Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
File: ygAblIWVvOJJE_gRr_cePM5F1lY.mft (raw, json)
Hash identifier: D36taQvPqXRQjOG1FS7RwJeILwRYOtlgV5XpoHz7fTU=
Subject key identifier: 53:6F:66:00:5A:48:98:11:54:02:56:E0:0D:56:BB:20:30:5B:7B:5F
Authority key identifier: CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
Certificate issuer: /CN=ca001b948595bce24913f811aff71e3cce45d656
Certificate serial: 019F8EA28E8A4E468C2781F49E713A0B0D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 11:00:45 +0000
Manifest this update: Thu 23 Jul 2026 11:00:45 +0000
Manifest next update: Fri 24 Jul 2026 11:00:45 +0000
Files and hashes: 1: 1-n4qoDeH_AFoIM1FMICyUPczB5Q.asa (hash: D4WVSyy2uZCferDWc9Gow+tNKkPdq4P9+8uq/V2yGyw=)
2: _xsLd4qUBjb6_7VD2WkixJfaVoY.roa (hash: nohQUdIFn7a7lR0P0bYRkbo26wNDU405wKs7TmIgPaA=)
3: ygAblIWVvOJJE_gRr_cePM5F1lY.crl (hash: pSe7dLKx5gRfsy/AwrRd++jDOaQqtnj7f7dfbyow7dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:8e:8a:4e:46:8c:27:81:f4:9e:71:3a:0b:0d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca001b948595bce24913f811aff71e3cce45d656
Validity
Not Before: Jul 23 11:00:45 2026 GMT
Not After : Jul 24 11:00:45 2026 GMT
Subject: CN=536f66005a489811540256e00d56bb20305b7b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:66:e5:84:9d:d3:46:4a:e0:70:75:2e:1a:1d:
7e:58:4a:fe:52:a6:98:4f:8b:43:8e:2b:82:c8:d4:
99:bf:a3:5e:c4:6f:13:29:ed:d7:97:2e:cf:22:2b:
d9:7f:01:b3:42:d9:58:f8:f8:77:3d:6d:e5:58:b3:
fb:dc:bd:86:57:3d:84:ec:18:72:6a:f8:81:2f:71:
2a:99:fe:bf:c2:14:90:2f:f6:22:86:aa:42:98:a0:
f7:cd:23:41:9a:78:4b:17:72:b5:7c:0b:c6:96:f1:
b1:e4:54:d7:dd:f7:f4:87:f4:d6:83:6d:93:d1:a4:
83:95:89:26:23:38:05:43:09:ee:f8:d0:e0:4d:e1:
99:a4:fe:57:92:7e:0b:74:cc:7e:3e:b7:39:86:11:
d3:60:01:46:66:f7:73:5d:a6:e2:8f:76:20:63:e0:
23:5a:83:4d:30:c6:6a:5d:6b:30:65:d3:f8:43:47:
1d:cc:2a:68:d5:12:32:69:bf:2e:77:4a:9a:ea:fd:
37:1d:90:92:fd:a7:bf:e1:36:37:ed:35:7a:88:61:
b2:d7:de:09:4c:b5:01:41:2e:72:05:49:11:0c:42:
05:73:e2:cb:8c:b0:62:e4:da:0e:ae:d8:fc:6b:a3:
34:4f:37:c0:1d:a6:40:ce:0e:f4:97:32:e6:46:96:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6F:66:00:5A:48:98:11:54:02:56:E0:0D:56:BB:20:30:5B:7B:5F
X509v3 Authority Key Identifier:
keyid:CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:69:a0:fa:1a:63:14:47:12:92:6a:c5:6a:29:c5:a5:d0:ad:
f4:1b:fa:11:cf:12:53:6a:bb:e8:3a:af:d6:d0:c1:d0:4b:49:
5e:64:7f:2e:19:87:c8:73:90:55:13:61:fa:be:e5:bb:dd:b8:
ff:f5:0c:fe:a9:ac:ca:db:cb:d8:69:3c:22:77:16:14:76:7c:
5f:b8:77:04:8e:5c:6a:46:b4:35:18:32:d4:73:cc:b3:3d:94:
30:30:58:08:4a:2a:c3:68:aa:56:66:ea:23:29:bf:73:fd:46:
2f:d1:c3:18:77:50:41:5c:e3:1a:4b:16:d2:f0:ce:92:18:0a:
8a:f6:23:f0:63:9f:bf:91:4e:d0:d8:94:b1:fd:dd:7a:c9:f9:
a5:cd:ea:9f:58:e1:9e:9b:c0:8e:4e:0a:3b:5a:cb:18:60:ba:
bf:a9:df:17:5e:bf:3d:1b:73:63:ef:d2:a5:c6:fb:59:b6:20:
50:1d:bd:cd:59:66:e1:d4:cd:b6:4c:44:cb:bc:75:4e:6d:d5:
ce:b9:03:0e:f5:f7:eb:80:30:dc:55:5d:a9:ff:df:4e:57:ad:
b4:72:23:3d:62:4b:4d:ff:91:25:b7:c1:78:55:8f:81:c3:9f:
48:f4:36:5b:54:6c:df:2f:72:b4:ac:36:90:83:89:bf:30:7b:
22:e1:c6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:18 2026 by rpki-client