Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json)
Hash identifier: W8hHCcT7zXXTcW3Fz1oEeJh23MPYEHQQYpFg2AMTEek=
Subject key identifier: AF:2B:5F:43:8E:2F:3D:9A:92:44:7C:79:F4:38:43:79:BB:58:66:25
Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Certificate serial: 019F8FB54A0A31088E6188A8604228D3F046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
Manifest number: 041D
Signing time: Thu 23 Jul 2026 16:00:50 +0000
Manifest this update: Thu 23 Jul 2026 16:00:50 +0000
Manifest next update: Fri 24 Jul 2026 16:00:50 +0000
Files and hashes: 1: 9ZaI8P7W_rtc492x3ky7rPk83Y8.asa (hash: MzLmuEES291ExAirdiJ6+pNE6IoqMZTiHB+WGFxcNOs=)
2: iGdr3YLiLVQi6j5DQ01DGKsu5ss.roa (hash: h6FlbN1+Nek1LKhgDeDKXC7AdnM99VdSyR1ScXlrIKc=)
3: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: 2/TE+VDZk6FZiJWIuxUiHehtJXYzNXYDATgajHaDmkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:4a:0a:31:08:8e:61:88:a8:60:42:28:d3:f0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Validity
Not Before: Jul 23 16:00:50 2026 GMT
Not After : Jul 24 16:00:50 2026 GMT
Subject: CN=af2b5f438e2f3d9a92447c79f4384379bb586625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:60:cf:d8:ee:1a:ab:bc:03:52:db:99:67:
f3:7b:7b:07:9b:ce:3d:5d:2c:57:8a:88:26:ca:1a:
73:94:c9:5a:a4:b9:a5:23:93:28:8c:c9:d1:f2:43:
50:9f:89:ab:94:36:8d:a5:2b:a9:0f:ab:c4:47:9d:
e8:3e:7c:f7:f2:52:76:9d:7b:84:b7:17:3d:52:b7:
9d:db:ad:22:0c:95:6b:69:dd:27:2a:ff:71:52:36:
5b:1d:3e:b1:6c:6b:2b:79:8d:22:71:04:f4:83:cd:
25:1f:dd:0b:22:76:2d:33:54:33:92:6a:47:0e:7b:
4f:ca:6a:ac:5f:19:05:66:20:48:2e:d1:88:e9:4b:
7a:b9:7f:49:4b:97:09:7a:da:07:15:e9:f5:76:55:
67:d5:cd:b3:dd:fb:c7:e3:93:cd:c8:0f:b1:ee:de:
99:10:5f:53:b5:5c:f7:8c:ea:5e:84:01:09:e6:74:
c1:43:ac:06:b5:4a:17:9a:a4:4d:a1:f1:9d:0e:a0:
da:b4:46:fd:a9:53:19:be:aa:c8:87:83:22:7b:64:
d3:9e:d6:c6:86:97:a9:84:ab:3d:0d:b6:75:68:cc:
35:47:11:7a:2a:b2:6c:63:cf:24:b4:ea:f7:08:ef:
8d:79:fc:e1:d8:af:0f:98:c0:b6:cd:7f:c2:23:0e:
e5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2B:5F:43:8E:2F:3D:9A:92:44:7C:79:F4:38:43:79:BB:58:66:25
X509v3 Authority Key Identifier:
keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:11:95:5e:2a:67:b1:fe:bd:65:24:a1:9e:8f:c6:bd:fe:17:
02:c6:16:8b:60:65:21:a0:c0:0b:dc:50:bb:17:bf:7a:d7:9b:
5d:3b:2a:a3:70:4c:10:de:e6:22:ad:7d:06:34:b5:5b:c9:82:
da:22:b2:8c:78:ff:bf:5a:d9:2b:51:69:70:33:97:94:96:b7:
5c:5f:19:54:0e:50:f6:f2:fe:9d:f4:3c:22:ec:2a:88:32:9e:
5c:a7:fb:04:e9:65:e5:58:fc:c2:b0:10:1c:22:19:cf:21:fa:
a5:c4:c3:0b:74:39:f3:76:62:f3:c8:37:6f:fb:59:13:42:d7:
e5:87:d5:5a:f3:4e:f0:2f:ff:d9:15:7c:2f:49:4c:e4:f5:11:
b6:1d:7d:0d:97:38:18:ad:c7:7e:84:f0:ee:45:90:ac:3c:36:
44:f8:74:97:2d:b9:34:37:f3:b0:5f:ec:c6:d5:85:aa:bb:18:
f5:0e:c3:14:5e:93:e2:a3:12:dc:27:c3:be:80:63:ba:e4:bd:
56:35:a2:cf:37:70:52:89:1f:14:a5:0f:41:e7:cb:1d:c5:85:
d9:57:e4:f2:0a:29:1c:8a:4f:62:b2:dd:15:45:35:2a:ff:d4:
2b:30:8b:69:4c:67:43:e5:b3:84:c1:5f:8f:ac:7b:5d:f7:a0:
1d:33:27:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:20 2026 by rpki-client