Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier: ezd97qrC9S5lhoVEwuno1SiBBzoyJy0KWPhFOfBO6uc=
Subject key identifier: E4:6A:8B:30:41:FB:9C:4D:B3:B0:F6:27:51:08:94:8B:2B:D5:9C:D1
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 019F9248EBD225AB8AA6130A865BE78E0D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number: 12B2
Signing time: Fri 24 Jul 2026 04:01:20 +0000
Manifest this update: Fri 24 Jul 2026 04:01:20 +0000
Manifest next update: Sat 25 Jul 2026 04:01:20 +0000
Files and hashes: 1: GILkzrnW-WLXBiCMka03WJecbH4.roa (hash: V4r8aFoZHB6LWJUUFH9l/6/JEctMKZK9VcW+Qg7PzwI=)
2: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: 5UkgGwVyUDemhGAIqz//1P9fi9JfzmKDKYLq3F6T++Q=)
3: yzyj6CtIhdLDtUGY2ToVGMdP9Gk.roa (hash: W/jGAjTWq86NyJWeIokb5Yic1QQn0pxHCXE2Q3AfgRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:eb:d2:25:ab:8a:a6:13:0a:86:5b:e7:8e:0d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Jul 24 04:01:20 2026 GMT
Not After : Jul 25 04:01:20 2026 GMT
Subject: CN=e46a8b3041fb9c4db3b0f6275108948b2bd59cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4f:52:0a:3f:a1:6e:53:d6:cb:3d:ca:18:f9:
af:a5:bb:3f:1f:98:39:1d:a0:ce:1d:f1:04:d3:ff:
d5:9d:7f:c8:4c:79:01:47:d0:23:c3:e3:07:aa:62:
fd:75:09:eb:25:87:4e:ca:a4:38:f2:19:62:0c:1a:
ad:62:40:f5:2d:c8:73:d5:64:3e:6e:75:49:32:0c:
f4:de:7a:77:92:55:47:47:47:ae:37:55:05:47:2c:
4e:c1:95:8b:62:bf:10:cb:4a:06:18:f3:88:bc:76:
6a:b3:8c:c9:a7:98:bf:71:9d:9a:3a:a0:32:e8:16:
1b:bc:ba:70:2f:64:ee:84:20:94:ae:93:ce:93:5d:
23:4d:0a:27:d1:c0:6d:70:b6:2b:3a:35:88:ce:14:
9e:30:37:3d:21:dd:55:6e:40:51:6e:53:92:56:63:
b1:c3:ea:ff:b8:a1:6b:1e:f4:ea:74:c7:ff:a0:ac:
04:ba:73:0c:4d:ee:4b:ab:9d:18:6d:2f:e4:1a:5f:
b0:5a:2b:d9:a6:5d:df:23:e7:ab:ab:fb:3b:8d:78:
80:f3:29:17:b7:0e:1b:dc:47:21:12:8b:73:34:fd:
b1:c6:7e:93:96:2a:60:30:f9:09:2c:47:92:9f:d0:
6d:e3:cc:b7:2d:78:a1:3f:ee:4c:2e:8a:b5:ea:05:
95:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6A:8B:30:41:FB:9C:4D:B3:B0:F6:27:51:08:94:8B:2B:D5:9C:D1
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ca:d4:af:45:35:5b:5a:d1:e3:16:7b:bc:5b:a0:65:5e:b6:
d6:e9:56:69:75:b1:ae:17:5d:a4:a5:68:75:ad:4f:0d:1a:c0:
14:e7:2c:b9:51:7e:9e:d2:02:9c:bb:2a:48:ad:62:1f:4f:5a:
f4:e7:16:ca:2d:c9:0e:f5:dd:d2:b6:e3:5d:83:10:f4:1a:ae:
e8:31:5b:13:98:19:44:15:85:a6:c5:9d:96:77:c5:81:1b:ca:
53:93:d0:9d:56:cb:39:b3:62:d2:e5:a0:4a:d7:75:3b:cf:0e:
1c:93:c9:51:a5:3e:43:2e:d8:ca:80:b3:27:97:57:29:c1:ec:
79:9a:36:0f:bb:7d:32:af:d6:f3:db:b1:ab:32:ae:48:35:a7:
52:10:fe:2f:4d:08:3b:4b:c7:6b:78:73:58:f9:c1:9e:d1:ef:
e8:8c:11:3a:df:ee:74:0d:fd:9e:89:4b:47:91:39:f3:1e:90:
70:c2:39:56:d8:84:1f:97:2f:ea:ec:9c:18:39:e8:62:bd:35:
06:48:d0:50:be:10:e9:15:83:78:40:75:33:ed:4e:67:b4:68:
52:2f:fd:a5:81:e4:ca:d9:47:e2:1e:30:a8:93:a5:5a:f7:db:
d8:3c:99:99:25:87:56:af:5d:a8:77:f4:6a:8c:1d:21:5c:35:
44:7e:1c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:28:30 2026 by rpki-client