Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/Yu32KoGIYqbSD3178dLzH5KSDD8.mft
File: Yu32KoGIYqbSD3178dLzH5KSDD8.mft (raw, json)
Hash identifier: DcPT2Zj0WL5haNSSbViUf/o83chwdAehF1ThaZ2sTyE=
Subject key identifier: 61:82:0B:B2:7A:90:B1:6A:10:26:6A:F5:37:BE:62:EB:3F:27:09:7F
Authority key identifier: 62:ED:F6:2A:81:88:62:A6:D2:0F:7D:7B:F1:D2:F3:1F:92:92:0C:3F
Certificate issuer: /CN=62edf62a818862a6d20f7d7bf1d2f31f92920c3f
Certificate serial: 01A0C85933AB1F30D1D9AC2400FEFB4EC96E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yu32KoGIYqbSD3178dLzH5KSDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/Yu32KoGIYqbSD3178dLzH5KSDD8.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:01:24 +0000
Manifest this update: Tue 22 Sep 2026 09:01:24 +0000
Manifest next update: Wed 23 Sep 2026 09:01:24 +0000
Files and hashes: 1: Yu32KoGIYqbSD3178dLzH5KSDD8.crl (hash: dtbMHCDyohAnx4TD/t+O1wOMWrzaAF1S3pyDXARCPHg=)
2: dWX59-IgymwSWp5lVJHTizv1LNg.roa (hash: 7OpM1Q/nHvN11x8BC9ZSmIDVqJ0iu0AQ8UlElrKQjM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/Yu32KoGIYqbSD3178dLzH5KSDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/Yu32KoGIYqbSD3178dLzH5KSDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yu32KoGIYqbSD3178dLzH5KSDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:33:ab:1f:30:d1:d9:ac:24:00:fe:fb:4e:c9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62edf62a818862a6d20f7d7bf1d2f31f92920c3f
Validity
Not Before: Sep 22 09:01:24 2026 GMT
Not After : Sep 23 09:01:24 2026 GMT
Subject: CN=61820bb27a90b16a10266af537be62eb3f27097f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fc:12:a1:02:a3:54:31:eb:4c:c5:8a:fe:1b:
be:28:b8:b9:cc:da:22:7f:a9:14:bf:b4:d6:8d:29:
c9:57:63:a1:4c:45:4a:25:a9:52:81:93:6b:88:d1:
fd:d1:3b:54:af:47:c6:ff:b8:7a:92:dd:e1:03:9a:
79:9e:f5:26:30:a0:a3:2d:38:15:6b:c9:90:84:a9:
15:0e:5b:f8:56:f6:b4:3f:25:c0:a4:6b:74:22:ba:
9f:72:7a:e8:83:6c:7c:f0:d6:19:13:89:f5:7f:6b:
2f:ae:28:42:d8:e2:ab:6d:9e:20:9d:ea:0f:0e:b1:
72:d2:3e:bb:69:d1:45:ac:84:a6:6f:9f:d3:02:57:
cb:39:b5:5d:c8:02:59:63:c0:51:95:d2:a7:0b:09:
01:15:22:1d:88:16:54:09:bd:88:e4:0d:17:00:8b:
d8:01:61:73:d4:6e:48:6c:c4:8c:0a:c9:f4:5b:1f:
b4:a1:88:9f:f5:d2:51:01:3e:4e:88:98:85:c6:ac:
5a:94:4a:51:cc:bc:93:ed:5e:ef:57:9b:9c:b5:b7:
55:9b:4c:4d:c3:ea:37:34:23:d1:7d:3e:51:a1:5b:
ad:db:59:c8:5c:00:4c:c3:19:13:3b:18:a4:e0:b9:
a6:58:4c:2e:12:70:3a:6b:a5:d0:7c:45:af:93:5d:
92:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:82:0B:B2:7A:90:B1:6A:10:26:6A:F5:37:BE:62:EB:3F:27:09:7F
X509v3 Authority Key Identifier:
keyid:62:ED:F6:2A:81:88:62:A6:D2:0F:7D:7B:F1:D2:F3:1F:92:92:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu32KoGIYqbSD3178dLzH5KSDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/Yu32KoGIYqbSD3178dLzH5KSDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/Yu32KoGIYqbSD3178dLzH5KSDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d6:de:3a:d4:37:ab:95:52:36:82:ae:89:50:b5:07:9d:fb:
92:51:b7:fa:d1:11:0c:a4:89:31:85:35:d8:6c:d5:f5:72:b4:
c1:51:6b:fc:b2:06:bf:4e:92:a4:4c:35:f7:cb:b7:87:97:aa:
5f:4d:3b:56:b4:a3:14:cb:3d:c7:36:ec:34:ba:7c:17:01:52:
01:8e:5f:c6:7a:94:8d:13:38:d7:ba:d9:a5:c6:09:0f:84:63:
a4:6d:55:51:51:29:af:f3:9e:55:15:cf:71:92:99:c1:4d:00:
03:35:b3:67:6d:0d:39:22:5d:9b:63:37:9c:f8:94:0c:40:59:
91:fd:69:11:d8:69:c9:83:e0:86:eb:13:fe:a9:75:d0:1d:2c:
ee:16:83:aa:57:7c:d1:36:9a:da:e2:d3:ed:1e:4c:31:2a:8a:
f6:4a:d7:01:f2:13:e1:4c:0b:1c:f6:93:25:09:84:4c:ed:86:
21:92:a8:f9:48:f9:aa:8f:f7:03:94:a3:dc:7e:5d:6a:52:07:
2c:8b:e2:41:0c:b3:d1:0a:a5:7c:da:d4:8c:19:a5:07:60:2f:
da:d7:40:03:d5:8c:20:93:e1:ae:17:d1:2f:2f:dc:06:e0:c3:
9f:ca:0f:88:ee:39:79:c3:61:53:ca:26:00:0d:50:4d:68:91:
b4:77:15:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:22:22 2026 by rpki-client