Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.mft
File: YiEr2gPikIllk3hQroSRo3O6h9Y.mft (raw, json)
Hash identifier: PO512x7dTM96Naax+8TbFIC8ndYABK9C0t/7kK7Gs28=
Subject key identifier: 5B:1B:D0:41:B6:31:A7:F0:38:DA:60:C0:CE:B4:88:7D:6F:20:FB:CF
Authority key identifier: 62:21:2B:DA:03:E2:90:89:65:93:78:50:AE:84:91:A3:73:BA:87:D6
Certificate issuer: /CN=62212bda03e2908965937850ae8491a373ba87d6
Certificate serial: 019FA0DFB59A434347E06D6B519EA22FA85F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiEr2gPikIllk3hQroSRo3O6h9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:00:43 +0000
Manifest this update: Mon 27 Jul 2026 00:00:43 +0000
Manifest next update: Tue 28 Jul 2026 00:00:43 +0000
Files and hashes: 1: J5ndYN47GulHNdd8j26GfEdBb4o.roa (hash: iuNL8Ztc0MFggBQFipuWLLh7iLuDAe58bhFd6SGPtXk=)
2: YiEr2gPikIllk3hQroSRo3O6h9Y.crl (hash: dsbvsD4Dm/+yrb+7Eqzd9iwMpE507fCe3uaYvyjqiKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiEr2gPikIllk3hQroSRo3O6h9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:b5:9a:43:43:47:e0:6d:6b:51:9e:a2:2f:a8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62212bda03e2908965937850ae8491a373ba87d6
Validity
Not Before: Jul 27 00:00:43 2026 GMT
Not After : Jul 28 00:00:43 2026 GMT
Subject: CN=5b1bd041b631a7f038da60c0ceb4887d6f20fbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9f:6c:eb:98:ac:31:e4:b0:55:9e:d0:57:6e:
77:e4:be:c0:77:9e:72:ad:96:09:2f:b7:e4:a9:4e:
c0:51:5a:47:5a:40:46:42:86:ee:e1:e8:d9:6d:8d:
fa:e5:80:96:13:8f:29:b4:bd:75:f4:6a:dc:b3:87:
ae:96:b9:2f:3a:cc:95:01:07:70:bb:13:0a:a7:2e:
30:70:49:aa:50:c1:62:76:7c:b5:b9:04:79:d1:3a:
57:2d:c9:e1:6e:c9:e0:3e:44:b2:35:14:46:0e:06:
2d:26:67:c5:86:19:b4:3b:c7:ad:31:e0:10:2d:87:
90:b3:6f:d3:f6:b5:50:01:45:84:2d:1d:bd:d8:cd:
b7:e2:48:b2:a0:ff:fb:6d:db:fa:b0:fe:d5:5d:c5:
d7:d3:98:3b:4a:04:55:79:67:34:d5:a9:04:9c:d6:
95:28:1e:77:e2:4e:4d:19:38:28:09:7c:56:52:42:
da:b9:5a:74:de:85:35:db:e4:7f:35:7d:47:2b:37:
a1:27:36:29:db:80:eb:12:57:7b:f6:78:81:c6:5f:
84:0d:b1:c0:83:86:82:ef:cd:12:64:0f:77:35:2a:
6a:9c:23:03:05:f7:66:9a:15:18:5f:80:3a:2e:71:
0c:fe:7d:59:50:77:19:a6:f5:6e:eb:0f:b8:a2:02:
7e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1B:D0:41:B6:31:A7:F0:38:DA:60:C0:CE:B4:88:7D:6F:20:FB:CF
X509v3 Authority Key Identifier:
keyid:62:21:2B:DA:03:E2:90:89:65:93:78:50:AE:84:91:A3:73:BA:87:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiEr2gPikIllk3hQroSRo3O6h9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:92:93:ae:33:3a:bd:a9:08:47:12:a8:d3:a8:0e:5c:9f:81:
64:b9:e5:cf:76:02:05:66:e3:d2:fe:88:1a:22:3a:21:a3:6d:
be:54:93:4c:4a:e6:d0:d3:10:c4:da:5c:4e:a4:11:61:94:6c:
de:14:83:09:0f:90:d2:b8:c5:b0:77:87:d5:d8:5e:87:43:16:
b1:ca:33:cd:19:5f:71:05:21:23:ac:6b:e5:cc:44:43:f2:90:
3c:ec:9a:0b:4e:fb:52:8a:3b:f0:1f:07:7a:fd:db:57:62:91:
0b:d4:fe:b1:c6:09:38:97:9a:e2:b6:4e:3d:1b:d7:9c:20:74:
6b:d7:b3:9e:e7:a3:34:5a:2e:1e:bc:ea:35:73:3b:6b:2e:f5:
00:5d:d2:8e:93:14:01:9a:56:d5:13:bf:2b:c1:98:aa:48:65:
a2:d4:8e:10:7d:e2:a3:98:39:63:89:7e:31:a0:75:a7:f2:b5:
2e:9d:43:fe:c4:4e:f9:80:5b:a0:d2:fd:b9:8f:82:c5:7f:a9:
e5:95:f0:fd:4c:1a:00:2c:9f:b2:24:47:3f:04:14:9c:a9:76:
77:d1:bc:cc:cd:6b:17:2b:15:1c:4d:c0:73:7c:9a:a0:a6:fc:
20:d6:8d:a8:c5:08:96:7c:19:d4:96:07:dd:16:94:41:15:4a:
55:85:f3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:22:47 2026 by rpki-client