Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
File: YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft (raw, json)
Hash identifier: Gnh467KwMgjrGvTsvA5VLltNazvYOsX0XSl4lp33Cec=
Subject key identifier: DE:06:2E:B4:70:E6:AB:F4:10:75:0A:99:15:22:FC:2D:BE:40:BF:E6
Authority key identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
Certificate issuer: /CN=6149cbba3e6629beaebfb69668678ada51744898
Certificate serial: 019F95499C9AA63CAEF9B1A8507EA9C183F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
Manifest number: 16F1
Signing time: Fri 24 Jul 2026 18:00:57 +0000
Manifest this update: Fri 24 Jul 2026 18:00:57 +0000
Manifest next update: Sat 25 Jul 2026 18:00:57 +0000
Files and hashes: 1: YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl (hash: aPM3GLomikt4VGeNqBiSuFD228ydh7qMMNB+a6DR1Ws=)
2: v872mIxxwSGV2ha6Yd9jq9CMUao.roa (hash: 1G9sBjvfPqj7U0dttH4sUsWBNP9ecKYoKzenyr22mAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:9c:9a:a6:3c:ae:f9:b1:a8:50:7e:a9:c1:83:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6149cbba3e6629beaebfb69668678ada51744898
Validity
Not Before: Jul 24 18:00:57 2026 GMT
Not After : Jul 25 18:00:57 2026 GMT
Subject: CN=de062eb470e6abf410750a991522fc2dbe40bfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:67:12:24:bd:23:fa:d0:73:5d:46:5d:15:
a4:c0:5f:c9:fc:00:86:b7:4b:7b:bf:06:88:8d:ec:
d6:b9:86:9c:aa:c8:0c:0c:1a:9a:c5:10:be:b1:7e:
84:fc:f0:5f:98:de:fc:29:32:e6:5d:2b:c1:37:6e:
22:fb:5d:98:9d:9f:c4:bc:90:29:f8:30:12:12:55:
68:ae:7f:ce:b9:ad:0b:f1:c2:de:43:bb:d9:b4:7d:
f0:ab:0a:d0:15:ea:af:4e:5c:d3:d8:4d:53:a7:38:
a7:7e:2b:d3:4e:5a:14:27:5e:7e:3b:47:e3:c7:52:
92:ac:fd:73:fb:d7:d7:19:18:df:c8:8a:52:20:18:
7b:7f:3e:22:79:d9:0a:9e:9e:bb:f6:96:b6:63:d6:
df:dd:ec:16:4a:6c:62:e1:72:70:4e:3b:0e:e2:bd:
f2:b9:57:d3:13:a7:82:32:71:12:67:88:07:1c:24:
22:40:52:08:45:2b:9e:80:5c:45:c6:e0:45:5e:9b:
0c:b1:ce:ec:2f:14:4c:c7:d9:16:d4:cd:41:62:04:
dc:b6:a6:9f:dd:eb:e3:d4:4b:dd:78:2e:67:0c:c1:
66:04:be:79:9d:9f:0a:1c:b1:6d:34:16:79:71:02:
8b:83:f6:05:10:bb:2c:19:26:94:17:a8:16:19:c6:
cf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:06:2E:B4:70:E6:AB:F4:10:75:0A:99:15:22:FC:2D:BE:40:BF:E6
X509v3 Authority Key Identifier:
keyid:61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8a:68:42:ca:cb:f7:e5:d8:4d:11:95:f2:30:ee:b2:35:c3:
73:d1:38:6d:59:d6:7f:7e:bb:dd:1b:bc:96:7d:83:62:86:f8:
07:89:e0:4c:09:3f:72:ef:9e:77:11:7b:5f:81:f1:61:68:9e:
c4:70:f2:df:9d:f8:c3:93:9e:83:51:a6:9b:11:2c:f6:f6:ef:
f9:1b:d5:07:15:cc:53:63:e6:96:fa:d8:10:a5:2c:56:f8:40:
a1:18:3c:b2:cf:84:92:d6:4a:f3:8d:48:2a:be:dd:75:22:b5:
95:ea:05:b0:e1:b5:2e:33:54:3b:2f:c6:96:f7:9d:cb:89:f0:
5c:c6:50:37:57:46:dc:f9:ee:c2:05:d3:f0:89:ce:03:eb:c3:
db:f2:3d:5d:04:3c:e3:0e:bb:fa:db:94:47:b1:5f:c8:dd:d2:
35:ae:1f:87:70:e9:35:d8:b3:ca:80:75:06:1e:74:c0:d2:f3:
cc:48:2c:12:51:78:c3:0c:fd:09:4e:2d:d3:5d:88:9f:ce:84:
e2:fc:86:d8:d9:4a:c0:87:ae:8b:2a:7b:ce:37:f7:ec:1e:3c:
3f:7c:d5:35:43:95:b1:40:ff:dc:ec:c1:f2:f5:57:f9:cc:b0:
a6:9c:38:da:34:f3:a6:47:94:a3:0d:3c:b2:3c:62:6f:e6:c1:
eb:22:f6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:11:01 2026 by rpki-client