Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File: yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier: FY9fG4EF30awhr37YO0hjZZ/0utyhJmnugzYVAdTZ0I=
Subject key identifier: 1C:04:41:21:12:69:70:01:AA:42:9D:1E:5E:80:67:E8:C5:47:E0:36
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer: /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial: 019F81FADE322FD5838CD3ED1971AE1DD08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number: 0531
Signing time: Tue 21 Jul 2026 00:02:09 +0000
Manifest this update: Tue 21 Jul 2026 00:02:09 +0000
Manifest next update: Wed 22 Jul 2026 00:02:09 +0000
Files and hashes: 1: TTJb2RAURlKPWvYkNwaWkyT09qY.roa (hash: lOE8Ruv9RewYP7cpvq3aqRSVFYYOIUiYC9/cShdcpDM=)
2: Y6tlWJsn2-eO2pGWaQiPAUkPW7g.roa (hash: uARQVpL4FEL+I59HsU9UtUVf5F4ZPPjEs1mpi4DNxXs=)
3: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: eSkRATQFvN0yswyBld7xi0je81BR+GJ72AhrNW9YE88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:fa:de:32:2f:d5:83:8c:d3:ed:19:71:ae:1d:d0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Validity
Not Before: Jul 21 00:02:09 2026 GMT
Not After : Jul 22 00:02:09 2026 GMT
Subject: CN=1c04412112697001aa429d1e5e8067e8c547e036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:6f:32:7e:a9:28:15:3f:77:4d:65:99:21:
5f:7a:4f:b7:c0:22:5d:c4:de:cc:41:c4:90:bd:a3:
6a:3f:93:4f:6e:6f:e6:1f:13:87:59:81:5a:09:c0:
4c:c3:02:d8:7a:6c:84:52:54:54:5d:ba:b3:46:5e:
16:d6:ce:df:c9:37:b2:c5:c7:26:fa:1b:d4:80:2f:
fa:42:9d:16:65:b0:d5:8d:5c:a1:5b:90:f9:df:0f:
2e:95:3f:3b:50:9f:62:85:7f:0c:4f:94:60:0e:f7:
86:92:4b:9b:07:78:9a:46:68:d3:64:f3:81:7a:d4:
1d:05:68:25:b1:80:48:11:41:f9:f9:97:06:bc:c9:
da:ce:47:9e:3c:98:3a:4b:8c:c7:86:0c:c6:53:1b:
ba:a8:81:5b:f2:71:68:c8:c8:b2:cc:ee:9d:79:ee:
fd:6e:b6:ff:67:2a:cb:72:9b:8a:4c:ea:95:08:27:
24:05:84:b9:18:ee:cc:95:13:75:03:eb:7b:49:85:
1f:33:76:f5:a9:35:56:d3:8c:b2:c6:a4:da:d3:02:
d3:f8:08:48:bb:a7:d7:81:3a:af:18:72:e8:3c:96:
d8:98:66:26:f6:3a:0f:d5:64:da:87:c6:1e:cf:a6:
fd:a6:9c:69:70:12:a6:64:65:69:14:d4:62:45:9c:
95:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:04:41:21:12:69:70:01:AA:42:9D:1E:5E:80:67:E8:C5:47:E0:36
X509v3 Authority Key Identifier:
keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4f:ca:a2:73:d5:b3:1e:65:08:7d:da:62:3a:bf:5b:a2:e6:
99:d0:cb:46:c2:dc:28:2c:b2:86:66:3a:3d:b4:1e:a2:c1:44:
0f:02:3c:5d:bf:4b:1b:01:39:a2:30:38:c8:dc:1f:50:a4:3a:
ef:7b:8d:01:0a:e4:73:d8:2f:fe:61:68:6e:a2:d3:b0:49:44:
fa:22:ed:da:5b:6e:43:fb:28:02:dc:dc:e4:b5:96:81:bc:de:
f3:48:ff:fc:0d:9d:cd:a1:10:3d:f1:29:1d:c1:ff:d5:18:71:
bd:99:d5:79:ed:27:81:fb:75:80:95:e2:f3:69:22:c5:56:8b:
31:38:d8:fa:b5:94:b4:8a:d7:b0:ef:34:6d:55:47:ea:49:9a:
42:41:79:d6:36:29:16:0e:33:6d:c9:f7:e2:ca:52:46:e8:af:
f5:ca:a7:a7:66:4a:e2:61:31:49:17:7a:7c:95:ea:b2:aa:23:
f9:ec:79:be:a0:f0:b6:9d:ae:31:fc:0c:b0:8f:63:f4:e2:0f:
b3:cb:c4:66:4c:9e:2d:40:3e:fc:71:3a:53:98:89:1d:8c:df:
7e:9e:b0:ea:2a:7c:e7:95:16:54:9c:ad:98:27:27:be:56:b1:
e1:76:b5:35:f0:42:14:44:56:70:b6:78:dd:3f:b4:b8:6c:65:
4f:a1:35:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:49:56 2026 by rpki-client