Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
File: ym3NrZkpBFbG18GOscBY2UEIiAE.mft (raw, json)
Hash identifier: e+8EQ+kE/Yv1CbTljIipy9c8iYDRqftIO91u4tONmwg=
Subject key identifier: CA:77:26:EA:B0:C9:03:3D:A1:EF:97:0F:BA:1D:99:59:B4:ED:6E:E9
Authority key identifier: CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
Certificate issuer: /CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Certificate serial: 019F92B6257185AA0DC3A32342228B9AB29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
Manifest number: 196C
Signing time: Fri 24 Jul 2026 06:00:38 +0000
Manifest this update: Fri 24 Jul 2026 06:00:38 +0000
Manifest next update: Sat 25 Jul 2026 06:00:38 +0000
Files and hashes: 1: bG2ai37iVGCdW98mBInWrIrYPA0.roa (hash: xkK4nEMctXQLAAuz2jXwdJcPBigpmy2jrTbYqyPGIj4=)
2: ym3NrZkpBFbG18GOscBY2UEIiAE.crl (hash: l41zgIpQCrgQLX4j97qsUg5HpH1YaHTfsdacWadQAOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:25:71:85:aa:0d:c3:a3:23:42:22:8b:9a:b2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Validity
Not Before: Jul 24 06:00:38 2026 GMT
Not After : Jul 25 06:00:38 2026 GMT
Subject: CN=ca7726eab0c9033da1ef970fba1d9959b4ed6ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:3b:31:1d:96:2c:0f:03:a8:d7:04:9e:d6:
63:5d:05:9b:de:cf:c3:c9:e5:c3:f9:c1:a3:e7:4c:
c6:18:e8:65:d0:b7:bf:33:c6:5b:c6:d6:be:02:4f:
0b:c2:1f:05:91:7d:7a:81:92:8c:5a:c5:5c:ef:f2:
99:aa:50:d0:37:e2:79:ae:66:c2:ca:0e:b4:f8:49:
f8:e2:5f:8f:e4:f6:51:53:11:92:65:f1:ef:f8:b1:
da:76:c8:b2:d2:1b:12:ca:57:13:46:dc:53:0d:b2:
bf:75:98:c7:cd:64:12:6a:b8:57:ec:e5:b8:98:4d:
16:59:f3:b5:f9:c5:fc:04:ee:65:0d:0e:0c:7c:05:
82:4f:b2:8f:68:51:af:69:6e:92:74:ae:40:3b:b6:
76:ab:a7:c5:cc:88:6b:41:4e:7f:d1:fb:cc:65:68:
e3:31:a1:14:a4:36:41:f7:32:91:b4:d7:42:67:7d:
8f:86:fe:1f:33:f5:b3:69:06:bb:18:a3:e5:d9:d7:
6e:cf:c3:fd:2b:6b:e8:d3:7f:2d:7a:15:e1:d2:b3:
5e:08:0c:42:24:31:7d:92:a7:60:f1:cc:09:e2:66:
77:fb:67:12:d7:22:4a:5d:0f:1f:c5:02:d9:8c:00:
16:f6:46:37:66:fb:71:a1:5f:b1:c5:14:29:22:b8:
9e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:77:26:EA:B0:C9:03:3D:A1:EF:97:0F:BA:1D:99:59:B4:ED:6E:E9
X509v3 Authority Key Identifier:
keyid:CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5f:59:d2:eb:27:96:be:73:0a:2d:90:43:b1:d7:ee:d5:db:
dd:90:07:5d:df:45:25:ec:c7:52:e2:0e:3e:25:14:04:93:4c:
77:d5:77:ca:7d:b0:a0:9d:70:ed:24:c3:3d:6d:94:f4:41:43:
02:5b:0a:7b:b8:18:fd:3d:9e:bb:0c:67:99:b6:ba:98:05:74:
d1:10:eb:da:8d:85:4a:71:bf:a4:87:af:d0:3a:55:15:5e:e0:
c2:9a:89:3f:65:cf:36:40:51:47:77:d7:8b:f7:af:f4:5f:ab:
3e:77:c0:e1:c6:80:74:4c:fc:4c:36:d4:8f:62:2d:ec:c4:6e:
19:cf:7e:fc:23:89:5a:bb:00:61:2d:50:f0:46:ca:c2:e7:7f:
7c:1f:ae:fc:4b:e5:de:31:2d:d3:b7:d0:af:7e:95:c1:ac:82:
be:1f:28:26:2b:cf:3e:4e:05:a2:df:98:bb:44:89:1b:98:90:
56:36:71:81:7f:31:ad:29:3b:58:dd:64:99:85:e1:1e:43:87:
cb:14:f7:63:db:e2:21:2d:e1:8e:8f:c0:77:d3:03:4b:99:00:
c1:18:ce:c9:50:23:15:2f:d4:e9:64:37:7f:be:a2:0d:4c:33:
8a:86:d6:72:a2:1a:36:8c:10:fa:5e:53:32:c7:56:36:ad:8f:
1c:b4:a4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:14:00 2026 by rpki-client