Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
File: YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json)
Hash identifier: lGmcB5qUAG+WluQV0kECPWB61yS54NlP9Bi8ibmhASs=
Subject key identifier: 5B:46:AF:54:03:B3:D5:6A:DE:C3:52:03:85:58:E1:ED:9A:6D:1F:EA
Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
Certificate issuer: /CN=61106d2dff7116f35ab7fa10275a45e383bce523
Certificate serial: 019FA229405A87FC91EB9107869CD145B440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
Manifest number: 18A4
Signing time: Mon 27 Jul 2026 06:00:40 +0000
Manifest this update: Mon 27 Jul 2026 06:00:40 +0000
Manifest next update: Tue 28 Jul 2026 06:00:40 +0000
Files and hashes: 1: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: rsGVbPOcdJvapde8DS/CRe1HgBTgTLpTYUoiE3ZVZRQ=)
2: ds0HwgnE1wK4tusqij2iDAo4C4w.roa (hash: AV7GAfjJkTxxVqb/RhgxTIb2SMDdBmXXWKpB5XXq9g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:40:5a:87:fc:91:eb:91:07:86:9c:d1:45:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523
Validity
Not Before: Jul 27 06:00:40 2026 GMT
Not After : Jul 28 06:00:40 2026 GMT
Subject: CN=5b46af5403b3d56adec352038558e1ed9a6d1fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:15:0f:6f:5a:a1:bb:59:62:f8:d6:47:1b:
73:2a:45:d1:42:92:4a:76:b1:3e:41:43:f3:5c:e8:
e8:70:1f:95:3a:9b:7f:e9:35:3c:46:e5:64:21:9d:
70:1c:a7:51:d5:c6:fc:3c:dc:e9:73:01:80:30:c9:
e0:05:27:f2:bc:38:f9:67:6f:a9:9d:0b:13:c5:67:
ce:89:e9:7f:58:fa:f7:c9:07:3a:ec:11:60:cf:6e:
2f:5b:61:d1:77:1a:a3:fb:5b:ce:79:d7:f3:9b:42:
3b:12:8a:6d:8a:09:b5:d7:3c:1f:95:23:44:59:0a:
71:f3:a1:94:98:fe:7a:5f:25:ca:20:61:8c:0a:8f:
6c:7c:f3:5e:7f:a4:bc:72:20:3d:f2:5e:17:b6:ea:
16:11:42:92:9a:0d:1d:8d:b3:21:d0:73:59:07:1f:
ac:cb:6d:a3:8a:84:dd:97:d1:ef:f2:0d:d4:c6:23:
b7:ec:c5:8f:5f:f7:80:71:30:01:50:c3:cb:de:f3:
da:cc:91:23:d5:2b:fb:29:61:49:7e:fa:c9:05:8b:
99:16:7b:a4:24:ed:90:69:96:34:23:0b:b8:04:f6:
01:b9:f7:e0:7c:19:e6:61:39:24:34:79:e6:14:87:
8b:75:04:7c:14:50:48:4d:fa:01:a6:a6:5f:a8:6a:
78:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:46:AF:54:03:B3:D5:6A:DE:C3:52:03:85:58:E1:ED:9A:6D:1F:EA
X509v3 Authority Key Identifier:
keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:cc:b3:99:ce:55:62:d9:45:29:c6:39:ae:cf:a1:13:a9:ce:
14:57:c0:80:2f:8b:d5:1d:7c:6d:25:63:df:7b:18:98:e7:9b:
3a:d8:2e:20:23:d4:b5:ef:56:86:81:9f:73:6c:0e:c8:05:4f:
1f:17:b2:cf:01:58:37:c1:c3:9b:cd:e9:f9:e2:c2:d9:5f:66:
03:27:0e:7f:63:f2:52:09:e0:51:43:d4:ca:c1:f4:d8:53:32:
2c:b3:ad:1d:7f:d2:66:41:31:e4:55:77:a8:72:f5:0c:0c:66:
f7:d5:c1:e9:8f:bf:ca:df:a4:1b:74:5b:00:1a:f1:1a:4e:19:
2f:9e:97:f0:ad:d7:be:95:f9:b3:f9:34:d8:f1:bd:49:a4:89:
2e:01:56:04:4b:43:8f:d8:ea:be:ee:7c:43:1d:bb:4d:dd:0f:
8e:62:f6:5a:6d:06:e1:9c:7f:99:23:33:e6:e7:50:aa:93:64:
14:2f:7a:69:6b:fe:3e:10:76:2c:72:b3:29:4b:a9:d5:9b:5a:
cd:56:aa:c3:a9:40:9a:c5:78:05:ca:b8:e3:c6:b3:53:82:ec:
7a:d9:f7:b6:9d:19:a0:2b:22:3f:8b:5a:77:95:20:11:4a:e0:
88:47:78:64:3a:68:b7:af:a5:aa:44:71:d4:2f:4d:ad:0f:0a:
6d:39:36:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:00:26 2026 by rpki-client