Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
File: YEBzL9vKpSkA2yRiB1v07xUVlpU.mft (raw, json)
Hash identifier: ixQztCIpHJIMUzQFlAdieWZYWZLttuOUuZglpzaLMog=
Subject key identifier: 3F:97:52:4C:1A:58:97:1D:1A:40:9E:71:6C:F6:12:E5:89:D6:82:C5
Authority key identifier: 60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
Certificate issuer: /CN=6040732fdbcaa52900db2462075bf4ef15159695
Certificate serial: 019F93C8C361D87FCBD37F2FA6EBA7A76E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
Manifest number: 0878
Signing time: Fri 24 Jul 2026 11:00:35 +0000
Manifest this update: Fri 24 Jul 2026 11:00:35 +0000
Manifest next update: Sat 25 Jul 2026 11:00:35 +0000
Files and hashes: 1: PUDvpR_aiNzuJCBLk51UIXHyhYI.roa (hash: Sq53LfucALVr4BVz660/k9ccPDQx9/Vh4c8LAplhshQ=)
2: YEBzL9vKpSkA2yRiB1v07xUVlpU.crl (hash: QMCB4H+QA6b1tKaASpnJ1tvMsdV9+rMdBFELu/GbaQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:c3:61:d8:7f:cb:d3:7f:2f:a6:eb:a7:a7:6e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6040732fdbcaa52900db2462075bf4ef15159695
Validity
Not Before: Jul 24 11:00:35 2026 GMT
Not After : Jul 25 11:00:35 2026 GMT
Subject: CN=3f97524c1a58971d1a409e716cf612e589d682c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7b:6f:14:c5:7d:19:10:1c:d1:1a:75:22:78:
d7:70:c2:75:32:e8:c8:1b:c8:4d:fd:37:f8:a9:46:
d5:03:02:8d:34:98:d4:4e:ca:a0:d5:22:f5:08:10:
7e:16:32:b6:cf:f7:0a:43:6f:37:99:87:9c:80:21:
81:de:7b:a7:9b:73:59:5b:6f:21:a7:e5:47:fd:a2:
0a:30:06:c7:eb:23:8b:81:36:7f:b7:04:bf:bf:20:
7b:86:b1:bc:cd:81:ef:98:e2:d4:66:9d:25:63:c5:
f3:94:ba:9c:43:69:00:25:12:02:2a:35:3f:04:b6:
e0:26:05:27:41:bc:20:20:5d:a8:16:63:7c:7e:0f:
87:70:64:01:b9:a2:90:b3:d6:49:7d:d2:71:45:8c:
5e:04:df:de:d4:2e:09:d1:bd:0b:5e:05:ee:c1:46:
3c:d1:b0:66:b8:7d:50:55:9e:ab:88:f4:6d:cf:97:
f5:be:f9:39:68:12:ab:f9:c2:8b:83:f8:6b:96:75:
cb:b6:20:97:ec:58:db:76:63:40:9d:82:d8:87:93:
8e:e9:62:7a:40:a9:66:7f:39:92:8a:3e:e5:f8:d8:
89:14:21:a6:04:06:41:01:fd:6b:e6:3d:10:05:64:
bf:69:79:8c:f0:b8:20:6b:f1:3d:fb:36:c0:74:4a:
83:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:97:52:4C:1A:58:97:1D:1A:40:9E:71:6C:F6:12:E5:89:D6:82:C5
X509v3 Authority Key Identifier:
keyid:60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:31:23:17:02:91:2d:8d:25:55:e3:7d:f2:3f:7c:47:bd:53:
0b:5e:da:ba:43:a8:2e:20:fc:d4:63:3d:f0:aa:de:60:3f:b9:
e5:8d:7d:2c:e7:12:0c:3b:db:5a:5f:9a:86:15:c8:82:ac:f3:
89:cb:a2:25:05:b1:b1:17:18:a7:d2:82:5b:9b:e9:d5:b5:db:
29:ae:4a:2f:b4:fc:92:89:c3:9e:3c:da:9c:31:48:55:c8:d1:
63:7f:e9:2b:fe:1d:2f:ad:fe:9e:86:e6:ee:f1:85:fe:ff:cf:
9b:25:0e:23:2a:60:00:48:47:3d:ae:f4:38:cb:cd:61:18:87:
f7:9b:77:37:66:cf:6b:f2:89:e5:35:13:f7:da:39:55:22:bc:
f1:74:e0:72:96:fb:d0:d6:31:1b:45:59:51:84:bf:ad:a7:3f:
e5:4f:34:3b:bc:c8:6f:51:6f:4d:fc:83:12:c0:03:7f:f9:1b:
f8:94:e5:29:98:36:b1:7e:ac:00:ed:72:d1:87:73:e2:17:2e:
6e:47:80:96:bd:da:62:fb:fd:51:22:56:c7:56:05:7d:ba:83:
03:12:50:b3:d0:60:33:ba:fb:b6:bc:17:50:8d:bf:18:83:1c:
7f:42:41:da:c9:cd:df:f7:f8:ba:0b:0a:63:23:d2:d6:14:ab:
31:34:3f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:07 2026 by rpki-client