Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: EWKWDVzZabauptlFEPlhR/WBoDjHuTc+wGPK3+8o7g4=
Subject key identifier: D1:AF:74:9E:BF:C0:82:A8:F3:48:BB:83:E4:59:AF:F6:F3:8E:FB:E2
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 019F94A4BB459F2FC7FF611B136D1A8D1128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 15:00:51 +0000
Manifest this update: Fri 24 Jul 2026 15:00:51 +0000
Manifest next update: Sat 25 Jul 2026 15:00:51 +0000
Files and hashes: 1: Xz1YPhwlgcFJn9H6zKCHQE9OZMs.roa (hash: E23r1ViDJSDDunuaw4r4shrNSmLJDRKbQsrvll9ROpQ=)
2: Y6uXwuSAMDltrgK47G1JT4Ly1MU.roa (hash: kINCl8tG1shq70mte4iuRzZgEl60hKLBpRpKxfDa3dE=)
3: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: OSSbqFdiG2Na147A9x1Dr5fAMuAKihNCZzLegYN1eLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:bb:45:9f:2f:c7:ff:61:1b:13:6d:1a:8d:11:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Jul 24 15:00:51 2026 GMT
Not After : Jul 25 15:00:51 2026 GMT
Subject: CN=d1af749ebfc082a8f348bb83e459aff6f38efbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:83:d9:5b:93:a8:e2:8f:17:b8:65:3f:5d:
c0:82:b8:5f:63:d9:7b:de:96:ad:39:fa:be:6e:78:
07:c4:85:66:4c:f0:85:10:32:12:ea:b3:22:ba:72:
60:df:f1:f0:83:0c:c5:77:a4:dd:a1:86:84:bb:26:
fc:d0:4b:8e:56:2c:64:d4:6a:d4:86:85:95:63:8d:
5e:6c:91:d9:76:fc:36:d5:3b:3e:50:9e:c8:6f:40:
5d:09:3e:9b:dc:d8:80:b9:ac:53:2f:a1:64:1f:f8:
67:5c:03:45:33:73:13:4c:3e:4b:e6:9f:0e:f8:71:
f6:ba:88:49:80:9b:7a:f3:42:a9:47:da:9b:63:b3:
ac:4d:f6:f6:8e:f2:dd:e5:26:5e:99:d4:fd:12:51:
7e:98:25:00:f8:1a:24:0b:0f:00:63:b0:7e:5f:88:
b0:71:d2:df:2d:ba:7e:fa:52:a4:e5:86:d3:6b:16:
b6:10:fe:33:f8:75:ae:85:b9:de:b1:bb:43:97:77:
ee:3e:cd:a7:d4:19:f4:80:8a:a1:4b:2c:04:21:4e:
69:1d:5d:a7:bc:63:00:dd:7d:b1:54:5c:bd:30:da:
48:b7:78:c5:32:cd:68:1f:7a:fb:78:1a:8b:08:46:
c6:11:ce:6e:bb:48:13:46:be:1e:fe:46:2d:d7:d9:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AF:74:9E:BF:C0:82:A8:F3:48:BB:83:E4:59:AF:F6:F3:8E:FB:E2
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8c:bc:d7:8b:c6:05:87:a7:53:78:20:99:03:86:39:6b:e1:
dc:d5:92:ef:fb:48:aa:d3:63:c4:1b:63:c3:99:90:3d:f1:bc:
94:b4:43:0c:79:f0:da:35:d2:d6:73:4e:fe:e1:75:7d:2b:16:
94:ea:74:27:73:ac:54:21:54:11:3f:48:f3:6b:16:b3:0a:ba:
bc:cc:ef:6c:ee:b6:4d:e3:8e:45:a0:6f:48:89:e6:6f:68:0c:
78:ec:23:ff:91:59:5d:22:98:53:a6:70:a9:a0:11:db:58:b8:
1b:c8:d6:34:25:b0:bb:1f:41:cc:97:99:e3:5f:10:19:90:2e:
87:8d:1a:f5:95:dd:ff:8b:f4:eb:04:a6:f6:0e:39:66:bb:95:
4e:d8:b1:0b:a6:37:7d:14:33:cf:69:58:c5:6e:26:ab:7f:28:
33:7f:8f:5a:40:db:6f:28:18:58:e6:c9:56:62:c6:29:5d:46:
33:a2:23:15:1b:16:b2:77:bf:8f:6e:a1:91:e9:76:34:9a:54:
c5:bb:1c:11:60:24:92:93:b1:90:c1:45:51:38:a7:a0:f4:82:
3e:bb:05:b1:e5:62:c5:42:c1:2d:26:fc:96:f9:6b:96:b6:2a:
74:52:c5:4b:e9:d9:0c:97:fd:18:45:34:5f:61:42:b0:81:86:
2c:b7:9b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:09 2026 by rpki-client