Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
File: yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft (raw, json)
Hash identifier: HQ6mHznGzNVyXREsK8hBbaLee7Wbg1NJwQmVPlNs+P0=
Subject key identifier: 47:9F:3A:5A:DE:C7:78:05:6B:4B:03:F1:83:B9:2D:D5:A6:2A:EA:F1
Authority key identifier: CA:4E:BD:61:51:F1:BF:38:DC:57:A3:A2:4D:BB:5E:DC:5A:6B:F9:67
Certificate issuer: /CN=ca4ebd6151f1bf38dc57a3a24dbb5edc5a6bf967
Certificate serial: 019F9549225A436BC43F5104F10043B9C220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:25 +0000
Manifest this update: Fri 24 Jul 2026 18:00:25 +0000
Manifest next update: Sat 25 Jul 2026 18:00:25 +0000
Files and hashes: 1: V6bKVS9T3ePUCH9UZ-VTrpdXmtg.roa (hash: k7QFZGHM/ZMsVcAH78Z7/y2s4KVJ6ki/nf3Wx24haNo=)
2: bdlGew9HpYI1DB2bRx2omQSvv3k.roa (hash: jVc7jDsAgJp6NFCHEUd8hmbhRfzZi/N70RVFxzIvxJU=)
3: yk69YVHxvzjcV6OiTbte3Fpr-Wc.crl (hash: wLPqQhEneH7cwY3nZwgYqQLsyuk/GO/K1xPEVMheuaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:22:5a:43:6b:c4:3f:51:04:f1:00:43:b9:c2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca4ebd6151f1bf38dc57a3a24dbb5edc5a6bf967
Validity
Not Before: Jul 24 18:00:25 2026 GMT
Not After : Jul 25 18:00:25 2026 GMT
Subject: CN=479f3a5adec778056b4b03f183b92dd5a62aeaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:c6:9a:c9:ac:5b:ca:3e:ac:d5:01:89:3c:
0b:b6:96:cf:00:e2:44:3b:f1:3c:07:54:e1:ab:f1:
fa:f3:fe:b5:2f:9a:5b:ac:c4:3b:08:e1:c0:de:4f:
a8:54:0f:51:a4:a2:da:86:ed:54:96:eb:67:cf:df:
29:3c:12:c4:91:e3:c2:f7:be:92:20:ad:dd:ce:eb:
c1:52:96:dd:b0:c1:0e:8f:dd:84:66:c2:ad:1d:0c:
a9:98:4d:8b:86:4f:ee:f9:a4:ed:27:3d:91:79:a0:
b8:6c:3d:77:e8:c4:36:58:0a:bd:5b:28:a2:c9:ed:
16:5a:92:a9:b9:7d:db:c1:c8:f0:30:73:eb:4b:7f:
bf:0b:60:a4:96:e8:82:c1:81:12:3c:7b:6d:40:c7:
74:b8:b1:d7:00:85:e2:5e:b8:e8:5e:72:da:f6:c3:
da:6c:03:d2:6f:31:ef:0e:4f:6b:4d:50:d6:6a:96:
33:b7:6c:ce:f7:ee:fe:15:f8:90:55:5b:c7:8a:81:
35:f6:9c:9c:65:4e:65:fb:3f:67:64:64:9d:24:78:
17:dc:6a:2e:a8:5c:cc:5d:8e:44:f3:9b:41:28:87:
c5:21:3d:65:91:ad:a7:99:2e:41:48:f3:4b:6c:a5:
f3:d5:fa:2a:78:4d:9b:4e:72:4e:5b:53:7f:b8:7f:
2e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9F:3A:5A:DE:C7:78:05:6B:4B:03:F1:83:B9:2D:D5:A6:2A:EA:F1
X509v3 Authority Key Identifier:
keyid:CA:4E:BD:61:51:F1:BF:38:DC:57:A3:A2:4D:BB:5E:DC:5A:6B:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a1:a4:bd:2d:04:73:20:29:64:a5:59:5a:09:10:fe:e0:38:
5e:59:4f:30:04:95:62:26:b1:cf:a7:b4:dc:37:22:41:a7:a5:
00:56:d6:10:17:e0:7b:8b:b0:63:46:30:ac:dc:84:e3:7c:8f:
f7:05:af:a3:c7:65:5f:5a:0e:44:ae:ed:04:63:f4:d8:ab:7a:
85:2a:d0:8c:6c:5d:16:6d:ea:96:b4:6d:a4:0c:1e:b8:e0:61:
eb:e2:50:0d:c9:23:b5:98:a8:c0:c7:1a:86:8c:42:a4:f9:a5:
7d:90:ca:aa:44:22:18:74:5d:cf:2c:57:bb:d7:56:22:9d:9a:
13:86:0d:6a:0a:3c:fe:c6:60:c3:02:01:67:1e:45:f0:48:c9:
67:06:09:e8:9a:81:9e:17:51:43:2f:7d:bf:8b:3f:4f:c8:21:
30:25:b7:37:d6:38:71:14:09:40:35:91:ff:3c:54:4c:49:fc:
a9:f2:7b:20:d0:73:57:8f:15:d2:c2:57:a2:3d:2a:30:23:b2:
d1:16:8b:d6:c9:86:17:68:31:37:0f:8b:a6:6d:27:28:30:f9:
f2:d8:33:de:ce:c7:f1:41:51:b6:92:44:e7:fa:44:eb:bf:e5:
d7:e2:fe:54:94:33:b0:3e:99:9a:70:2c:8e:3f:a6:2a:21:97:
3a:0c:46:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:45:40 2026 by rpki-client