Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
File: YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft (raw, json)
Hash identifier: 8ZIOjAQTMAk1L5a9rQ0zkWqTjHLomTArrtFq5R6eBYY=
Subject key identifier: 75:0A:ED:5E:19:86:12:E4:1B:25:D1:08:E8:00:38:B3:02:4E:AD:E8
Authority key identifier: 61:F8:0D:83:D9:48:E2:48:B9:68:60:66:76:60:7B:84:70:E2:E4:1C
Certificate issuer: /CN=61f80d83d948e248b968606676607b8470e2e41c
Certificate serial: 019F92B6545B99193889F718FAC31CC8990B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
Manifest number: 5F
Signing time: Fri 24 Jul 2026 06:00:50 +0000
Manifest this update: Fri 24 Jul 2026 06:00:50 +0000
Manifest next update: Sat 25 Jul 2026 06:00:50 +0000
Files and hashes: 1: 1-LvrevNxn8xjvxwWO9shI6PuFvU.roa (hash: iqWesMjsdrjmX1g6QE9vIbNV9BRrg4iuwDL5XHq0ynQ=)
2: YfgNg9lI4ki5aGBmdmB7hHDi5Bw.crl (hash: JyWZDosGkCRKDgnXBKYe1Y75xzUGE1cO6ZWwKXVgZEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:54:5b:99:19:38:89:f7:18:fa:c3:1c:c8:99:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f80d83d948e248b968606676607b8470e2e41c
Validity
Not Before: Jul 24 06:00:50 2026 GMT
Not After : Jul 25 06:00:50 2026 GMT
Subject: CN=750aed5e198612e41b25d108e80038b3024eade8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a4:af:f2:ff:83:45:03:85:38:c9:01:58:28:
2c:25:d4:c2:c3:bc:92:81:2d:f7:93:5a:5c:98:79:
b0:3a:17:ef:6a:57:c0:71:0a:d8:50:ee:d3:fc:79:
ea:41:50:31:dc:e0:e4:78:e4:8a:00:2f:c3:67:bf:
a3:78:d5:1b:ed:df:f4:ec:db:69:ea:b7:0e:94:2a:
3a:ac:16:18:d9:ab:b3:18:0c:7a:04:07:6c:3a:7c:
b4:7c:89:5e:8b:a9:e0:46:ef:b7:8a:e1:d7:65:0b:
66:b1:22:bf:5d:f8:a2:f4:c0:f3:d8:a4:ae:99:5e:
f4:54:a3:eb:19:8d:9a:7e:b8:82:54:50:da:62:2d:
d2:2b:35:8e:0b:9a:8a:3e:e5:b3:bc:1b:8f:56:5c:
93:84:17:9d:34:8f:9f:4b:c9:91:12:81:99:c6:8d:
48:81:cc:0d:9c:7d:f8:08:fc:47:95:52:0a:04:12:
9c:89:43:ef:cb:3b:16:81:c8:c9:a0:d5:3f:71:dd:
e2:b5:63:36:80:e0:0d:f0:12:b2:6f:a6:07:89:89:
ef:90:7a:25:5b:9b:c4:c8:a7:5a:ce:f2:fa:a6:e3:
d2:0a:7a:64:bf:75:ea:d0:60:12:a6:80:4f:77:09:
49:36:e2:10:a9:96:19:e0:c3:f1:81:20:a5:0f:4d:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0A:ED:5E:19:86:12:E4:1B:25:D1:08:E8:00:38:B3:02:4E:AD:E8
X509v3 Authority Key Identifier:
keyid:61:F8:0D:83:D9:48:E2:48:B9:68:60:66:76:60:7B:84:70:E2:E4:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e8:14:95:51:0c:93:77:16:b0:19:db:d2:75:91:3c:43:69:
46:da:88:06:49:9b:62:79:9c:d6:f4:64:7f:21:ec:97:49:9d:
1d:bd:f6:f1:3b:d0:5a:78:6a:70:66:ac:48:4a:fd:8d:18:c2:
2c:07:32:cc:2f:3e:bf:76:7b:7c:c1:33:4b:7a:cd:af:91:4f:
73:a8:22:d4:fc:fd:06:cc:22:0b:f6:7f:40:4d:fe:d8:df:1e:
7e:3e:0d:8a:69:fc:46:eb:ae:6b:5c:96:e3:e5:3f:f2:b6:94:
44:dc:81:6b:eb:2a:20:88:90:70:f5:fb:ff:b5:4c:59:17:a8:
fb:97:5f:db:67:c0:a1:94:df:cd:1b:a5:87:f1:eb:04:5a:b4:
92:79:2c:fc:e6:8b:f6:24:cc:da:d4:92:53:74:b5:38:60:f4:
48:32:12:62:3f:62:90:32:a2:a4:6b:5e:d6:a8:ec:97:f1:cf:
d4:f1:ad:3d:53:ac:fb:71:3d:d7:12:44:53:71:0d:d1:e5:4c:
87:e1:43:19:ee:9f:62:e4:59:cc:6b:c1:8e:32:1b:c4:3a:85:
94:19:10:8a:e1:20:e4:f4:c3:69:b5:b4:ea:a6:61:83:dc:a4:
ed:18:e1:30:69:83:02:a0:59:72:1d:e2:84:bf:69:63:81:bd:
29:55:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:43:13 2026 by rpki-client