Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
File: YAluN0CSzDAL0LsGxBZAky7Pi0k.mft (raw, json)
Hash identifier: BONytRx8LK6UmbgM1QXzPq4iB902e7wjGaYv5ntkggQ=
Subject key identifier: C9:2D:48:23:BD:D5:CA:F8:2A:79:69:1B:CE:97:73:4B:8B:E6:88:0F
Authority key identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
Certificate issuer: /CN=60096e374092cc300bd0bb06c41640932ecf8b49
Certificate serial: 019F924882A66BEE7FBA5FF27BB21E437506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 04:00:53 +0000
Manifest this update: Fri 24 Jul 2026 04:00:53 +0000
Manifest next update: Sat 25 Jul 2026 04:00:53 +0000
Files and hashes: 1: 09iLJ-Mwt-oGGlQePzLwscf0h0A.roa (hash: q4J6TqoqIEXUXDGYbj1FaACI7n8SQOOCFeV3Q5IYWCQ=)
2: YAluN0CSzDAL0LsGxBZAky7Pi0k.crl (hash: 0mR/5rHHtq8iot5vpunny3ulMaoME4ioxdTqwoOtNZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:82:a6:6b:ee:7f:ba:5f:f2:7b:b2:1e:43:75:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60096e374092cc300bd0bb06c41640932ecf8b49
Validity
Not Before: Jul 24 04:00:53 2026 GMT
Not After : Jul 25 04:00:53 2026 GMT
Subject: CN=c92d4823bdd5caf82a79691bce97734b8be6880f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:fc:f2:45:ea:ea:40:a9:87:92:ec:45:39:
2d:3d:11:e0:98:5f:f2:de:4e:5c:90:65:bc:7e:b5:
f5:b4:4e:c8:55:a7:af:74:90:2c:42:f6:b1:b4:c3:
e5:38:78:33:fa:58:fe:03:3c:73:0b:e8:12:fe:2a:
72:fd:a6:93:9e:b4:d5:65:2b:3d:50:45:f9:39:e9:
58:3e:85:ac:15:90:6a:56:54:42:52:ca:4b:12:8c:
17:e3:26:0a:f1:c6:23:6d:36:2c:ad:8e:98:ed:28:
86:72:2c:41:0f:a8:05:7f:01:47:ec:ff:97:68:f2:
14:34:73:bc:70:dd:40:ca:dd:45:82:f5:5c:94:8d:
a1:e7:5f:bd:59:55:64:d5:40:70:ff:2b:e7:7c:ad:
0f:3d:fc:9d:e5:16:ca:ba:9b:71:eb:c5:25:b5:8e:
5a:14:b4:f8:c2:19:35:14:c4:d6:6b:86:86:9c:e1:
3b:d9:03:a4:cb:9c:2c:4d:79:ac:51:67:90:f0:cf:
b0:8e:0e:0b:64:53:6b:b1:18:2e:e8:8f:78:18:d0:
42:ba:17:04:3a:84:c0:67:be:fe:ea:29:06:ae:4e:
74:ce:6b:46:08:60:c5:f7:95:04:06:6c:95:25:8a:
8e:61:46:ac:71:00:18:21:c4:c2:6a:6b:9e:eb:29:
39:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2D:48:23:BD:D5:CA:F8:2A:79:69:1B:CE:97:73:4B:8B:E6:88:0F
X509v3 Authority Key Identifier:
keyid:60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:90:09:2f:77:53:85:21:6d:76:2b:94:96:60:e4:27:e0:d8:
63:12:84:60:96:ce:71:ac:41:f0:fb:e6:e1:b0:cd:86:36:a8:
8a:1c:b1:52:a9:ca:d4:df:7b:af:a1:ff:0e:84:bf:3c:03:d9:
5e:41:24:29:18:5b:f9:eb:8e:98:e7:bb:fd:5d:ac:14:04:df:
3d:6c:04:63:80:fb:82:a6:c8:61:84:d6:0e:bf:c3:78:c4:e2:
05:3b:c1:0d:b4:4a:dc:c6:8f:e6:36:0c:c7:b9:16:78:0d:a3:
3d:ed:dc:6a:81:82:f4:03:4e:18:c9:09:bf:15:f0:96:2f:0a:
2b:34:c1:54:89:fc:ec:32:7b:69:06:d4:9c:4a:6c:69:9d:72:
6c:1f:8b:11:52:08:14:10:da:8c:84:c4:bb:d9:7a:24:22:ca:
d4:ca:55:72:ee:b9:65:c7:c4:18:30:16:a7:ed:b0:ab:55:31:
c1:19:df:f3:31:66:f3:12:90:b1:71:45:85:49:10:ca:b2:79:
e2:bc:46:93:7a:a1:26:ec:e0:a9:d9:4e:c2:ba:ea:db:9b:90:
5d:44:07:8d:c4:b1:01:7c:e5:23:39:04:7f:2c:81:6a:a7:32:
0c:64:d4:ba:31:79:1c:b0:72:11:a8:43:5f:92:78:73:b2:19:
52:89:d0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:32:48 2026 by rpki-client