Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: D/iqlRMOg3iiVRAmJNgN+XahLvJUlw3zVi5skeuM9Ro=
Subject key identifier: C1:34:EF:23:6D:80:AA:17:F4:0D:84:D1:A0:20:F7:69:E9:D2:6F:33
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 019F93920C01423E17BCB0BBA96CBFCE3FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 11C3
Signing time: Fri 24 Jul 2026 10:00:49 +0000
Manifest this update: Fri 24 Jul 2026 10:00:49 +0000
Manifest next update: Sat 25 Jul 2026 10:00:49 +0000
Files and hashes: 1: 3ExD7nKcCYNGR68ATw2vAixFfPw.roa (hash: PRfZSceh3jh1FTBUXpKPdAPCRhio/qZFjdbYjEajKSY=)
2: EyM4wivbpkVOKedhB97D1lcXuLE.roa (hash: ztSlxeB82WQ5Ip3+c+gguWX+u1grG8UgGeYQslXQHlM=)
3: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: DdFVlK8wxEP2XQqmurh9Hlg50sOu+mh3NwAW5WaDOjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:0c:01:42:3e:17:bc:b0:bb:a9:6c:bf:ce:3f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Jul 24 10:00:49 2026 GMT
Not After : Jul 25 10:00:49 2026 GMT
Subject: CN=c134ef236d80aa17f40d84d1a020f769e9d26f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:f9:b9:7f:80:c3:3f:13:38:86:73:4b:fa:
f2:44:3d:d0:7e:28:d6:c1:8f:62:d4:c2:dc:b8:ed:
c2:9f:3c:39:d8:45:a8:89:3f:99:17:e5:b1:66:27:
a4:cf:b9:81:44:b7:99:4f:c0:4c:75:f6:eb:78:be:
78:a2:1a:d0:c1:d1:d7:e2:8c:a0:42:1b:5a:f2:1f:
13:2a:c8:99:16:24:a1:64:2d:ea:29:48:64:e5:ba:
66:b7:c7:4d:45:e2:07:49:0d:d0:41:6e:52:75:21:
a9:e7:f9:59:cc:bd:ec:d1:ce:fe:e7:af:28:55:0e:
cd:fd:04:40:8c:60:9a:f9:21:8b:a2:94:32:94:5e:
20:cf:04:ce:6b:73:04:89:3e:65:9f:0f:33:5d:26:
e5:ee:70:ea:23:07:82:3e:f9:16:3a:ae:80:73:11:
c8:30:74:2c:90:ff:23:f7:f7:fd:48:25:0d:a2:b4:
b3:43:a6:22:02:2b:8c:e1:32:7e:f7:2b:aa:85:05:
79:99:65:fd:ac:a8:e2:62:94:06:07:e6:83:d8:bc:
68:2f:a7:56:61:fd:28:6b:9a:58:4c:8d:46:bd:73:
3a:43:d4:cf:e8:57:be:92:60:11:93:42:19:b7:d2:
9a:bb:66:1e:30:12:41:17:ae:92:25:a2:61:53:ae:
63:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:34:EF:23:6D:80:AA:17:F4:0D:84:D1:A0:20:F7:69:E9:D2:6F:33
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1c:75:9f:0c:9c:db:ff:bd:e6:8a:22:c6:fe:b6:d2:0a:5a:
aa:08:ae:a1:0d:cc:5e:18:5e:cf:31:24:aa:c5:1a:0f:a7:26:
00:d1:4b:7a:e4:bf:05:02:2b:20:16:d4:d5:7f:36:00:db:85:
b8:21:af:47:9d:03:73:fd:ff:bc:ba:57:3d:e9:96:8f:dd:02:
00:ca:9b:1a:b6:90:2b:9a:01:7c:08:07:c9:60:4c:c6:5d:ec:
e1:48:a8:95:54:44:42:ac:98:e2:37:ff:87:f0:fb:25:6b:ff:
7f:c1:1f:b2:17:95:40:4b:d4:a9:d5:a7:a4:6e:6f:c1:98:5c:
e5:9a:68:69:ab:01:ca:bd:e4:02:c4:67:48:62:db:bc:0d:b9:
bb:c3:2b:cc:6b:5f:b6:d0:c9:94:86:e9:02:00:4c:b5:9a:65:
91:e3:d3:0b:a8:b1:b3:b9:27:33:34:46:1a:c4:e8:01:7d:a7:
6f:a7:d0:9f:65:73:36:38:e3:6e:a4:b3:15:68:81:68:c6:d6:
10:b7:1d:07:e5:eb:e1:d7:aa:cf:7c:17:85:37:bd:c5:f4:43:
1b:e1:5c:48:b9:9a:9f:2a:0f:66:cc:08:21:3c:57:7c:7d:3a:
f0:4f:17:91:64:8d:58:43:e5:a7:4e:1d:87:e8:14:a5:b4:12:
2f:7b:51:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:40 2026 by rpki-client