Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
File: yAkUktLOioDAh7h2-R1qPCm-eiU.mft (raw, json)
Hash identifier: fBWSDVK7/v/YmqxVWPNIRWRd7bEe2My4RRYlaVNRb/Q=
Subject key identifier: 32:E5:FA:C2:71:1D:3C:7F:00:EC:F0:47:7E:44:37:95:4E:09:F1:C1
Authority key identifier: C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
Certificate issuer: /CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Certificate serial: 019F93C88CE5095B7AA2C0616D5B5FC93AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
Manifest number: 0FC1
Signing time: Fri 24 Jul 2026 11:00:21 +0000
Manifest this update: Fri 24 Jul 2026 11:00:21 +0000
Manifest next update: Sat 25 Jul 2026 11:00:21 +0000
Files and hashes: 1: 8dsL3d0zKteGNgXAMQBV42lOios.roa (hash: Pev55fmq4J10EVCjxW4G+QGn2d3P5hztkv0FQEW8Zn0=)
2: yAkUktLOioDAh7h2-R1qPCm-eiU.crl (hash: EmmB3COwd+qLRHjYU+ieXVFYWkMFtvfapxDD5+1HarQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:8c:e5:09:5b:7a:a2:c0:61:6d:5b:5f:c9:3a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Validity
Not Before: Jul 24 11:00:21 2026 GMT
Not After : Jul 25 11:00:21 2026 GMT
Subject: CN=32e5fac2711d3c7f00ecf0477e4437954e09f1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:d1:78:3e:78:65:4b:f8:ec:46:dd:3f:e1:
77:f3:db:ad:6e:2f:6f:f2:57:7c:de:7e:6c:ba:7e:
8f:6b:24:82:bb:53:49:bf:13:88:e5:b3:cf:a0:a7:
dc:2b:5f:7e:bf:92:cd:78:e2:d2:31:39:31:46:ec:
e6:91:90:13:c4:0c:2d:d3:38:da:13:39:00:ea:77:
10:07:a8:5c:e8:17:4e:d1:8b:50:a8:d6:61:77:87:
5c:40:0e:cd:99:98:da:fa:d3:e8:44:a7:9c:75:53:
bb:0c:76:08:3d:68:9c:e5:10:88:5e:3a:69:be:e0:
9a:4e:4f:26:0e:66:45:58:9f:e3:0f:0e:d1:72:86:
b7:ec:9f:1e:43:98:07:c1:33:54:7f:b0:b1:1c:2b:
2b:56:ce:2a:8b:57:6c:23:18:21:99:93:c1:b2:eb:
09:03:32:9e:82:c6:52:fd:9e:6c:8f:78:72:5f:de:
1c:e0:dc:b3:e8:7f:fe:1f:f2:8b:05:37:8f:a9:80:
7f:b4:2c:62:fb:fd:50:a4:a4:e6:c8:1e:da:14:bf:
57:35:31:81:89:1a:c1:47:7f:51:87:14:bd:8e:bb:
4d:52:5e:5f:fc:38:49:fe:09:82:71:45:20:14:6c:
37:51:8a:32:c1:1f:e2:e1:99:db:e5:c2:08:4b:9e:
ca:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E5:FA:C2:71:1D:3C:7F:00:EC:F0:47:7E:44:37:95:4E:09:F1:C1
X509v3 Authority Key Identifier:
keyid:C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:51:c7:32:d2:b7:fe:bf:99:60:a2:95:ef:ac:20:73:d2:64:
46:a1:ad:e6:88:b1:6f:d6:29:62:22:10:ae:0f:a5:2a:cb:cc:
00:1f:7f:37:ae:bb:68:ba:e3:2f:38:7b:8d:05:25:34:c8:ac:
28:ec:c5:16:49:86:94:14:a2:2a:5d:1e:ce:6a:ba:79:5a:91:
e9:3d:48:60:06:d1:70:3b:7a:3d:ef:56:16:22:3b:0c:d3:d4:
e2:36:f3:2a:6d:8e:1e:c8:2c:1d:a0:ff:1a:0f:9d:3e:bb:00:
9b:cb:b3:df:a1:3a:12:fb:13:be:36:b7:50:fb:ac:31:e9:b3:
e7:af:1d:99:f6:0c:57:12:66:42:30:5c:84:32:f4:8f:0c:06:
b7:d4:84:c3:82:0f:bb:22:91:9a:67:d9:fc:d1:17:6a:7f:c2:
b0:42:00:7a:92:27:a6:5d:5d:82:0e:6d:b1:f2:15:ab:6e:9c:
72:47:59:22:75:55:3e:aa:34:0c:0f:55:65:d8:44:4c:10:c7:
41:1b:ac:42:37:79:00:78:35:76:44:78:a1:88:cf:80:86:6e:
11:ff:a6:35:61:f0:9f:e4:b4:89:6d:b6:a1:23:22:59:4c:1e:
c6:9a:e9:36:fc:38:33:10:c2:2e:6c:f9:86:5b:eb:78:fd:1f:
5b:79:91:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:04:07 2026 by rpki-client