Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier: jEgcSLxmOh65RiBekhPcakTZQs5W6BDtRBosDioE+4Y=
Subject key identifier: 68:F1:F6:53:BD:71:F0:A1:EB:79:78:7C:03:9D:92:2C:84:82:00:CE
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial: 019F848C88840DFE7F2DB0D30770711CEB88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number: 1312
Signing time: Tue 21 Jul 2026 12:00:30 +0000
Manifest this update: Tue 21 Jul 2026 12:00:30 +0000
Manifest next update: Wed 22 Jul 2026 12:00:30 +0000
Files and hashes: 1: CK8OJfLCISBl1ouaHEnbpGJbOnw.roa (hash: pt47KAPdqRnN1dkS3yo4ZlI5RRvRrx+uI3TswhWMkuU=)
2: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: olLCbl1w5D08D5rLrdqrPQ0W9DD8PSALAJgvCAiLWqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8c:88:84:0d:fe:7f:2d:b0:d3:07:70:71:1c:eb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Validity
Not Before: Jul 21 12:00:30 2026 GMT
Not After : Jul 22 12:00:30 2026 GMT
Subject: CN=68f1f653bd71f0a1eb79787c039d922c848200ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:be:f8:da:67:a4:a3:65:0a:fc:ef:8e:37:
b3:93:84:8e:0e:65:9a:dc:5c:03:76:db:a2:09:61:
8c:d6:31:01:78:15:a8:20:97:92:51:60:31:c1:51:
dc:85:f4:e0:81:39:e3:63:de:fd:52:89:dd:5b:4a:
c8:44:dd:2f:d9:20:d0:97:c5:6a:d3:bc:b3:c9:91:
40:ad:cd:05:fa:48:1d:af:3f:7e:b3:4e:51:d0:01:
c8:cd:06:68:e9:ea:94:34:4b:8c:71:39:da:4a:fa:
e2:c8:fe:34:50:a5:7d:f2:4b:c5:ce:a5:34:83:6c:
ee:cb:13:60:9a:67:3c:54:d6:46:3b:3c:91:e9:7b:
f3:99:b0:97:66:8b:e7:b9:63:71:b8:c0:95:09:29:
82:6c:fb:d2:b7:71:c7:36:42:f8:0f:10:4e:83:90:
1e:29:80:80:9a:4e:82:42:53:ce:d6:04:db:fc:06:
28:38:ee:ef:0e:c7:7a:e6:a2:5f:61:00:f1:b2:e0:
ee:1b:e3:d0:92:c9:7b:1d:6e:94:ff:46:46:50:9d:
4d:9e:ad:8e:be:44:6e:be:89:08:ec:09:0b:12:3b:
07:29:97:cf:ce:b6:2d:2f:ae:4a:16:18:b8:02:40:
de:e9:e0:30:77:2d:ec:83:39:43:5c:fe:d9:1e:98:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F1:F6:53:BD:71:F0:A1:EB:79:78:7C:03:9D:92:2C:84:82:00:CE
X509v3 Authority Key Identifier:
keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:cc:5e:41:f9:5f:f1:86:37:a2:be:1f:90:cb:c4:95:7c:2b:
0c:7f:4f:38:5f:14:f6:98:12:71:f5:5a:53:0b:67:fc:db:ec:
ec:8f:3a:b4:df:5b:23:dc:6d:5a:3e:9d:87:a6:0f:b4:8f:be:
03:59:ed:0c:0f:2c:0f:44:cf:7e:85:6c:db:7a:4d:fd:bd:07:
75:fb:ff:41:01:ce:90:61:c6:fe:ad:ab:29:ac:71:12:e0:1f:
ce:8f:d3:f7:88:f6:ae:51:a4:96:06:ce:24:61:0b:71:9d:bb:
74:55:2d:e7:51:ce:5d:bf:93:18:95:4e:42:9b:cf:e1:39:b5:
79:3b:e9:47:e5:50:26:dd:ab:4b:8c:d1:c2:4b:da:d2:e3:99:
5d:d3:b8:a9:ed:7c:63:ac:30:b5:e1:4b:6c:e6:2e:b6:df:10:
35:18:cb:1c:cf:dd:2e:31:79:ef:4e:a9:86:55:d1:ed:b6:00:
56:03:00:da:04:58:29:33:df:ea:01:cf:29:6c:24:1d:b9:78:
a8:af:ec:17:b0:86:e4:10:94:cb:e3:a6:ca:86:22:6a:59:e1:
81:14:01:78:d6:51:76:b2:c9:16:1e:b1:bd:e3:bf:39:90:23:
f0:96:ab:e7:73:64:83:be:2c:93:5b:93:9a:0a:fe:89:8f:e2:
7b:d0:47:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:50:45 2026 by rpki-client