Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
File: YlK_stYtvrdoczSHSHy2BMrvw5Q.mft (raw, json)
Hash identifier: CjyJZ4T62uLU4CHR+72/bY6gySOIlIFjK4RruddowPo=
Subject key identifier: 88:57:97:79:59:2C:71:15:AD:4B:54:7C:19:3F:6A:A6:E8:D4:9A:A3
Authority key identifier: 62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
Certificate issuer: /CN=6252bfb2d62dbeb768733487487cb604caefc394
Certificate serial: 01A107DCF5C8CE9D0D3DAD8C3DA0865C01BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
Manifest number: 91
Signing time: Sun 04 Oct 2026 17:01:23 +0000
Manifest this update: Sun 04 Oct 2026 17:01:23 +0000
Manifest next update: Mon 05 Oct 2026 17:01:23 +0000
Files and hashes: 1: KouX5TbAvCqJk402fHmGq516TBs.roa (hash: qhhigSXmJHi3rlFwqLwNhGZbCESw+/qG2yJwN8RcF+g=)
2: U83JSwoM78SuBci4bIU3yu1Tbcs.roa (hash: k9vZJbHYBx/dA8DMjVNa9LWbnCs+aqKaVz9gU9NnF8k=)
3: YlK_stYtvrdoczSHSHy2BMrvw5Q.crl (hash: 7sOohOzSfcZEKawfIJpY3uSE277vLwXdbDKaXJ3wNsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:dc:f5:c8:ce:9d:0d:3d:ad:8c:3d:a0:86:5c:01:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6252bfb2d62dbeb768733487487cb604caefc394
Validity
Not Before: Oct 4 17:01:23 2026 GMT
Not After : Oct 5 17:01:23 2026 GMT
Subject: CN=88579779592c7115ad4b547c193f6aa6e8d49aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:05:97:65:e8:63:c4:a0:3c:97:ae:e4:56:
9e:38:54:8e:da:d8:4a:24:c8:3a:8e:cc:bb:b4:cc:
1a:46:22:9a:70:86:8c:34:b4:d0:85:cb:6b:cc:58:
bb:0e:da:60:cb:96:0d:86:d3:cb:00:46:83:fe:1f:
31:07:47:84:31:0d:44:77:f2:81:35:f9:a3:77:2c:
56:7f:c1:49:94:f7:77:9b:17:0c:67:3e:06:a4:64:
fa:8f:dc:9d:17:0e:3d:dd:57:4a:fb:93:3a:3e:ff:
5d:a0:c4:a7:5a:3d:75:fb:b6:00:60:38:4a:fb:e0:
59:e4:c2:f7:ff:09:43:db:01:3d:07:d8:de:c1:8b:
bc:a6:d5:79:04:b3:f7:0e:fd:39:37:40:c0:39:9c:
35:65:e9:a7:6c:e0:1c:23:93:2d:eb:9b:dd:35:50:
56:76:42:d2:7e:29:d1:f9:00:45:a0:9b:9f:b6:cb:
f1:63:ee:f5:55:f1:b9:51:1a:55:b7:ca:27:cb:10:
1e:42:57:28:32:41:4c:7d:6f:92:b9:f2:eb:17:07:
0e:a9:cf:0c:97:22:ab:7f:71:07:a5:ee:28:b2:7a:
77:06:00:de:3d:8c:41:bc:bb:a2:0c:c3:a5:f1:30:
cc:46:44:4b:20:99:01:b9:94:13:1a:39:ff:54:d9:
14:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:57:97:79:59:2C:71:15:AD:4B:54:7C:19:3F:6A:A6:E8:D4:9A:A3
X509v3 Authority Key Identifier:
keyid:62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:11:57:4c:7b:8e:ba:8d:b4:1e:f2:e6:50:d7:39:68:42:9e:
8b:46:dc:c1:af:1a:bb:73:f7:6c:1b:0a:29:0d:6e:e5:d2:8a:
1c:52:1a:a7:eb:32:44:93:b8:d4:f2:d1:2a:ea:84:60:10:d9:
a8:58:5a:eb:08:05:bb:34:fc:cc:9d:c1:db:c2:dc:a9:fe:37:
10:9d:56:a5:03:d1:a7:53:4f:69:b7:99:b7:cf:5b:4f:f3:e3:
a1:f3:ad:ea:d1:d4:3e:ba:8a:8d:af:e3:2e:73:8f:44:21:ee:
54:d3:1a:d3:91:37:78:14:cf:10:7f:0f:48:2b:fd:b0:47:17:
f3:9f:0b:98:6a:ad:71:64:02:5e:33:9c:32:c7:13:cd:d0:e7:
c0:66:ea:99:d4:2e:8f:20:31:44:55:6f:80:8c:e8:49:25:5a:
d3:0c:0e:54:54:e4:d0:5c:9d:7e:ae:ec:6c:8e:60:ff:f3:89:
f1:77:fe:bf:30:5f:17:83:dc:cf:3e:f8:64:09:5c:7d:1d:03:
26:6b:3f:32:d8:21:1f:60:59:8e:33:be:12:a7:e0:00:37:be:
b1:e3:f4:f1:6e:a0:52:12:a7:2b:3a:91:3b:d5:22:4e:83:e2:
ea:13:18:9b:7f:9b:3b:21:38:34:cb:18:b7:a8:d3:26:a6:cf:
b7:f5:2e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:33:02 2026 by rpki-client