Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
File: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft (raw, json)
Hash identifier: /1UTUXpHFg+q52RL1YvRwO4Jh8Rh3ti8MkVc+nMORsM=
Subject key identifier: 5D:DF:B3:3E:99:7E:AE:B4:3A:82:AD:35:C5:93:18:C0:E2:5F:41:98
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial: 019F91DB2393FEC31970B7D0612CFE722AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
Manifest number: 09E3
Signing time: Fri 24 Jul 2026 02:01:25 +0000
Manifest this update: Fri 24 Jul 2026 02:01:25 +0000
Manifest next update: Sat 25 Jul 2026 02:01:25 +0000
Files and hashes: 1: 1xbn_UMCw0INiad24Fz-EfLf1Gw.roa (hash: SZrNeUwfQoqqElnDWbZPqxb5PbXGACF+9AzBOt+xfa8=)
2: 6XExm7Uo-EU0Ms0tsb7xKnyJkVk.roa (hash: BWgqT1gKxehU5OIENtOQqrP4y0cmP4jYKvHGk1A4LAc=)
3: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl (hash: gtgUtSPylVA6gaHtrnIyDKd5jItiP6IKRLWYbChJAlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:23:93:fe:c3:19:70:b7:d0:61:2c:fe:72:2a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Validity
Not Before: Jul 24 02:01:25 2026 GMT
Not After : Jul 25 02:01:25 2026 GMT
Subject: CN=5ddfb33e997eaeb43a82ad35c59318c0e25f4198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:55:be:1b:1e:86:de:b5:ff:9c:7d:09:1d:a9:
ac:e7:ba:ac:69:29:aa:86:8c:d9:36:12:71:18:a2:
11:e3:e6:64:e7:bd:58:a5:68:4a:42:03:bd:49:84:
5e:d2:b9:ca:a8:b0:3c:2f:fb:29:b6:f2:2f:02:c0:
62:e3:5f:db:7a:77:c5:be:bf:1f:57:93:14:7f:78:
e9:c6:9e:1d:00:1f:33:6b:ee:4a:fc:81:c5:24:19:
7d:51:ac:69:b5:9e:3d:47:2b:74:83:15:64:72:ab:
60:be:2f:98:5f:99:a0:5d:9b:6c:23:fb:b8:15:66:
d4:5e:18:8d:09:d1:a4:b6:7b:5f:7d:35:ec:40:a9:
fc:b1:64:42:00:d4:ee:6a:92:5c:ab:99:71:95:46:
f7:ea:12:46:0c:e8:79:c0:97:7c:43:f7:56:5b:e6:
56:f0:1d:b6:f9:82:fd:e8:3d:03:b7:5f:e5:91:f0:
65:cc:9e:9f:40:c9:52:e0:98:26:01:71:55:d3:1c:
30:9e:a9:d7:9c:94:a8:cf:b8:10:74:55:e1:48:9d:
58:75:28:14:89:46:49:b9:d9:30:01:0a:4b:6e:63:
7e:56:ea:a9:9c:6a:22:69:15:9f:8b:54:65:f0:46:
7f:7d:6c:2e:63:b6:f0:18:ee:2a:df:1f:44:97:7a:
3c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DF:B3:3E:99:7E:AE:B4:3A:82:AD:35:C5:93:18:C0:E2:5F:41:98
X509v3 Authority Key Identifier:
keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c1:d4:3f:0e:51:34:7b:36:17:d2:76:a5:6c:6c:b8:6a:bd:
4f:ab:59:36:44:93:a5:6c:34:8a:2d:04:c9:af:da:43:e5:61:
59:0a:55:33:aa:5d:37:0e:08:b3:9f:a4:24:7f:1e:21:0c:e1:
db:80:46:4e:ce:f5:b1:e7:eb:c5:6e:67:f3:18:e2:9b:26:72:
63:26:ed:3b:e0:39:05:00:4d:e3:e9:53:00:5e:ca:7b:9a:b8:
d8:e0:61:b2:3f:a3:0e:c0:0f:88:fa:d2:97:a3:87:be:80:51:
e3:82:f4:aa:ee:51:0b:22:87:29:f7:f0:1f:34:49:99:6e:44:
e3:02:37:75:62:d4:69:fe:50:a9:ed:28:5a:5f:b8:b9:da:39:
96:c0:63:58:b4:4a:0a:96:90:95:a7:03:2a:2b:24:f5:ef:ec:
12:98:39:b8:6e:5d:4b:74:0d:81:25:8f:58:c2:f2:de:f0:14:
8b:e3:76:55:21:49:c8:c5:75:3f:71:46:74:c6:9a:c7:8e:78:
d4:09:98:61:4a:49:3d:7e:26:4f:35:a3:52:ba:96:ff:55:d0:
b3:af:54:56:77:df:33:60:3e:7d:b5:34:50:e6:3b:8e:89:3e:
a9:8f:8f:77:04:d3:da:c3:6a:58:73:60:e8:c2:de:c2:e9:13:
9b:50:9a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:07:37 2026 by rpki-client