Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
File: YfTZxfoK42S02B7bxNGCAPAPvH8.mft (raw, json)
Hash identifier: VzIRLiARqZtTX81mCczchn1li+7ZuLocEnl8nooste0=
Subject key identifier: 09:A7:4B:BA:30:10:42:90:E6:EF:87:87:34:D7:BD:78:7F:6A:53:A8
Authority key identifier: 61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
Certificate issuer: /CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Certificate serial: 019F9022A6F4CE7B9E5ED5F84BA91FE3DE15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
Manifest number: 037B
Signing time: Thu 23 Jul 2026 18:00:17 +0000
Manifest this update: Thu 23 Jul 2026 18:00:17 +0000
Manifest next update: Fri 24 Jul 2026 18:00:17 +0000
Files and hashes: 1: YfTZxfoK42S02B7bxNGCAPAPvH8.crl (hash: WiQSo/Ask0ewvteSDr+OK/NFPBN/J1j4dNsnBAm+vTA=)
2: i757eDGPyWXy1WJ59_NsKxP9nBk.roa (hash: aclUO+YpHA3b3E++8LC8TZOgc8p99LqEe7lxYmVbjYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:a6:f4:ce:7b:9e:5e:d5:f8:4b:a9:1f:e3:de:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Validity
Not Before: Jul 23 18:00:17 2026 GMT
Not After : Jul 24 18:00:17 2026 GMT
Subject: CN=09a74bba30104290e6ef878734d7bd787f6a53a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:f8:07:af:60:ce:82:9b:5b:1d:1d:12:03:
fb:1c:e7:26:53:f8:80:6a:03:2b:da:d8:6b:9f:da:
f5:ff:03:b4:70:7d:2d:3c:19:e5:36:40:0b:2f:15:
f6:d9:a9:c2:39:7c:e8:de:f1:14:33:bc:63:23:cb:
8e:67:ae:28:de:90:29:21:fa:f9:62:41:27:4c:1f:
ee:1c:d6:31:99:29:35:d4:39:24:5a:7d:e6:60:4c:
65:1c:f1:0d:32:3c:7b:53:21:51:b4:6d:3e:22:84:
ad:ff:9b:fb:c7:7f:3a:58:b1:83:f2:e0:b3:e1:1e:
61:11:7c:73:d7:97:7d:d6:58:e3:2c:fa:bf:25:8e:
33:1c:5b:cf:4e:83:b9:4a:78:97:94:08:70:1a:3d:
dc:ad:06:c0:3a:b4:ed:b3:84:bf:5e:ed:1e:9c:fb:
bd:0e:21:3a:5f:81:43:fc:cd:6d:c9:4b:05:99:ab:
e0:b6:72:a1:70:53:3a:5a:6e:7c:73:a3:ad:14:4f:
a4:7a:2d:3c:19:e0:1d:c6:91:4a:7c:62:95:bc:11:
21:47:78:28:d2:ea:8d:e9:79:b7:99:5c:16:20:a7:
0f:0c:29:64:45:17:dc:31:d9:1f:f9:a5:71:ff:ca:
f0:67:c5:90:8a:c1:10:70:35:19:aa:3c:cc:e7:1d:
bc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A7:4B:BA:30:10:42:90:E6:EF:87:87:34:D7:BD:78:7F:6A:53:A8
X509v3 Authority Key Identifier:
keyid:61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2a:b7:3e:3d:08:3f:63:2c:16:94:d0:f9:35:5d:91:5d:97:
51:54:f3:42:a1:35:db:04:20:07:1d:be:33:ef:4f:10:7b:a6:
cc:5e:42:8a:d8:11:1d:0e:2c:0c:a5:85:0f:e3:d8:c2:e5:93:
fb:20:d6:9e:5a:c1:fe:88:2a:44:ab:59:64:fc:f1:65:fe:e0:
87:f3:7b:c1:d4:07:bb:6f:22:71:32:21:78:16:19:e3:e7:d5:
07:37:eb:1e:76:de:4d:9f:f3:58:5d:2f:6a:06:2f:42:7c:5d:
2c:15:f5:db:05:c3:0e:a5:09:f5:c1:ad:a1:3a:ca:b7:ea:4a:
bd:6c:d7:a5:96:85:32:62:60:1d:30:54:05:61:61:80:e9:86:
d5:66:7f:5d:61:90:80:bc:32:6d:e5:53:f9:33:1e:ee:f0:68:
b2:88:8e:8e:ed:54:db:f8:11:2c:5a:2e:24:d3:ed:83:50:d6:
07:18:6d:1a:81:5f:ce:70:0b:24:0b:3d:f1:b6:52:4c:f5:9c:
30:dd:4b:44:e3:ed:b6:12:5d:ca:91:5d:d0:44:02:ef:4b:48:
a5:61:0d:7c:63:4a:fc:bf:9e:71:90:db:ac:38:e7:23:79:14:
a8:86:68:52:d8:7a:b9:0a:b9:91:bd:f9:ce:45:93:28:7e:2d:
cf:f7:e6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:10:09 2026 by rpki-client