Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
File: YsTHQ9XCr88n8QTrbgMWEWyFx94.mft (raw, json)
Hash identifier: 8FWbloOWmGBbwINduuGWVMhCorOW9uIdo4u/1VdW1uQ=
Subject key identifier: 18:0E:9E:C5:7A:51:DA:92:67:08:73:47:F6:52:C2:7F:CF:F6:44:8A
Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Certificate serial: 01A128E85913C5A85645AE33A4C51C24241D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
Manifest number: 1069
Signing time: Sun 11 Oct 2026 03:01:18 +0000
Manifest this update: Sun 11 Oct 2026 03:01:18 +0000
Manifest next update: Mon 12 Oct 2026 03:01:18 +0000
Files and hashes: 1: QrszOClIEQh3elMo6v8ATkV3fJ0.roa (hash: VAU1sjN6ik5JtfJ9K0j96yl5ekT9sKWTrHI+CDnGb7U=)
2: YsTHQ9XCr88n8QTrbgMWEWyFx94.crl (hash: 32bg60eHbbJ/CxXyLB0hgWqf33uXHf355uiuueOp4RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:59:13:c5:a8:56:45:ae:33:a4:c5:1c:24:24:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Validity
Not Before: Oct 11 03:01:18 2026 GMT
Not After : Oct 12 03:01:18 2026 GMT
Subject: CN=180e9ec57a51da9267087347f652c27fcff6448a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:86:14:81:72:c3:f4:63:44:31:c7:ca:8b:5d:
ab:7b:3f:de:f8:bd:21:5b:0f:51:5e:6c:74:f3:31:
8f:c0:3b:ca:fe:16:eb:b9:48:29:06:a5:9c:e8:4a:
13:c3:85:e8:93:b7:f3:af:f7:6b:dc:48:7a:e3:e9:
2e:30:f9:42:51:9c:73:6d:02:cc:e3:92:41:95:c1:
30:88:97:af:d7:68:ca:94:4a:ab:76:b2:06:d4:66:
28:81:92:58:d4:9d:61:0e:dd:eb:d4:43:79:da:01:
71:6a:f5:de:a7:e5:21:60:35:d8:f8:93:27:2c:91:
80:63:05:74:39:9f:47:d3:24:ca:f7:5c:6c:47:fa:
d7:69:a9:61:dd:a7:42:15:fb:28:dc:28:71:5d:91:
4c:75:a1:0a:61:c4:8a:1b:2e:60:90:74:e3:50:57:
86:11:7d:aa:d7:47:5f:ab:6d:38:c6:25:9a:fb:8a:
99:97:7d:37:62:f3:f6:bf:61:a6:49:97:cb:13:bd:
f5:70:b3:74:61:d1:90:7f:12:56:15:8e:4b:c0:0b:
59:ef:4c:38:72:e8:e5:40:1c:0b:14:8c:da:ca:71:
97:ff:47:d9:fe:58:ae:a4:47:7f:23:df:b2:a1:a5:
bb:31:bc:0d:3d:a6:53:87:d4:2e:52:70:6b:b1:a2:
0d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0E:9E:C5:7A:51:DA:92:67:08:73:47:F6:52:C2:7F:CF:F6:44:8A
X509v3 Authority Key Identifier:
keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:34:72:fe:20:ce:30:05:d6:4e:0a:9d:6b:05:b4:a5:f7:33:
af:a8:d7:5d:f9:04:18:0d:07:2a:0c:58:9f:18:90:1b:54:57:
19:26:3c:51:bd:2f:69:cc:76:68:f7:a0:37:07:5f:a4:a0:2e:
47:cc:e1:04:ad:e8:d9:1d:c8:07:a0:4c:ac:e1:b8:e0:9d:5f:
0e:56:14:d3:a9:7e:09:76:7b:99:b1:7f:88:6f:40:31:35:25:
89:d3:26:e4:66:4c:ef:c9:2b:9c:28:ef:f9:f6:c8:ce:3f:75:
18:ed:89:d1:78:9f:81:98:f1:c1:9c:1c:79:de:0e:a0:3d:6b:
87:9c:fc:4b:d6:59:54:8d:30:94:ac:d2:c2:23:97:6f:11:4a:
f3:d9:b3:22:be:3a:0e:16:ef:30:79:2e:cb:bf:3b:04:ea:d9:
fc:13:2b:91:ac:d0:32:86:68:ed:3f:ac:32:af:a1:57:dd:bd:
33:c8:7e:b0:a9:0d:b8:be:5e:d0:9d:5e:d2:0e:d4:1b:46:71:
da:49:6b:21:a9:b8:cb:c0:54:27:a8:aa:bd:02:98:9f:70:68:
a7:ef:6c:0e:85:20:f6:4e:3a:ae:75:47:52:55:72:f6:cc:f3:
15:5b:c8:4f:90:58:4a:e8:57:f4:0f:4c:ea:71:1f:5b:4f:c3:
62:70:de:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:05:31 2026 by rpki-client