Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.mft
File: YRSXyDvpVCTDE4UHT-DRrwLvO30.mft (raw, json)
Hash identifier: 9SgpFfb6pD8grr/NRBy8qyAlOGi9z/LXsaNJbha9GGc=
Subject key identifier: 67:0C:88:85:F4:ED:55:C7:02:26:59:53:ED:B6:EE:E9:A5:6A:DB:E5
Authority key identifier: 61:14:97:C8:3B:E9:54:24:C3:13:85:07:4F:E0:D1:AF:02:EF:3B:7D
Certificate issuer: /CN=611497c83be95424c31385074fe0d1af02ef3b7d
Certificate serial: 01A0C34A63E52D55299AE9228DC22D318E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRSXyDvpVCTDE4UHT-DRrwLvO30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.mft
Manifest number: 0125
Signing time: Mon 21 Sep 2026 09:27:07 +0000
Manifest this update: Mon 21 Sep 2026 09:27:07 +0000
Manifest next update: Tue 22 Sep 2026 09:27:07 +0000
Files and hashes: 1: YRSXyDvpVCTDE4UHT-DRrwLvO30.crl (hash: JHar/RRJzzzDz+fgcOMJt2HIaa6iQDMopjY/pNItGbE=)
2: k9NfaeSuLycFh3X57JWyWaLcS7E.asa (hash: wy24O8yRK8LjQwkhDxTqz4E+Mm4t5VdIpUoX3vAY1u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRSXyDvpVCTDE4UHT-DRrwLvO30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:4a:63:e5:2d:55:29:9a:e9:22:8d:c2:2d:31:8e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611497c83be95424c31385074fe0d1af02ef3b7d
Validity
Not Before: Sep 21 09:27:07 2026 GMT
Not After : Sep 22 09:27:07 2026 GMT
Subject: CN=670c8885f4ed55c702265953edb6eee9a56adbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4a:f6:fd:0f:64:3e:4f:5b:26:3a:71:c6:8b:
20:56:3a:c1:50:f1:78:9e:81:4c:83:c5:7b:12:9c:
e2:68:80:b5:3f:ff:25:f0:10:0f:8e:50:95:76:37:
bf:da:91:9b:99:b2:45:5d:5a:43:cd:31:5f:0d:31:
cf:bb:59:3e:ba:75:45:6a:83:ac:f2:cf:6e:bf:28:
63:81:28:dc:6d:2c:bb:c0:bc:d2:79:12:ee:c3:9b:
6f:4b:3b:1f:97:c3:92:cf:b1:aa:89:bc:9b:40:e0:
14:33:cd:6c:7b:a9:a6:dd:aa:c4:d7:80:ec:47:29:
4a:2e:33:24:c0:01:10:9b:3c:ca:f8:39:7f:58:b5:
dc:bc:6c:35:27:82:06:13:33:29:19:ad:db:ef:70:
ad:0e:e0:e8:cc:c3:29:45:95:f8:c4:0b:06:bd:6d:
0e:31:0f:96:eb:87:24:1d:be:89:d1:95:28:57:6a:
67:39:2b:82:c2:3f:0f:ee:78:9e:42:88:73:87:4c:
6f:09:a7:7c:58:03:27:03:63:24:c1:94:aa:5e:ad:
f8:69:db:24:48:fc:b0:86:6b:03:6e:95:3f:b9:85:
2d:40:f3:0c:a4:13:6e:f4:3f:17:c2:27:d4:88:dd:
e2:d2:8e:db:13:44:92:59:33:12:62:fa:f4:e1:88:
f6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0C:88:85:F4:ED:55:C7:02:26:59:53:ED:B6:EE:E9:A5:6A:DB:E5
X509v3 Authority Key Identifier:
keyid:61:14:97:C8:3B:E9:54:24:C3:13:85:07:4F:E0:D1:AF:02:EF:3B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRSXyDvpVCTDE4UHT-DRrwLvO30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c7:97:09:0c:fd:0d:ec:94:ef:64:57:6d:f7:23:ad:af:32:
bc:ef:f5:08:b4:d6:40:7f:da:a5:45:b2:86:6b:4f:0d:fc:1d:
61:ee:bc:71:f2:a9:33:89:8f:ad:4e:6a:84:b0:b3:46:17:57:
06:a9:86:7f:86:2e:25:ac:aa:17:b3:ff:d4:fa:9d:21:34:5f:
70:00:3a:d4:3c:2e:37:3a:cb:cc:cf:f5:26:d6:1f:00:06:b6:
52:ba:2c:56:ab:c3:8f:1a:b2:fc:80:04:ee:1c:5f:6f:97:b3:
75:f8:ce:39:f3:ac:b4:80:56:88:33:e7:e7:9e:b3:d5:2d:28:
7c:26:d5:07:08:ee:8f:f6:d8:ae:96:ae:ca:0e:31:4c:52:22:
ec:32:7e:40:75:73:9e:5a:bb:a0:69:98:a2:4e:33:03:da:fd:
77:f0:87:a6:2f:1e:0d:69:8a:f5:9e:10:87:a4:b1:df:40:12:
63:36:38:7b:b0:21:67:a4:f0:64:1d:4b:2a:2a:47:c7:08:0d:
9a:a8:c1:4e:12:71:c1:58:59:7c:0e:13:01:af:65:2a:1c:2b:
4c:53:70:91:ce:a5:8b:40:46:87:dc:a5:c0:91:da:4f:ce:a7:
b3:81:77:35:ec:be:5f:06:8d:c5:c8:81:db:c7:6b:60:11:2b:
22:92:43:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:56:57 2026 by rpki-client