Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: lq532iTiRC0vS8YGRyGDaUEjZk4Usu5yCwqP0rqaSDg=
Subject key identifier: 3C:52:10:3C:AC:83:D8:4F:72:90:C6:49:BB:5E:CB:F4:0C:5B:EA:80
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 019F9D03222D4995CCFB23BE9D95FCEB58C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 1192
Signing time: Sun 26 Jul 2026 06:00:55 +0000
Manifest this update: Sun 26 Jul 2026 06:00:55 +0000
Manifest next update: Mon 27 Jul 2026 06:00:55 +0000
Files and hashes: 1: txC54j_S7HZrQJFinO7KZYt-RYQ.roa (hash: Brb/AGg54bXB31WxKutqNfmuYrMVTPjvpdr/gdDFZQ0=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: GX/VrL9N+xpSdeFOuoGdxg9OYBmkJbDAepegH0ppOIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:03:22:2d:49:95:cc:fb:23:be:9d:95:fc:eb:58:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Jul 26 06:00:55 2026 GMT
Not After : Jul 27 06:00:55 2026 GMT
Subject: CN=3c52103cac83d84f7290c649bb5ecbf40c5bea80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:40:e4:92:ae:72:98:86:38:34:00:db:2f:
89:07:34:d1:c5:46:4f:c9:13:35:94:5d:50:7d:f9:
4d:c3:df:67:52:81:b8:7d:8c:49:b3:41:c6:26:6d:
f6:29:06:ce:59:48:a9:77:20:e6:3d:01:1b:91:73:
8a:be:15:f6:bd:d3:90:07:2c:94:d6:dd:90:36:b4:
9a:31:25:bf:d1:03:ea:64:cb:05:62:f9:15:e5:67:
59:b4:3b:1a:df:60:84:02:e5:2d:49:b4:77:fc:84:
de:5c:71:09:6d:58:52:26:20:f1:aa:a3:83:6a:53:
03:25:46:de:d3:0f:ba:63:9e:01:7b:7d:b9:0b:6c:
f6:f4:29:22:b6:c5:f8:01:21:fa:1d:06:0b:0b:6f:
6e:de:c5:a1:98:ce:7f:47:70:0a:9a:d0:77:6f:f7:
48:d8:5c:55:56:7b:f4:92:8a:3e:be:3d:9d:f2:f8:
70:e2:81:fb:4c:77:f2:23:26:15:ea:eb:d2:9c:4f:
f8:ce:21:7d:93:5b:26:1c:37:69:aa:a4:39:b4:58:
69:9e:0c:23:40:55:49:9f:91:37:17:df:69:da:87:
78:77:c6:e3:d3:c7:74:81:fa:9e:f7:d8:01:29:09:
36:f1:ce:8b:8f:93:9d:21:86:77:6a:84:f5:7e:77:
a7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:52:10:3C:AC:83:D8:4F:72:90:C6:49:BB:5E:CB:F4:0C:5B:EA:80
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:65:2a:0e:3c:39:f1:d4:b4:19:e3:d5:ce:f8:d2:b8:65:bc:
ca:43:c6:f2:c7:7c:f1:73:6c:1c:bb:91:e1:fc:a1:b6:2d:18:
bf:ef:36:83:7f:57:9c:2d:5b:74:bf:97:a1:bd:81:70:f9:de:
55:7b:35:ae:22:4c:7e:2f:70:fd:8a:15:ad:22:79:14:00:8c:
2c:e1:b1:7d:37:c4:b6:8f:58:5e:53:61:c4:d2:fc:b3:f1:8d:
df:56:c3:68:7b:1b:b0:bb:94:2d:80:3a:fc:19:fa:de:68:16:
33:1b:62:74:e6:da:14:f1:7e:43:d3:0f:75:8b:54:41:11:fa:
e0:01:4c:76:5b:ab:0c:7f:98:02:0b:91:bb:81:bb:b6:98:0b:
2e:3f:39:58:19:89:25:c5:86:e1:30:96:67:ae:d9:0e:e0:5c:
a8:8c:d3:af:6f:d5:4b:bb:37:6c:fe:70:13:99:ea:cd:a2:b7:
84:49:b6:3e:c8:3c:e4:99:b2:4e:48:77:1f:30:f6:76:6d:26:
87:fa:bc:42:42:d6:af:3c:81:b4:09:8e:1e:e1:84:00:55:ca:
09:90:4e:58:43:29:b6:e3:2c:ec:b4:d1:42:81:6c:8b:f0:cf:
d7:95:6e:27:7e:16:93:e7:82:a6:8d:5d:4b:eb:79:d6:ef:c6:
ce:86:c8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:51:23 2026 by rpki-client