Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/Ye5EyAZBPUjE4kR6kRYK6lIvADA.mft
File: Ye5EyAZBPUjE4kR6kRYK6lIvADA.mft (raw, json)
Hash identifier: EYlCFX+dYk6cmtJH4rSAl4piTxyrErzqds3k9eseRpU=
Subject key identifier: 19:D6:5A:3E:26:04:77:09:1B:06:04:26:41:34:7B:1D:0F:71:BC:67
Authority key identifier: 61:EE:44:C8:06:41:3D:48:C4:E2:44:7A:91:16:0A:EA:52:2F:00:30
Certificate issuer: /CN=61ee44c806413d48c4e2447a91160aea522f0030
Certificate serial: 019F95496EAD64245A9F1FADEEF14231D441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ye5EyAZBPUjE4kR6kRYK6lIvADA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/Ye5EyAZBPUjE4kR6kRYK6lIvADA.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:45 +0000
Manifest this update: Fri 24 Jul 2026 18:00:45 +0000
Manifest next update: Sat 25 Jul 2026 18:00:45 +0000
Files and hashes: 1: 6fU5iE_9HhMzleiywml5eVrADVU.roa (hash: YfRMgT7PrvzdGAN/VxPDhHH8ny59LXaq97JWdJrBKuw=)
2: Ye5EyAZBPUjE4kR6kRYK6lIvADA.crl (hash: 9sk2LOZ4Yl6r6W4nGzkYWzxM00FF5hRCKTspzHK838g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/Ye5EyAZBPUjE4kR6kRYK6lIvADA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/Ye5EyAZBPUjE4kR6kRYK6lIvADA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ye5EyAZBPUjE4kR6kRYK6lIvADA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:6e:ad:64:24:5a:9f:1f:ad:ee:f1:42:31:d4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ee44c806413d48c4e2447a91160aea522f0030
Validity
Not Before: Jul 24 18:00:45 2026 GMT
Not After : Jul 25 18:00:45 2026 GMT
Subject: CN=19d65a3e260477091b06042641347b1d0f71bc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:ef:92:0e:31:6b:2b:0d:aa:ed:4d:94:06:
ac:1c:c2:38:c5:52:40:a4:a7:71:1c:b9:95:db:02:
e3:ab:56:9a:51:90:32:ab:d7:2b:d3:c2:76:b6:ac:
f0:89:b0:f2:cb:58:31:16:3c:fa:3e:e3:f0:b3:44:
b7:3e:3c:4b:2c:f2:27:a4:54:ca:89:2a:2e:1d:ba:
56:0f:9c:f9:1b:c0:9f:98:2b:a2:f9:0c:b7:05:ef:
22:52:88:27:79:ed:f0:c5:02:c8:d1:7e:d5:d2:03:
17:a2:0f:8c:9e:c4:64:1f:f3:dc:37:7b:e9:b5:18:
1b:15:f2:92:52:72:ca:77:68:66:e3:00:69:99:88:
a4:7f:87:77:3a:59:c0:20:40:f5:ae:92:3d:04:03:
7b:ae:79:0b:bb:ae:60:a3:cc:71:e1:b2:57:85:fd:
2e:b0:cd:17:f9:ca:14:de:63:5e:e6:8e:08:91:09:
4b:2e:31:1f:8b:c0:dc:77:28:f2:b8:62:fa:27:f2:
3d:44:7b:b1:01:83:3f:72:57:cf:55:ce:ef:eb:58:
d5:c4:fd:66:d0:82:30:a9:1f:f1:13:23:5a:ec:0a:
ef:8d:53:72:27:89:3e:fb:ca:c0:34:53:a1:bf:d1:
10:e8:9d:d4:3b:35:42:b2:e6:56:cb:6e:b5:47:86:
8d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D6:5A:3E:26:04:77:09:1B:06:04:26:41:34:7B:1D:0F:71:BC:67
X509v3 Authority Key Identifier:
keyid:61:EE:44:C8:06:41:3D:48:C4:E2:44:7A:91:16:0A:EA:52:2F:00:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ye5EyAZBPUjE4kR6kRYK6lIvADA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/Ye5EyAZBPUjE4kR6kRYK6lIvADA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/Ye5EyAZBPUjE4kR6kRYK6lIvADA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d7:f6:c0:23:05:12:56:00:32:17:73:10:16:b6:bc:0c:13:
4c:8f:f1:f2:70:25:e8:ad:c6:a0:93:b4:56:2d:ab:57:8e:9f:
2c:ca:26:df:08:2b:a9:20:26:da:b7:00:67:8b:ff:c1:9c:e1:
1c:4d:f6:41:4d:74:02:a2:5f:c5:a0:c2:d5:c0:e6:86:d1:8b:
ca:31:03:4a:a5:a4:3e:41:91:3c:6e:53:ba:ab:0b:85:cc:91:
15:3e:7e:f9:45:25:ea:ed:fc:93:02:b2:06:1d:41:7b:01:11:
e9:af:9f:5d:6b:84:49:30:66:b9:9f:8f:28:19:35:f0:14:b0:
52:1c:6d:27:c4:ef:de:18:73:08:4f:c8:8c:04:ed:4a:7b:32:
7d:e4:10:91:c0:0b:52:ea:04:dd:76:3d:9b:92:5a:3d:98:f4:
b9:48:b4:db:9c:69:5d:d8:de:d1:7e:6f:32:a0:6a:b2:da:33:
2f:53:83:1b:4f:97:66:bf:8f:4e:0a:17:55:cc:8c:b8:01:89:
56:a3:bb:b6:9f:d4:14:e3:f9:c9:b5:4c:b2:4d:94:58:8a:56:
62:13:d6:c5:a9:a9:9d:5b:c4:4c:df:af:9f:c3:a9:6a:7f:91:
25:05:66:b1:24:dd:ee:72:c5:3f:a1:06:9b:e9:2c:46:6e:f1:
8c:28:8c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:25:54 2026 by rpki-client