Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
File: YXvGPTvl98AszEqZ_C8vVSiKLWc.mft (raw, json)
Hash identifier: Ju1eg+lWmO0NQHSdlmDW5qLeoVHlm7NvstI1It2k28A=
Subject key identifier: 2B:C6:F2:89:82:17:FE:9D:23:4E:31:80:FD:65:CE:F9:09:0F:01:14
Authority key identifier: 61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
Certificate issuer: /CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Certificate serial: 01A111BC193D144737F0443C08ED7CEAA45D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
Manifest number: 0268
Signing time: Tue 06 Oct 2026 15:01:42 +0000
Manifest this update: Tue 06 Oct 2026 15:01:42 +0000
Manifest next update: Wed 07 Oct 2026 15:01:42 +0000
Files and hashes: 1: YXvGPTvl98AszEqZ_C8vVSiKLWc.crl (hash: 4K0VjZ7FfwEV/3uIvvmSL/K6yNlhTtfHg+VdlO7iils=)
2: oC8MNAr3RRJD7iVzFgvjH2c0fSg.roa (hash: zQGn/viKIKxmP8Pxorl9pkhqm4xAapY3F6TTAuu6mlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:bc:19:3d:14:47:37:f0:44:3c:08:ed:7c:ea:a4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Validity
Not Before: Oct 6 15:01:42 2026 GMT
Not After : Oct 7 15:01:42 2026 GMT
Subject: CN=2bc6f2898217fe9d234e3180fd65cef9090f0114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:c8:0d:32:3f:db:b3:d7:61:3b:7e:99:ae:
72:e3:38:e4:b6:5f:90:f4:08:6b:3c:8e:e4:1c:4f:
81:1c:c8:49:38:f6:44:8f:61:d2:01:ea:66:8a:75:
e7:d8:a0:08:15:34:3e:cc:5f:46:28:4b:f2:86:ce:
cd:81:29:2d:d4:32:b5:90:55:97:0e:f2:aa:7b:d6:
f3:04:1f:58:88:fb:4e:aa:ce:58:0c:9c:e5:fb:09:
3e:c7:0b:e4:00:d6:eb:73:ba:1d:95:bc:1c:0a:5a:
b7:9c:c1:e1:64:31:7e:0f:98:f6:eb:11:b9:53:af:
1a:eb:8d:f2:87:5e:c9:f7:a6:df:83:61:b9:59:d4:
5f:ce:ea:58:07:f4:2e:1d:33:46:9d:a2:9d:21:6b:
67:a4:a9:76:dc:92:d6:96:c1:38:b2:4f:93:0e:92:
b5:12:0d:09:39:d9:9f:a7:70:91:4d:f5:bc:44:20:
3f:ca:57:8c:64:9c:03:88:6e:bb:9a:26:2e:20:d8:
e8:c8:4d:4a:46:95:43:42:02:68:aa:c5:5c:3e:7e:
fa:e5:cb:b9:57:34:6b:20:b8:8b:99:3c:29:af:32:
bd:54:8b:c7:b7:a5:14:93:9c:d7:ec:dc:b7:7c:b6:
2e:79:33:38:1d:1a:b0:cd:92:c7:8e:ea:86:53:66:
7c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C6:F2:89:82:17:FE:9D:23:4E:31:80:FD:65:CE:F9:09:0F:01:14
X509v3 Authority Key Identifier:
keyid:61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ee:be:24:8c:74:e3:e8:8c:b2:78:52:9b:4d:1d:78:2d:eb:
a9:68:a9:0e:a5:94:3a:7a:dc:0b:69:de:03:b5:76:ea:67:c0:
05:01:4d:b1:3d:5b:30:65:6e:46:1b:48:11:b4:4b:99:4b:fe:
5b:78:30:14:86:6a:c1:ea:fa:4b:46:af:13:f1:a8:60:1a:55:
28:39:98:74:43:61:0b:c3:67:c9:c2:66:5d:5c:e3:8d:ca:62:
ec:35:d6:cc:40:26:24:1f:98:e8:9c:ba:cb:3b:1b:12:d5:47:
b7:af:31:f9:7a:13:e1:e0:27:d1:fe:9a:d2:ca:43:d4:be:7e:
88:03:0e:12:38:60:72:84:a4:9e:d9:70:a9:ba:8f:7f:be:bf:
50:8d:e0:1e:dc:d6:f0:83:f8:17:0e:76:d7:32:40:cd:1a:23:
06:00:c8:9f:1f:ac:ce:b0:32:e2:e3:bc:b0:59:b5:5c:c5:c0:
51:f9:5d:4f:38:42:8e:ac:1a:70:34:27:46:fd:a8:ba:69:79:
b1:ba:ba:8b:c1:3e:cf:86:94:3e:59:40:a8:44:a8:52:1c:28:
c5:d9:99:ea:e6:5d:52:02:d1:67:03:7a:39:4f:29:0b:87:6f:
86:26:8d:1a:2c:81:c1:c5:80:ae:98:88:81:58:f6:98:66:b2:
0a:fa:42:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:01:19 2026 by rpki-client