1:a2:17:8d:c6:
40:03:45:20:5d:70:78:64:62:ae:2a:6f:d3:2f:1b:
94:30:a0:a8:cf:2f:98:dd:bf:8d:7c:c3:3d:b4:db:
50:d7:c8:da:df:c5:e1:d4:1a:2e:41:e8:81:1f:be:
c9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EF:53:80:B8:48:F3:3C:0D:C5:B9:45:50:7C:B0:BF:02:19:C9:A0
X509v3 Authority Key Identifier:
keyid:60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:21:0a:83:06:a6:ae:e9:49:f8:90:ab:04:27:14:41:89:af:
1d:e4:d9:6f:ff:a2:77:f9:37:4e:1d:5c:f7:e4:d8:79:0e:ec:
4b:05:e8:18:e6:62:f8:92:bb:ef:d6:2d:dc:30:b7:6c:d2:95:
b9:18:b4:48:82:9f:04:2e:8a:86:0d:76:12:9a:cc:c3:21:ed:
6c:8a:21:64:e8:49:f0:72:8c:c7:a8:c4:f5:41:5e:e7:a5:13:
36:7a:00:b7:6c:14:43:81:50:cd:8b:c1:86:a8:ba:22:f9:61:
a5:29:17:2f:3f:3e:5e:94:f3:fe:8d:ae:d3:c8:32:04:e8:52:
54:df:12:2d:ad:92:57:ba:71:69:5c:46:13:a8:78:ba:da:f4:
44:ba:8d:66:40:c2:0d:49:8b:49:d1:4e:0f:74:f9:c8:6d:83:
ee:70:b0:99:8b:f2:be:f7:a4:a0:50:33:4f:35:ed:e5:4d:40:
02:81:cc:a6:05:c0:04:5c:26:3d:e9:7f:f5:4e:b4:31:1e:e8:
26:c7:ed:c6:eb:fc:2f:a0:da:e6:52:be:f5:38:5f:a3:4a:3d:
39:34:8e:76:f9:9b:cf:69:f1:fe:37:00:f3:f7:b6:96:46:9a:
1c:1e:47:8b:1c:b9:ee:8a:a8:95:48:35:c0:3d:56:91:30:ae:
e7:23:98:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:57:20 2026 by rpki-client