Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier: P5YArqzYuHyU47wRMIFt/YwnCRpqSnDvCWBy16TAEao=
Subject key identifier: 54:BE:39:4C:09:DB:49:7F:8C:D0:C8:16:86:7E:85:08:D7:CF:36:5B
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial: 019F95B7744FDCBCAA3A4C1707FC04F43E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number: 0E17
Signing time: Fri 24 Jul 2026 20:00:55 +0000
Manifest this update: Fri 24 Jul 2026 20:00:55 +0000
Manifest next update: Sat 25 Jul 2026 20:00:55 +0000
Files and hashes: 1: wUbhJ1Q-nlV3uEvjLuk77UUB7Gc.roa (hash: R+RnalKmquQEDqC7KdcNQz1uImcCiR+mgzNPx6OERvI=)
2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: D+4ReJUXpNHCAxgODoviA3iSmvAHpv3s5py876Cxwls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:74:4f:dc:bc:aa:3a:4c:17:07:fc:04:f4:3e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Validity
Not Before: Jul 24 20:00:55 2026 GMT
Not After : Jul 25 20:00:55 2026 GMT
Subject: CN=54be394c09db497f8cd0c816867e8508d7cf365b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:b7:bc:cf:ae:30:33:21:6d:b8:55:8c:b1:
8c:f7:4d:a9:95:c5:00:dd:dd:af:c7:03:a7:7a:37:
52:82:57:ca:9d:63:61:c2:fa:41:be:c7:c8:42:12:
24:d6:4c:99:20:85:11:88:90:16:79:b6:b4:4e:31:
96:d0:8e:21:86:38:f8:2c:de:2d:dd:63:11:bb:73:
ab:16:6c:68:5f:5d:ce:87:8f:5c:4a:fe:bb:99:73:
07:73:33:68:ec:37:9b:8e:e7:54:88:36:99:ac:2b:
fe:ff:39:46:8c:a6:54:bd:73:36:11:12:53:34:1a:
97:ee:9f:9c:32:55:9a:9f:f6:5d:d6:27:80:4e:cc:
f4:c5:d5:b5:a0:28:20:2f:80:b0:87:79:09:c8:f6:
f4:76:25:e4:b0:aa:3f:c9:e3:9a:7f:8c:cd:d7:d6:
1b:50:b1:91:7e:d9:45:1a:fd:28:34:77:31:ca:f9:
40:f8:3e:15:78:57:05:83:bc:3a:68:1e:03:81:4a:
a7:f2:7d:6c:13:d1:3a:76:db:74:84:1a:8b:47:3a:
51:17:48:f7:a2:3b:0f:03:85:6b:fb:a0:c9:f7:cd:
41:72:62:fc:4c:ac:fb:6b:d0:c2:1e:f0:74:af:35:
cd:a6:44:76:2d:d7:2c:9b:d2:f4:f1:00:45:83:6e:
ae:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BE:39:4C:09:DB:49:7F:8C:D0:C8:16:86:7E:85:08:D7:CF:36:5B
X509v3 Authority Key Identifier:
keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ae:ef:d6:fe:03:8b:18:03:25:d9:79:f3:0a:38:70:78:70:
6c:15:85:9a:3b:3a:75:c5:89:bd:ca:57:dc:3a:f2:e8:3c:96:
b8:1d:3f:07:0e:80:f4:fe:7d:a8:d1:67:cb:29:9a:9c:05:04:
be:19:12:34:ce:30:13:09:61:e6:66:c3:e4:8f:35:66:88:e6:
cc:b4:af:47:3a:97:6d:2c:d9:c6:74:56:c7:80:c3:03:00:d3:
9f:e9:c6:a9:19:a5:eb:21:f5:aa:bd:ac:bc:fe:6e:be:ad:26:
7b:05:52:a3:ef:64:4c:45:6b:25:54:81:b4:60:79:98:d3:58:
08:15:0c:0b:4f:e4:0b:cd:94:e4:f2:94:5f:2b:e5:c3:d8:de:
4c:3e:27:b5:ef:d8:21:ed:65:8c:aa:71:db:12:9d:45:77:e1:
11:49:e9:ca:64:ee:f8:88:57:68:0e:84:5e:db:36:fd:af:c7:
23:03:1e:68:98:10:df:47:75:33:3b:4a:37:e2:f3:ca:4e:19:
99:38:fe:0b:9b:8e:2e:db:09:21:0e:36:12:f1:96:33:a5:9b:
f9:21:a6:72:bc:2a:31:0d:88:b9:3e:9e:b5:90:3d:7e:ac:a6:
26:ff:62:03:4b:8b:e5:db:63:b1:29:b8:fc:0d:da:50:06:2d:
2a:6b:b7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:16:37 2026 by rpki-client