
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
File: yiAvZExIQuX41ATgaJ-B9SwVS1E.mft (raw, json)
Hash identifier: jjJxaPTISj8szMHhKF9lhPj5pd70gcV6whf69oeC2TE=
Subject key identifier: 7E:89:11:7A:33:A6:6D:65:EA:03:98:B2:95:A1:07:D1:53:4A:C7:BE
Authority key identifier: CA:20:2F:64:4C:48:42:E5:F8:D4:04:E0:68:9F:81:F5:2C:15:4B:51
Certificate issuer: /CN=ca202f644c4842e5f8d404e0689f81f52c154b51
Certificate serial: 019F935BA4F815D0428C415BC1112AE2B921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:24 +0000
Manifest this update: Fri 24 Jul 2026 09:01:24 +0000
Manifest next update: Sat 25 Jul 2026 09:01:24 +0000
Files and hashes: 1: RrGxYN2h_N_Vx45aQWWvFqoM3rA.roa (hash: NfGzv+ISe2v5iqjEcKNdZo4d+WrQJS0vL5wyjnXNlGQ=)
2: yiAvZExIQuX41ATgaJ-B9SwVS1E.crl (hash: G+dfaCCpAYmy5lnShalD/swNRpSY1E2rZ7CyQpWMv5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:a4:f8:15:d0:42:8c:41:5b:c1:11:2a:e2:b9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca202f644c4842e5f8d404e0689f81f52c154b51
Validity
Not Before: Jul 24 09:01:24 2026 GMT
Not After : Jul 25 09:01:24 2026 GMT
Subject: CN=7e89117a33a66d65ea0398b295a107d1534ac7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2d:9f:5d:19:04:80:85:61:9d:3b:8d:1b:af:
45:75:ad:f6:b4:2a:d4:78:fd:6d:f1:62:02:fd:34:
e2:7f:e0:ba:90:29:44:b2:32:38:ef:f4:d5:54:76:
02:b6:a6:79:59:0f:36:9e:99:ee:ad:3d:58:30:ea:
db:46:1e:66:03:99:0a:5b:33:dd:0b:5b:bd:91:26:
87:fc:97:aa:ad:6b:0f:28:4d:ae:58:c5:bf:0e:79:
44:0a:52:69:81:a5:13:7e:cf:b7:f7:67:22:f0:a4:
cb:aa:6c:d0:d5:d0:2b:12:3e:48:30:f0:6c:a4:b9:
1c:f2:db:13:f6:32:ac:bf:82:de:c0:63:39:ea:8d:
40:2e:ae:7a:f5:d6:fa:a4:3d:f2:e9:ba:5e:e9:96:
2e:df:19:64:69:7a:37:8e:bb:1b:a1:82:ee:9a:3a:
1a:b9:be:87:95:4f:b0:b8:dc:dc:79:5c:dc:1d:9a:
67:e6:e0:f5:70:09:7a:3f:83:7b:db:9c:dd:7a:c0:
29:dc:b6:b0:a4:65:8e:48:11:45:bf:7c:9d:f0:74:
20:f3:99:5e:d0:77:b2:e9:7c:10:ad:b1:3f:09:2c:
e9:da:f6:28:d6:e8:15:6a:e7:56:89:4a:9e:fa:fd:
a0:4f:ae:cf:c4:e8:48:05:d1:15:82:f1:54:67:81:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:89:11:7A:33:A6:6D:65:EA:03:98:B2:95:A1:07:D1:53:4A:C7:BE
X509v3 Authority Key Identifier:
keyid:CA:20:2F:64:4C:48:42:E5:F8:D4:04:E0:68:9F:81:F5:2C:15:4B:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6f:97:12:74:ee:cf:db:ce:50:d0:cb:02:28:c4:cd:e7:2b:
db:73:01:f1:19:7d:aa:97:21:99:f0:99:e9:97:f9:f0:49:a4:
b3:0a:f3:d7:d5:72:a9:e9:dd:94:d6:22:88:79:0f:38:5f:53:
bd:b2:1c:60:95:71:9f:3f:40:63:c1:00:f5:35:7f:b2:c8:db:
2c:c6:f2:50:ee:79:6f:31:35:d6:16:37:52:db:28:7a:52:b3:
14:23:3c:86:9b:b7:9c:38:d9:55:8a:d8:c5:a1:39:7d:b0:19:
92:7c:aa:b3:dc:9f:7c:cf:96:93:73:0d:79:fe:b6:8b:33:87:
b0:34:4b:e4:b3:5f:e2:25:57:94:f9:5e:08:66:38:c6:1d:d5:
5a:ef:5e:5e:38:cf:57:63:c0:fd:a4:14:a8:fd:c5:70:43:1f:
8a:a1:7c:81:51:42:30:65:a4:16:07:66:8f:e1:82:43:62:dd:
ea:ec:65:bf:87:71:21:03:ad:d1:a3:2b:c3:59:ca:65:38:19:
b1:11:ac:7c:cc:41:9c:d5:74:d6:42:e1:52:9b:e2:cf:66:e7:
10:ca:f1:e8:a0:4d:62:b6:91:ad:8a:d4:1e:4b:eb:7d:60:f7:
69:84:81:42:05:a9:5b:21:dc:29:c9:b1:ee:d8:ad:c4:f8:1e:
d8:8f:c8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:34:49 2026 by rpki-client