Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: UGyglkUi+iFz4w3VscHNdAjaT7ajLEdBpsnNsWs2RlM=
Subject key identifier: 96:19:64:AC:EC:60:6D:66:1A:BE:C8:4B:9E:91:E0:7C:45:ED:A8:E1
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 019FA116FC79C41C8F28E4E6CE0D7A1F77ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 0D8B
Signing time: Mon 27 Jul 2026 01:01:05 +0000
Manifest this update: Mon 27 Jul 2026 01:01:05 +0000
Manifest next update: Tue 28 Jul 2026 01:01:05 +0000
Files and hashes: 1: 6PWOGz_KqRkb1zSJBPSYqwA3Obk.roa (hash: 2QNX7SpmW+cQkXWOHdllDN5APRnT1YGjOBVoLe9iX0U=)
2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: D43DNwvw0MIG2rUW/X/ET6wkUABdnllhKTZO04DopsE=)
3: prAX8QK9sJ83-_8sb5b9uyxyLB0.roa (hash: MGpYm8TiAMHtR6UX1RiE9OEkX3HH/xl2rU9chl3K2sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:fc:79:c4:1c:8f:28:e4:e6:ce:0d:7a:1f:77:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Jul 27 01:01:05 2026 GMT
Not After : Jul 28 01:01:05 2026 GMT
Subject: CN=961964acec606d661abec84b9e91e07c45eda8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5b:c7:c4:3d:48:d8:56:80:02:a0:71:57:1a:
da:bc:95:7f:fe:a8:43:e5:ab:5c:26:1e:50:b2:8b:
f6:b1:e6:39:37:f3:fa:5f:a8:58:b3:f1:fd:d0:dc:
8e:22:26:0f:12:70:3d:59:b4:0b:ca:75:fa:37:1f:
af:b9:f2:42:19:a0:61:d7:9d:b6:93:1b:f0:28:47:
cb:0e:0c:68:76:f8:b8:00:1e:76:00:1d:5e:c4:f5:
05:68:47:cb:61:ac:16:62:3d:49:56:c4:d5:49:3d:
8b:15:2f:66:82:29:43:ed:cd:ba:f3:df:2f:a5:d2:
18:53:91:1b:b9:80:ab:80:1d:db:fe:17:f4:16:90:
0e:d3:65:84:25:7d:18:85:19:31:dc:dd:c6:fe:d2:
e7:58:2c:0f:f8:50:5b:0f:ba:75:b3:5f:bc:6a:00:
00:8c:83:5d:e5:df:b8:2a:83:22:1f:6d:23:33:48:
a0:af:f2:81:32:1a:bc:76:a6:5d:54:bf:97:81:89:
f6:f2:75:2c:8c:7c:44:19:fe:c5:de:75:a1:78:c9:
73:64:66:b5:df:e3:2b:ed:a2:70:6c:b8:3d:91:00:
e8:2d:31:c5:72:aa:f0:e1:17:1b:c9:0f:aa:50:17:
7f:bc:9e:92:73:1a:04:78:51:22:e6:dd:6a:d7:b3:
84:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:19:64:AC:EC:60:6D:66:1A:BE:C8:4B:9E:91:E0:7C:45:ED:A8:E1
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0c:13:98:34:ad:40:96:00:77:ec:20:e5:ba:95:96:47:94:
b7:53:4b:88:43:34:7f:1f:c9:78:7f:4f:81:f4:bc:c3:1e:73:
53:77:88:be:7f:c8:36:ff:1b:2a:ea:a1:03:39:54:9c:08:3b:
86:cd:5d:cd:d0:f0:bd:bf:01:12:c2:bb:e2:e1:25:c9:5a:65:
22:63:5a:35:34:e7:be:65:1f:a4:0b:03:35:19:9d:94:19:5e:
00:02:32:51:f4:7d:9f:06:2e:2c:d0:56:31:01:74:c9:47:68:
91:d0:62:28:ac:1f:0a:ed:7f:f8:f1:ea:1f:cb:2e:a5:be:cc:
f9:01:18:0d:50:76:7f:55:e1:eb:de:91:7b:62:8b:93:67:1c:
22:a9:02:70:02:c0:86:dd:48:e3:4f:20:c1:32:bf:ae:57:a3:
29:c4:ef:28:29:4f:e2:a6:f0:ca:0e:13:38:16:ef:30:8b:3e:
14:41:3e:39:54:f2:5a:ef:dc:09:78:9a:b1:e7:d8:c9:2f:8a:
29:1b:7e:c5:59:e5:e2:74:dd:ca:2a:f3:b9:33:91:8f:9d:9f:
a3:9a:c5:43:bf:2c:63:56:a1:35:01:18:b4:56:f6:25:1a:8b:
b3:08:e6:60:09:64:b1:a8:7f:f6:01:1a:8f:8a:93:97:de:ec:
aa:e0:05:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:53 2026 by rpki-client