Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
File: Ym0k1r81OWP-WvolsKWWZxUqhtA.mft (raw, json)
Hash identifier: FAR4MX40oheBN//Sa4nGScWSBNkF83FDSfR7kCjCKj4=
Subject key identifier: 8B:28:92:7E:B0:0D:85:3D:C2:D9:95:84:35:71:8F:E0:8C:E9:51:15
Authority key identifier: 62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
Certificate issuer: /CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Certificate serial: 019F935B88BBA3BB7B86E5FA3AA2444619B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
Manifest number: 1157
Signing time: Fri 24 Jul 2026 09:01:17 +0000
Manifest this update: Fri 24 Jul 2026 09:01:17 +0000
Manifest next update: Sat 25 Jul 2026 09:01:17 +0000
Files and hashes: 1: BOEi7NrSCNnbOJagz6PacwPyCow.roa (hash: gcJkZ8tsvtRiMSl8JsUfBFpQEizMhx1qFKi60dWgXD0=)
2: Ym0k1r81OWP-WvolsKWWZxUqhtA.crl (hash: os1m9I0tWTglNg6TQfjoK9pAiFEWjmTQURNZPvPy3iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:88:bb:a3:bb:7b:86:e5:fa:3a:a2:44:46:19:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Validity
Not Before: Jul 24 09:01:17 2026 GMT
Not After : Jul 25 09:01:17 2026 GMT
Subject: CN=8b28927eb00d853dc2d9958435718fe08ce95115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:87:a4:db:fb:5d:cb:3c:22:6e:40:69:09:81:
dd:4d:97:94:6e:00:61:1b:4b:c1:46:07:78:af:82:
8b:28:35:12:7d:37:e1:51:6e:25:6c:7f:53:bb:09:
a9:48:96:31:42:53:81:81:c4:32:bd:2c:23:e3:d1:
cb:23:09:3c:9e:0f:e6:c4:6a:64:44:52:57:16:41:
82:c4:c1:80:95:61:53:2b:86:63:43:42:5c:a7:47:
10:52:39:c6:35:d1:7d:5e:5f:35:08:00:ab:e9:dd:
34:a1:ac:ef:55:dc:2a:4c:0a:bf:60:1d:ed:3f:6d:
85:b1:6c:8a:1a:6d:8a:e1:84:dd:e4:d6:94:f5:a4:
f1:90:e2:1b:b5:ea:68:db:bd:86:4b:01:2d:ec:6b:
35:32:14:f0:e7:41:95:52:9a:f3:4d:33:dc:7a:3a:
53:d2:1a:8d:95:b6:69:59:b9:f4:cc:be:3e:73:b7:
b4:7a:5f:9f:9e:0d:46:94:5a:5e:cb:2d:ad:3e:fc:
85:9b:49:22:01:23:c8:1b:46:99:53:c7:3e:fa:f5:
b0:74:ff:29:63:59:b2:be:9b:4b:e4:48:7a:55:a7:
e2:f5:ad:d6:cf:d8:46:29:ba:3f:4c:9b:a9:91:cc:
ba:f2:8b:72:d2:cc:a1:63:de:4f:a6:3f:5f:b3:8d:
91:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:28:92:7E:B0:0D:85:3D:C2:D9:95:84:35:71:8F:E0:8C:E9:51:15
X509v3 Authority Key Identifier:
keyid:62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:96:71:f0:81:4b:c1:3c:0a:b8:79:ba:9f:63:31:c0:a3:00:
42:d4:e7:92:bc:39:7d:4f:f9:85:0f:9e:4e:eb:76:0c:f3:00:
8c:c1:1e:4d:93:5b:6d:bb:4f:f5:11:ce:e5:a4:1f:e5:77:ca:
c0:b6:9c:01:0f:84:d2:6c:ac:53:ee:15:d3:5b:70:39:44:35:
44:75:5b:e3:3b:5c:43:f7:aa:75:4a:da:04:e3:18:c9:03:ce:
da:d7:2b:ab:ed:62:e3:26:5e:b6:4c:23:8f:2e:9d:d6:21:29:
b3:38:f6:9f:d9:0d:51:0e:82:9a:ad:bd:05:53:39:e2:43:1f:
67:2a:f0:b1:e6:19:b9:b3:89:c8:21:fe:06:17:62:af:ff:9a:
8f:72:a7:0e:f7:94:1f:4f:f0:ee:c6:9a:4a:b8:07:b5:bb:6c:
84:dd:30:a2:17:d5:c0:08:ce:97:b2:ff:74:68:a2:ac:46:05:
1a:3b:f3:75:15:d7:ae:29:dc:6e:86:81:63:90:33:60:91:d3:
62:51:d8:e7:ea:5c:dc:bf:32:e9:7d:c2:05:91:84:8f:32:09:
89:81:d9:28:18:d4:6a:9b:b8:4f:16:2f:77:96:4d:ed:84:f7:
cb:f0:3c:1d:1d:b3:56:a2:57:30:d4:4a:16:11:6f:f0:61:c4:
1c:f6:53:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:25 2026 by rpki-client