Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier: HjrSku+En3h4jIl2vp+6jlsQftEuLniNH+CCh4xNFXM=
Subject key identifier: A9:83:C5:F2:1C:32:78:82:F4:44:ED:15:D7:BB:A8:58:BF:D3:D2:38
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 019F92EDA2350643290717F80E2CF66FF373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number: 0A73
Signing time: Fri 24 Jul 2026 07:01:14 +0000
Manifest this update: Fri 24 Jul 2026 07:01:14 +0000
Manifest next update: Sat 25 Jul 2026 07:01:14 +0000
Files and hashes: 1: H1VE2ZkBqR8y9rnIA-ZTuzeFoCk.roa (hash: 3CEpvrN229vRpcqITP4Y01YD4936c1DOC0Lixuq0wEM=)
2: qRXAdJp0xbYo0FT6eucc0rsG8Yw.roa (hash: fUKa/Z+tq+35Z3GUfMU3rii79affOtxwZwlAfn3uJ6U=)
3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: u4q3b3eYhrmQcOuaPgrHu62FpuZxLDUKcDGe0Q9+7Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:a2:35:06:43:29:07:17:f8:0e:2c:f6:6f:f3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Jul 24 07:01:14 2026 GMT
Not After : Jul 25 07:01:14 2026 GMT
Subject: CN=a983c5f21c327882f444ed15d7bba858bfd3d238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:cf:30:e5:76:93:ae:cd:86:39:82:72:0a:
a8:ed:89:0d:4f:c9:1c:ab:f1:65:c5:6e:c6:b5:85:
06:cb:fd:f7:a1:49:96:1d:91:f5:46:df:ef:80:37:
97:09:4c:42:69:e1:0f:bc:c7:70:c0:45:49:bc:fe:
77:0a:04:76:6f:d0:b1:c4:ec:8b:be:4a:da:2c:d0:
81:2c:c8:cb:42:f0:da:07:6a:e1:1c:e0:28:52:13:
17:44:1f:c9:53:a4:63:f5:4a:b8:80:3f:b2:9e:62:
c7:4d:5b:6a:bc:ae:31:87:53:50:64:a2:21:a4:46:
05:3f:83:e5:69:4f:b6:b8:a6:93:92:a3:05:36:eb:
82:22:3c:d1:0d:0e:47:5f:96:0b:61:63:0d:c1:0b:
9f:d5:43:03:d2:cc:cd:31:93:d9:3c:a2:49:ce:ac:
ab:21:15:67:43:58:9f:5d:c5:5c:79:4f:9f:ec:47:
38:bd:fe:61:29:5a:65:91:31:77:d0:08:4f:c4:74:
32:19:0b:a4:9b:f8:a4:e2:12:2b:04:be:d7:35:ea:
f7:fa:57:43:91:f1:f4:08:25:34:cb:b2:6f:a3:4b:
8d:69:74:da:78:68:ea:a8:18:ad:32:20:c6:9e:aa:
ef:bf:2e:bc:32:9a:8e:71:37:5f:13:ea:c8:50:17:
e5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:83:C5:F2:1C:32:78:82:F4:44:ED:15:D7:BB:A8:58:BF:D3:D2:38
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:27:c2:ef:f4:8c:e1:90:12:47:34:21:0d:bb:f2:d6:b8:97:
e9:19:b9:55:5d:b0:b4:86:46:6b:bd:cd:15:ae:ef:7a:ba:58:
d4:3f:0f:bd:43:61:58:ff:57:5b:5e:92:f8:d0:8c:87:02:c8:
3c:6f:46:3c:48:37:ed:0f:c4:0d:ce:1e:55:30:16:a7:06:bf:
6d:e7:61:b5:e8:81:b4:dd:09:91:e4:fa:d4:b5:3e:2f:97:77:
80:c8:ad:a1:0d:bf:77:de:50:56:47:f0:fa:24:7f:f8:b6:9b:
f1:32:10:4f:27:47:dc:df:6f:d1:ce:95:cf:fb:25:91:76:75:
81:3a:85:c1:e1:b9:5b:b4:8f:15:47:83:68:87:a3:86:c5:90:
15:1a:f9:3c:f1:a0:14:1e:5d:65:3d:0c:21:e9:38:a1:cb:6e:
b1:28:db:13:3a:54:9b:4b:c2:64:97:3b:66:64:77:15:85:9d:
5f:25:0d:7d:10:72:62:74:17:db:16:b7:52:39:4d:30:e9:46:
ca:0e:b9:69:0f:2b:d9:53:a8:a3:61:32:26:8d:38:e8:25:8e:
c7:49:e7:11:9a:aa:0e:39:72:ea:5b:41:b7:97:d0:32:ff:af:
02:29:11:9c:07:ba:14:8b:9c:31:b7:70:84:d4:4a:d2:34:96:
32:ea:05:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:37:48 2026 by rpki-client