Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
File: YfTZxfoK42S02B7bxNGCAPAPvH8.mft (raw, json)
Hash identifier: TLL1U5kdj/Z1WqcxebVwdHQPx93EUWSVxBxG/ALBKkw=
Subject key identifier: DA:5E:13:48:A3:FF:4F:79:E0:71:0C:2F:39:16:C4:D5:99:51:D9:DF
Authority key identifier: 61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
Certificate issuer: /CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Certificate serial: 019F8A57F43662A072B47DFA04E6DD7123A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
Manifest number: 0378
Signing time: Wed 22 Jul 2026 15:00:47 +0000
Manifest this update: Wed 22 Jul 2026 15:00:47 +0000
Manifest next update: Thu 23 Jul 2026 15:00:47 +0000
Files and hashes: 1: YfTZxfoK42S02B7bxNGCAPAPvH8.crl (hash: miyr9dvCMdRrnwItA3HzGLaLrl6UECEAUu3VTCv2oKo=)
2: i757eDGPyWXy1WJ59_NsKxP9nBk.roa (hash: aclUO+YpHA3b3E++8LC8TZOgc8p99LqEe7lxYmVbjYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:57:f4:36:62:a0:72:b4:7d:fa:04:e6:dd:71:23:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Validity
Not Before: Jul 22 15:00:47 2026 GMT
Not After : Jul 23 15:00:47 2026 GMT
Subject: CN=da5e1348a3ff4f79e0710c2f3916c4d59951d9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:46:8c:bd:c8:a0:e3:3b:3a:cf:6f:47:c5:
a0:c2:44:7d:71:bd:58:e8:cb:26:8f:cc:9c:a2:ab:
b3:16:3c:12:15:63:6c:b6:a0:4d:21:a3:4d:01:2a:
e3:86:88:d3:bf:f6:9d:54:2f:fb:02:38:61:67:ac:
44:2c:96:68:d3:75:5e:50:4d:8e:63:68:9f:2f:c5:
6b:28:41:f4:4d:9a:ab:f3:76:29:87:2a:51:bb:99:
4a:3e:76:8e:b2:2e:20:82:34:f0:d3:ac:9a:f7:7d:
5e:e5:3b:4f:11:86:77:12:42:f1:f4:8c:4a:ed:82:
5d:9e:0e:e4:c2:ab:53:3c:0d:12:1f:78:df:e7:d4:
3d:86:d6:8c:5d:dd:e7:39:35:07:8a:7c:8b:89:4a:
58:33:bf:bf:ac:d3:81:4a:8e:13:64:fa:3d:82:bd:
ef:24:fa:c6:d9:d5:0e:e0:06:dc:11:7f:cc:ea:70:
fb:f4:df:0c:1d:6d:d0:ac:3e:5c:e4:4e:8b:f6:79:
9c:84:c1:13:8c:41:a7:1a:e1:d6:0a:74:c2:15:88:
b1:b0:7e:cc:7f:6d:4b:4f:ae:06:aa:b0:2d:98:28:
52:08:26:0c:a0:ec:da:75:57:71:6a:d8:db:a5:87:
7f:32:8c:db:82:72:98:89:53:65:f1:01:b1:66:57:
5c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5E:13:48:A3:FF:4F:79:E0:71:0C:2F:39:16:C4:D5:99:51:D9:DF
X509v3 Authority Key Identifier:
keyid:61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d4:1b:4c:24:73:56:22:12:df:fa:28:11:8a:48:2d:d9:7e:
65:61:21:32:ab:96:9d:a0:fb:0d:23:2d:db:81:fe:18:eb:9e:
d2:0d:74:4e:ef:6d:ff:3e:b9:3a:93:90:34:8f:81:98:e5:57:
fe:84:b3:77:58:df:7d:80:77:38:0c:d4:0a:c1:00:6b:79:2a:
23:c5:53:3f:25:93:ab:8b:89:8d:6c:6a:46:5b:b4:5f:ef:84:
94:18:ce:07:49:4b:cd:9e:d5:98:1a:04:14:0e:7b:b5:2f:f4:
32:00:9f:8f:10:26:ca:bf:36:e1:1e:b4:18:50:db:2a:9c:ab:
77:78:bf:17:52:54:54:33:86:61:ac:2a:1a:d0:ac:e0:97:a9:
5e:c9:bf:66:32:df:37:25:76:48:49:2c:ee:ef:d9:d2:3c:4e:
62:15:ba:a2:79:a2:4d:4f:73:0f:99:99:eb:be:0b:c9:da:5e:
e3:e1:60:f1:c4:7a:99:4a:e4:83:55:77:de:14:cf:5b:c0:6a:
7b:46:86:7e:e0:7d:60:63:d0:10:ef:0a:4c:e0:ed:26:66:8a:
02:23:af:f5:b4:f0:33:94:17:5c:40:a9:d0:64:a3:fa:d1:f1:
b4:0a:97:8b:bb:26:f3:55:bd:1e:23:47:17:c8:ad:6e:33:01:
7a:78:c3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 22:48:12 2026 by rpki-client