Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: a79Wov7oB9vEhXzYxczvGp9gRnmKMAywXAFaqZsohMM=
Subject key identifier: 34:3A:8E:17:72:D7:55:7A:FF:61:4D:22:9F:79:78:90:9A:F9:D5:93
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 019F9EF18547E0F73821D873C58ED738306C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 1193
Signing time: Sun 26 Jul 2026 15:00:56 +0000
Manifest this update: Sun 26 Jul 2026 15:00:56 +0000
Manifest next update: Mon 27 Jul 2026 15:00:56 +0000
Files and hashes: 1: txC54j_S7HZrQJFinO7KZYt-RYQ.roa (hash: Brb/AGg54bXB31WxKutqNfmuYrMVTPjvpdr/gdDFZQ0=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: Ip1FIapfhp/ZU0iO2Ta8w7n0af9Ct5lESEHXz/jkwk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f1:85:47:e0:f7:38:21:d8:73:c5:8e:d7:38:30:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Jul 26 15:00:56 2026 GMT
Not After : Jul 27 15:00:56 2026 GMT
Subject: CN=343a8e1772d7557aff614d229f7978909af9d593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:08:1f:e1:10:9f:39:2e:36:f3:0f:91:28:1c:
69:67:b8:f4:12:9e:d7:26:7e:39:7a:bb:28:1d:be:
5c:f5:9b:75:0d:8a:79:bf:d5:10:e8:1e:dc:b1:64:
f0:60:9e:bb:f0:72:73:e2:08:65:72:7b:c9:1c:bb:
d4:5c:aa:f2:04:83:4a:78:ec:5d:4c:89:66:5b:cc:
2f:12:6a:8d:a1:d9:33:b8:63:59:63:b8:20:3d:1d:
55:43:7a:69:94:fb:33:4d:20:ac:3d:11:73:67:36:
64:c9:06:ec:35:c7:90:ab:ef:be:08:73:44:a6:36:
a5:b4:c3:ea:71:43:cd:f9:7d:68:95:68:50:f8:16:
f1:12:a6:54:86:a7:91:f6:38:b2:27:f0:fd:ea:d1:
d8:f5:e9:ef:e2:cd:49:99:5f:6e:3e:d7:00:3f:e0:
3d:46:b8:d5:b6:7d:90:5d:a6:67:8a:1f:00:bb:ad:
d4:48:f5:09:5d:3c:86:72:01:55:9f:92:dd:b6:5c:
a2:4d:ee:cb:82:fc:04:6f:a6:69:92:05:bb:22:e2:
e3:80:a9:6f:65:12:55:da:bf:90:ee:c8:72:a4:54:
05:94:a0:8a:59:ad:2c:dc:85:35:88:b8:92:6d:59:
84:0f:e6:f9:1e:e7:58:23:3e:9b:d7:c7:f5:2b:0a:
97:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3A:8E:17:72:D7:55:7A:FF:61:4D:22:9F:79:78:90:9A:F9:D5:93
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bc:bd:e4:46:7a:6c:8f:68:40:04:a4:22:e5:35:d5:c6:b0:
55:6b:cf:c6:30:78:ac:5c:78:d4:f9:b6:1e:28:2c:dd:65:03:
95:7f:86:15:c4:67:84:56:2b:02:76:0c:0d:5d:4b:ad:0c:8a:
84:4e:0a:87:40:bc:56:a0:87:d5:32:82:02:0c:bb:20:13:fe:
0a:8a:b8:8a:e8:87:15:8e:6c:eb:2f:1b:b8:e9:4b:16:fb:5a:
89:41:dd:26:4b:5f:d2:e6:e2:75:d3:d3:82:b6:60:f2:b5:69:
6d:2b:04:8a:54:c3:7c:88:cf:76:fc:5f:5f:4c:c3:45:97:f7:
ad:b0:76:58:22:f2:92:13:52:21:8e:68:d3:4f:69:ef:d0:25:
ee:09:3f:42:f3:fd:16:b8:46:ba:76:69:da:1b:38:18:d5:74:
1b:06:b2:62:31:9e:56:8b:80:e0:3d:a8:2c:56:da:90:a4:5b:
04:6d:50:18:53:ea:80:d0:48:d9:3e:b4:8e:e6:7e:90:bd:98:
31:a4:37:c4:f5:32:e7:3c:fe:55:ec:a0:ed:79:a1:97:e8:82:
52:bd:36:f1:db:85:bf:3e:8b:df:87:23:a5:e3:17:0e:8a:45:
5e:45:ef:43:7c:4b:b4:e1:45:88:22:1d:bc:ca:ac:36:fd:5d:
51:76:1e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 16:59:02 2026 by rpki-client