Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier: Skm9Hf0A1EZpQ4ma5S5Od0L41zce38xvX4O4j05961U=
Subject key identifier: BA:B1:08:48:06:C9:99:E9:27:AC:07:E4:AA:8B:62:B8:35:67:85:DB
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial: 019F95121FD35B76BCE263AF080EF361E932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number: 14E8
Signing time: Fri 24 Jul 2026 17:00:20 +0000
Manifest this update: Fri 24 Jul 2026 17:00:20 +0000
Manifest next update: Sat 25 Jul 2026 17:00:20 +0000
Files and hashes: 1: _V1LSsZtamsE4WXP60Yw8QNvv70.roa (hash: 86294W5FbZlicyPxaf1Bh5Vh3kJ1iu3Y1KxTGDfYWAk=)
2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: IDNib/n7z9arN3fhHE6/rcAvtkpgetDiPW2t/2K+LCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:1f:d3:5b:76:bc:e2:63:af:08:0e:f3:61:e9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Validity
Not Before: Jul 24 17:00:20 2026 GMT
Not After : Jul 25 17:00:20 2026 GMT
Subject: CN=bab1084806c999e927ac07e4aa8b62b8356785db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:7a:72:0a:7e:ea:21:6a:a0:e8:bf:75:11:ae:
c3:8d:8b:09:ea:f2:c3:16:08:ec:ab:ae:2b:2b:16:
ae:70:b3:85:8c:48:1e:7a:f3:5b:e6:87:75:67:c9:
f6:06:90:e7:32:6d:ed:09:a8:cc:c4:4b:9b:5f:59:
25:73:7e:ba:6f:0d:51:2f:2a:3e:80:80:c4:d5:d9:
d6:70:c0:e5:2e:71:b3:70:94:0a:1a:c2:d1:85:44:
82:03:39:7d:54:ac:52:36:fb:33:71:b9:81:67:69:
d7:8b:4d:9c:77:e2:04:4d:af:4b:e5:61:21:fa:56:
1a:8d:5b:12:cc:b4:ad:cc:69:45:b6:70:87:d3:72:
93:18:90:6d:6a:cd:2a:6d:0e:11:e4:47:ef:d4:7d:
67:f2:6c:d7:d1:fe:1a:31:94:80:8a:74:29:70:fd:
d9:bc:77:52:13:28:52:7d:8a:90:5b:bd:31:e7:1b:
52:d8:25:02:a8:dc:48:59:f9:69:83:6c:03:e6:26:
27:7b:9f:36:11:64:4a:de:b4:79:70:ae:0a:d2:10:
6c:fb:65:f7:1b:94:71:26:50:6e:44:58:23:1e:8f:
dc:f2:b3:db:bd:6c:f0:6f:85:9c:2f:bf:88:a8:9b:
78:bf:e9:3d:80:53:87:df:63:64:c7:e1:66:e8:8e:
84:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B1:08:48:06:C9:99:E9:27:AC:07:E4:AA:8B:62:B8:35:67:85:DB
X509v3 Authority Key Identifier:
keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8a:1a:7a:e9:c8:bf:f2:9a:bd:69:9e:9b:cd:ce:98:83:b6:
5d:54:b3:b2:99:15:43:7c:26:ec:df:f7:e8:2f:e6:19:f2:7d:
a0:bb:fe:b8:a0:93:cd:07:36:23:cd:c4:20:35:e8:e8:bd:bb:
f3:a4:a8:c3:9a:d0:43:1d:2b:ab:25:2e:d5:3c:74:f5:f6:27:
7b:e0:b5:06:23:b7:9c:76:d1:22:ae:2c:49:f5:ea:d0:2f:ee:
f3:ae:0e:85:9a:bb:e4:ce:a4:b9:a1:9f:2a:1d:80:07:b0:cc:
d0:0e:e7:39:81:ec:f7:91:0f:4d:5a:c5:17:c7:7c:d2:b7:65:
26:c9:60:72:8b:47:6f:e9:ba:df:79:f5:e4:e4:61:61:a3:9b:
35:cb:6c:a1:b2:95:fb:43:a2:65:3f:da:18:61:09:74:f7:99:
fa:33:31:76:f1:87:e6:74:3f:1b:12:ff:86:fe:c8:b5:40:92:
f9:d9:be:cd:74:d1:2c:66:c7:a3:fa:f2:fe:16:8a:9b:55:d3:
23:40:7f:ca:a1:7e:28:a2:e4:fe:f1:ab:2c:0c:cb:4d:18:6c:
ae:fb:c4:a2:67:8d:b3:bc:fc:b9:8a:5c:df:91:55:84:81:27:
3a:91:2d:3b:90:9f:e6:10:f5:b2:d5:57:c1:e4:81:72:02:8d:
a8:76:94:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:24:26 2026 by rpki-client