Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
File: yhx1cVluREqjI3HLq3JNRtPDxSw.mft (raw, json)
Hash identifier: g6Qq5Dg/dA2p8iMuf23a8U2km11k3WlvewBifGkiwjA=
Subject key identifier: 23:E1:C8:56:FD:4E:71:48:F1:75:C8:88:C1:FB:1D:E3:F3:93:3C:D2
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial: 019F91A36B4F519ADDFC856B4B23C30BD399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
Manifest number: 0CC3
Signing time: Fri 24 Jul 2026 01:00:33 +0000
Manifest this update: Fri 24 Jul 2026 01:00:33 +0000
Manifest next update: Sat 25 Jul 2026 01:00:33 +0000
Files and hashes: 1: 714jAkRfYNSFRWD00Ttnn_8kshU.roa (hash: Qwe2Q2afQjCXeJnI6CuGzTdKEtcUpiC/k2FP9kdrGD4=)
2: 8dEAYi52_22zUX_SiXzKUWNxBaw.roa (hash: xFQLvjgZzeqcV2os4NMEXXqLMmXWf96ISePDLbOs/n4=)
3: AMWGdVJy6j1Lous_3W0Dp8ga5BI.roa (hash: YHKQlEMTRKZ44Ezw9Vkv/ST4kDSY/aZ7S8Y4/+4q0FA=)
4: FzsVJPIrsEyHqExyGhlWZtGTTjY.roa (hash: +Pd3PneLFWSwpSYwbblYDY0Nhc65YzGQwcvoKLnitm4=)
5: L4LAQO4VcvKCv24QKmqbiEkYgfw.roa (hash: 1I8k1k9yQTnnGWoQ4DNv1fL4gSGoExl590fVU6xPg8Y=)
6: yhx1cVluREqjI3HLq3JNRtPDxSw.crl (hash: IUD43QzR8t3eipZLAQB68W0x58CXos4g5HdOy210d7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:6b:4f:51:9a:dd:fc:85:6b:4b:23:c3:0b:d3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Validity
Not Before: Jul 24 01:00:33 2026 GMT
Not After : Jul 25 01:00:33 2026 GMT
Subject: CN=23e1c856fd4e7148f175c888c1fb1de3f3933cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c3:8c:ac:44:62:ee:37:68:a0:5e:02:c2:0a:
26:75:3d:c9:bb:ab:0b:a6:14:83:77:f2:89:d4:2b:
ad:91:bf:47:26:4c:05:f5:33:cd:3c:e1:ae:7a:d0:
7f:c2:1c:d2:e6:ce:a4:91:74:2b:3e:ef:40:11:89:
38:05:de:ea:b6:cd:34:57:b6:9b:39:11:31:b7:f8:
bc:a6:08:7c:59:a7:92:b0:fa:d7:08:be:f7:e5:b0:
25:12:44:13:8a:72:67:85:d1:d9:94:14:62:47:4b:
22:53:15:17:51:5c:77:f3:d7:47:74:1c:21:20:44:
7e:0f:34:4b:07:a4:62:aa:fa:89:4e:c0:d9:6a:d5:
87:9f:85:bc:cc:91:f9:24:2d:98:f1:4b:6f:c5:9d:
05:ce:14:ba:9d:0d:9b:e4:1f:89:31:42:e0:d1:c7:
95:37:73:fb:4e:f0:03:fa:98:cf:4b:6a:e8:43:d3:
b1:74:16:7d:ef:f4:d7:de:b6:47:7b:70:15:b9:76:
bf:70:eb:50:38:5a:73:5b:82:14:4e:60:14:0c:bc:
6a:cc:6d:6b:5e:8c:ae:fa:6b:82:e5:8c:1d:39:4b:
d2:9a:aa:2e:d9:a7:ad:68:e9:eb:39:ba:81:30:b0:
5d:c6:94:08:63:6b:f0:23:84:09:d5:77:4e:2b:04:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E1:C8:56:FD:4E:71:48:F1:75:C8:88:C1:FB:1D:E3:F3:93:3C:D2
X509v3 Authority Key Identifier:
keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:da:31:ba:df:bb:75:c2:80:85:b7:df:70:6c:2b:34:d3:86:
c8:73:fe:7d:b3:a2:25:3a:ab:c2:2f:f4:d5:8c:a8:0e:c2:e5:
5f:94:d4:4e:47:13:73:66:35:f5:43:ee:94:f3:cb:9a:70:67:
9d:8c:98:c8:49:81:f1:b3:f4:fa:f0:f7:8d:e4:b8:a3:c8:ba:
99:10:e2:b4:68:b1:13:1b:b0:b0:41:e5:2e:c8:10:c2:d1:64:
f2:3f:2d:28:45:8f:0a:8e:e7:70:b8:c7:36:f7:9d:84:ff:1d:
b5:8c:4e:04:90:a9:d3:0b:ac:65:59:49:18:97:9b:13:ad:93:
a9:db:84:a5:93:61:dc:3b:5d:03:7a:0b:7c:95:90:2d:2a:06:
c5:50:9d:cf:7f:0e:2c:8e:bd:eb:68:a1:e1:19:fe:85:08:94:
e7:6d:74:0d:8d:a9:02:15:0d:b0:e6:44:d6:dd:a8:ea:8f:4c:
16:46:15:22:f8:2c:cd:57:dd:ad:1a:fa:90:c0:42:f9:bf:6e:
1b:96:64:a7:e3:10:59:fd:81:71:d8:5f:00:1b:68:fb:d9:40:
15:91:47:c9:ee:72:c1:c1:77:7a:f6:7f:e5:9b:6e:53:0a:a7:
e6:52:99:ca:36:eb:50:b9:5e:4a:d5:a8:ff:4c:96:a2:4f:80:
dd:fe:f9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:11:17 2026 by rpki-client