Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.mft
File: yFKOFLm6mFBWKUjNeshNKytqNx0.mft (raw, json)
Hash identifier: zEQ/boFR9YrzTU6oynfQnqzY0GYfClpiIi6iirKQ0PI=
Subject key identifier: 5A:74:25:0A:49:93:99:D6:F2:32:09:1C:72:F4:92:96:44:09:D5:B8
Authority key identifier: C8:52:8E:14:B9:BA:98:50:56:29:48:CD:7A:C8:4D:2B:2B:6A:37:1D
Certificate issuer: /CN=c8528e14b9ba9850562948cd7ac84d2b2b6a371d
Certificate serial: 019F935BF0877601EC4B6AE40173A95E6959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:43 +0000
Manifest this update: Fri 24 Jul 2026 09:01:43 +0000
Manifest next update: Sat 25 Jul 2026 09:01:43 +0000
Files and hashes: 1: AdgSMzHPUmuKzAlrtS53QR76t1s.roa (hash: nKsP5GbM2QK6ia47o/bGf3bfq0W9Ls05zVJw81d/vE0=)
2: S3l9n0dTP3FXhNcpLdf8YCRxkuo.roa (hash: bOQ4f+wL3ADi6V1m/4nIBmXdvzaUBsd7Lu728OmlsTo=)
3: yFKOFLm6mFBWKUjNeshNKytqNx0.crl (hash: uOYsSSA6s8IA5Z7uZIj6N0aGQ2spaPVjbsPXzuLFv1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:f0:87:76:01:ec:4b:6a:e4:01:73:a9:5e:69:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8528e14b9ba9850562948cd7ac84d2b2b6a371d
Validity
Not Before: Jul 24 09:01:43 2026 GMT
Not After : Jul 25 09:01:43 2026 GMT
Subject: CN=5a74250a499399d6f232091c72f492964409d5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:04:8c:f6:76:23:79:84:31:e5:26:3d:ca:
91:c3:52:24:e6:45:f4:12:eb:3a:9d:cd:98:34:0e:
8b:7e:6e:2c:af:f7:e4:4c:6e:2f:08:6b:f2:1a:35:
b5:f7:2d:48:9a:53:1c:3d:ae:e4:d6:06:74:1b:cd:
cb:ab:60:66:6e:6b:ef:60:5a:f5:e5:e1:00:5a:41:
99:68:e3:2e:d8:48:69:2a:c3:89:ae:0c:93:cd:86:
c1:4c:c9:5d:b8:1c:6a:16:9e:a6:3d:37:9e:18:e2:
51:a7:50:92:76:93:48:34:58:53:5c:6e:80:00:2e:
7a:6c:06:fd:8e:1b:1a:db:b4:41:21:ab:e1:68:98:
32:66:99:73:da:f4:9e:97:26:f9:2b:07:7c:b6:5f:
c0:a6:80:8e:f7:3d:df:7d:97:3f:59:e5:6a:80:94:
29:59:ee:8b:0c:a5:82:ec:89:06:44:14:a3:e1:48:
51:b4:da:6b:bc:33:61:37:c9:41:c0:ad:95:8c:27:
1c:9f:e4:66:2f:8d:ed:26:65:40:12:29:60:13:d5:
4b:a8:87:df:01:47:44:53:3e:ec:c2:fb:51:c6:95:
f7:af:8c:15:5c:0b:c5:0c:a4:5b:34:bb:b4:22:6c:
06:c7:9e:68:94:04:f8:95:26:fb:7c:62:bd:48:c8:
b6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:74:25:0A:49:93:99:D6:F2:32:09:1C:72:F4:92:96:44:09:D5:B8
X509v3 Authority Key Identifier:
keyid:C8:52:8E:14:B9:BA:98:50:56:29:48:CD:7A:C8:4D:2B:2B:6A:37:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:4d:58:70:23:2f:5e:df:ee:dd:ee:b5:28:c4:55:c9:dd:79:
e2:a1:b6:a9:8d:6c:97:3e:76:18:f3:03:75:65:3f:b9:9d:74:
79:96:f4:a1:c9:82:86:99:b2:cd:da:07:6b:01:b2:35:6d:d3:
f9:f8:8a:9b:78:9a:80:51:23:0c:ed:0f:fe:6a:0c:a4:90:e5:
4e:c6:08:48:c1:53:19:1e:99:a0:29:43:10:80:3b:39:35:99:
10:f1:a2:dd:f7:a0:89:4e:1c:76:77:2f:19:c6:17:75:65:b8:
6c:88:ea:7c:ad:46:85:1e:48:09:53:cd:a4:6f:e1:3e:e6:44:
da:21:2c:5a:f4:2d:89:64:ef:48:49:85:aa:31:c2:8a:a9:57:
ce:9e:3c:0e:81:49:09:77:9d:ed:4a:6c:f6:70:a4:b3:0a:15:
07:73:46:9b:66:99:8a:16:4a:9c:c2:05:17:de:dc:11:8c:cc:
eb:58:4c:9a:ba:f9:02:49:96:c5:eb:5c:c5:37:bb:62:29:7e:
59:0e:be:df:f4:4f:3e:d9:50:20:ad:25:96:1a:84:d7:83:a3:
85:4d:c4:43:f9:64:f7:31:c8:37:dd:f1:59:54:4b:99:03:d6:
d7:b8:44:58:0f:d7:c3:07:d0:80:aa:81:52:7b:30:20:7f:58:
9f:8f:bd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:40:03 2026 by rpki-client