Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier: 0Irat/aGf9WM8Uatf3ITC0mbayHZiRqyOiTU7uKP8zI=
Subject key identifier: BB:63:D5:78:54:10:32:86:88:9E:10:E2:8A:AB:09:E6:BE:98:31:2F
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial: 019F3C3D94D1E3C9DF6AD91B4EF6A2FDC12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number: 14BA
Signing time: Tue 07 Jul 2026 11:01:36 +0000
Manifest this update: Tue 07 Jul 2026 11:01:36 +0000
Manifest next update: Wed 08 Jul 2026 11:01:36 +0000
Files and hashes: 1: _V1LSsZtamsE4WXP60Yw8QNvv70.roa (hash: 86294W5FbZlicyPxaf1Bh5Vh3kJ1iu3Y1KxTGDfYWAk=)
2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: 14pSpvkq2nOOMkdxXhpDz83ut1LUOI8aeXflLeGtQoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:3d:94:d1:e3:c9:df:6a:d9:1b:4e:f6:a2:fd:c1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Validity
Not Before: Jul 7 11:01:36 2026 GMT
Not After : Jul 8 11:01:36 2026 GMT
Subject: CN=bb63d57854103286889e10e28aab09e6be98312f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:aa:94:fe:ad:09:f2:c8:95:7d:f7:99:6b:
94:30:4e:86:98:71:22:f4:b3:6d:2c:96:a6:76:df:
20:ae:cf:04:57:0f:24:2c:67:a3:ee:f7:7f:3d:2a:
5a:9f:af:c8:a9:bc:9f:97:e5:e5:db:e4:7e:6e:b3:
0b:35:6c:88:fa:6c:e1:bc:88:c4:73:22:27:1a:6c:
6a:49:f9:66:d6:2d:aa:16:45:1d:35:55:fd:b3:3c:
94:f1:2a:66:60:9e:6c:89:06:ed:27:b2:2a:aa:a7:
c6:67:1e:f6:08:6b:60:81:2d:e1:4c:9f:65:1b:d6:
08:41:e6:0d:c7:84:b7:d4:a7:49:80:77:59:50:96:
e6:2f:ce:2d:f8:18:ae:ff:b4:f3:80:55:5c:35:91:
9e:20:81:8d:18:86:19:cf:c8:7e:6a:42:4c:00:c5:
58:d8:21:da:ed:fd:ca:08:ea:83:c7:88:e2:13:cc:
9c:4f:f0:e6:fd:34:93:68:37:a9:15:70:a0:00:3f:
c6:4a:27:eb:59:a1:fb:5b:4e:23:fe:49:ed:45:4d:
d8:6a:d4:d3:9c:35:3d:a0:cb:f5:f9:6b:e9:98:ac:
8f:70:27:76:d3:e6:2c:0c:11:63:4c:41:97:62:08:
77:38:e0:fa:f4:01:e7:58:4c:76:81:b5:f4:dd:29:
f1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:63:D5:78:54:10:32:86:88:9E:10:E2:8A:AB:09:E6:BE:98:31:2F
X509v3 Authority Key Identifier:
keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3b:83:16:25:35:7f:ed:5b:85:c1:64:e1:87:1f:af:38:ec:
f0:d5:e2:72:fe:e7:8f:dc:da:36:aa:24:94:46:6b:02:21:ea:
c4:99:0e:2c:1e:7c:f1:90:9c:da:e3:61:4f:6d:03:35:f8:e5:
81:e5:3d:e6:95:59:44:6e:dc:36:8e:af:6b:ff:56:0b:8a:88:
8f:8d:2d:11:f9:79:fa:b6:bf:37:6b:93:fb:17:ec:65:a6:27:
10:a3:31:68:e6:52:f3:ff:e5:29:df:c8:db:32:c7:58:8c:89:
70:9f:d4:5e:53:9e:0e:82:42:f2:b7:d9:f9:de:8a:c1:64:6f:
28:46:ba:a3:2b:8e:88:1f:8f:d6:65:f5:4c:21:e6:e3:48:c1:
84:0a:9e:06:7d:ca:44:dc:db:c2:11:0d:d3:fe:06:2d:a1:d4:
6d:03:2d:38:30:6f:6a:15:40:fb:32:ed:00:b3:37:44:b4:e9:
1b:74:d0:bd:77:9c:cf:ee:88:e6:8b:af:66:7d:38:8c:2a:2e:
0d:80:77:bd:e9:07:cd:40:93:e4:23:f8:d3:46:41:2e:41:f1:
a2:b3:44:40:1f:7c:3e:ef:2a:9c:2c:da:82:93:e0:ec:d7:6e:
65:a9:6c:9c:56:6f:d7:c0:0c:bc:09:c5:7c:e8:8e:e3:88:db:
07:64:3f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 19:48:42 2026 by rpki-client