Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
File: YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json)
Hash identifier: BUPp//sLergKtMF/Rn6yi+s9D0WuCDyRtALFttcA4r0=
Subject key identifier: B2:50:DD:97:41:2F:C4:44:DF:44:74:E6:28:A8:CB:5D:25:1B:6A:8F
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 019F90FF8853AEEB617C73A4D00D7B941A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
Manifest number: 142D
Signing time: Thu 23 Jul 2026 22:01:33 +0000
Manifest this update: Thu 23 Jul 2026 22:01:33 +0000
Manifest next update: Fri 24 Jul 2026 22:01:33 +0000
Files and hashes: 1: OmKYv-eBNTYluusfNr4dZe7zC_c.roa (hash: w1Hd7iJpZYHQEo80iQwx2qNAI2ou5wncgHu/GLia0Tg=)
2: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: dg1IfCCu/xu3a1jB/sl0smbCEPPSk9OxmzqDSM7qXBo=)
3: l-QyBKePUGvgwvLYQ39xVIrG-Xc.roa (hash: BEyQW94VrHgV1DUmSXCji9F0XD6RgtTzxouMSqJBF3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:88:53:ae:eb:61:7c:73:a4:d0:0d:7b:94:1a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Jul 23 22:01:33 2026 GMT
Not After : Jul 24 22:01:33 2026 GMT
Subject: CN=b250dd97412fc444df4474e628a8cb5d251b6a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:18:5e:79:08:01:e6:76:99:8b:a7:fa:f8:
f3:c6:6d:67:fa:a3:63:17:1c:3e:6d:56:d2:09:9b:
fc:1a:38:f4:01:8a:25:6e:7e:73:82:4b:a1:d2:a8:
cd:48:d2:26:31:d2:7a:58:30:dc:15:e9:bc:56:80:
9c:84:91:04:5b:7a:2e:fd:9a:01:65:c5:1c:19:49:
2f:c5:f4:34:16:5d:d1:04:0d:9d:af:29:a0:01:86:
d8:d1:8e:f7:31:2b:ae:ae:d0:29:7e:bd:ff:bb:9f:
b7:d3:66:46:20:1a:ad:9c:4a:81:a9:49:b9:da:51:
f9:1a:57:4a:af:56:9f:98:ff:fe:59:ab:52:e9:56:
64:4e:af:35:9a:08:83:90:bb:bd:d1:d4:b2:79:58:
e5:e7:e1:9b:a8:d0:97:a1:56:43:33:b2:59:3d:cc:
55:85:65:85:d0:4d:1d:f2:98:4f:0e:76:27:8a:dc:
be:9a:a7:bc:ef:81:e4:c5:3e:d4:86:02:a2:df:0e:
a7:55:e2:93:74:54:6a:23:0b:27:dc:38:25:8e:0f:
1e:4c:31:d8:ed:47:74:4b:e6:c2:f2:ca:34:9d:e7:
31:48:ee:63:7d:77:96:9e:08:f6:e6:33:ea:48:77:
a5:d1:7d:32:5a:f9:93:00:ca:d5:05:6a:3e:5e:cb:
c4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:50:DD:97:41:2F:C4:44:DF:44:74:E6:28:A8:CB:5D:25:1B:6A:8F
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:75:78:b7:df:df:03:ea:68:67:51:58:5b:9a:2c:90:3a:29:
49:f5:65:ff:57:4c:70:9b:98:38:08:82:cd:a9:ec:33:5b:c3:
83:eb:71:e4:5a:2d:32:92:47:90:ab:6e:fb:61:0b:53:e4:33:
a3:3a:d2:1f:bd:df:a1:ac:cf:58:b5:c8:45:c7:bf:05:bb:9e:
42:14:f5:83:18:2f:cc:aa:92:af:47:91:30:1f:13:81:cd:24:
22:97:55:7e:52:c3:49:2b:0c:0e:0d:4e:88:8c:11:f0:7f:ac:
a2:4d:ab:2b:a6:46:cb:74:b1:28:42:a8:1a:ff:c4:17:75:c2:
18:22:fa:90:da:07:69:88:18:bb:4c:e6:d3:8b:42:72:0d:7d:
e6:ef:cf:af:dc:9d:97:ba:e3:7d:c2:f9:d3:0a:76:42:d6:21:
7a:98:e3:b4:e4:0c:3a:6c:09:25:6e:09:cf:35:9a:fe:38:15:
65:ca:73:69:09:4b:13:06:1a:8b:5f:80:b9:0d:fa:51:51:56:
a5:5d:7b:09:01:83:51:9d:97:5c:68:93:75:90:62:ee:12:83:
b8:e7:55:d6:49:58:86:b4:52:7d:30:82:0e:d1:ea:0f:88:47:
b2:a8:b7:0c:55:92:79:da:1a:b0:3b:58:26:c0:ca:c2:80:3c:
0c:d9:be:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:22:27 2026 by rpki-client