Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File: YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier: GPiEaVskf/ctO2Kf3PDi2i1EpuEGXks8xaDyT1zZioo=
Subject key identifier: 5C:73:DB:A2:7B:25:30:F2:64:A3:71:54:81:E0:16:32:C7:65:FB:45
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial: 019FFAFFA4252723391EC0E70D44EEF669DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number: 19FE
Signing time: Thu 13 Aug 2026 12:01:25 +0000
Manifest this update: Thu 13 Aug 2026 12:01:25 +0000
Manifest next update: Fri 14 Aug 2026 12:01:25 +0000
Files and hashes: 1: 1iPsYqvE-ccnXaUSDoZeDrNAomM.roa (hash: rvJ3z6CrzCzgXCYWONhujj1iC92V3sl9Uzqlk+xTEEI=)
2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: iF9A+QbPb6wIad3oiRZ+iS9SDCZNkRmkief3KXhcOZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:ff:a4:25:27:23:39:1e:c0:e7:0d:44:ee:f6:69:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Validity
Not Before: Aug 13 12:01:25 2026 GMT
Not After : Aug 14 12:01:25 2026 GMT
Subject: CN=5c73dba27b2530f264a3715481e01632c765fb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:66:f4:28:82:5b:7c:9c:06:5c:e5:9a:4e:fa:
6a:15:16:93:c1:d1:0e:d5:73:d2:5d:fb:45:0c:81:
67:9e:e4:91:0d:df:aa:c7:78:2e:87:38:98:80:80:
ff:d9:ba:d8:6a:36:0b:1e:86:76:49:f2:15:10:91:
31:10:17:06:e7:af:39:f0:4b:e6:a3:4c:17:d4:95:
4d:39:91:9f:38:62:83:8c:75:15:50:ee:1b:ac:09:
cb:eb:68:68:20:0e:cb:e1:76:ed:df:6f:95:eb:fb:
ff:ff:7f:e5:bf:e0:7a:35:16:ab:80:b9:d2:38:5b:
23:79:51:71:91:ca:10:0b:0a:d9:59:04:d5:f7:4e:
37:c5:e3:25:2e:8f:2c:39:20:74:7b:1b:5f:43:4c:
fb:1e:ce:b5:dd:14:13:86:af:2b:ff:37:a0:bc:5f:
3d:bf:7c:16:4d:7b:78:a9:10:0d:c5:03:d2:a9:35:
f2:67:d6:7c:36:d8:77:35:c0:cd:b8:c8:78:b7:a9:
a0:2a:15:51:ff:b8:ec:b1:ac:c5:b7:f5:b7:6f:d7:
ad:69:c1:83:4e:21:51:1c:5b:8d:79:7f:1a:b8:69:
9a:35:10:b0:09:1a:b3:2b:49:9b:aa:45:4a:b0:41:
9e:d9:09:0e:c9:1c:2c:b4:a7:8f:1b:07:d3:4c:38:
96:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:73:DB:A2:7B:25:30:F2:64:A3:71:54:81:E0:16:32:C7:65:FB:45
X509v3 Authority Key Identifier:
keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e7:91:a4:69:09:2a:af:05:53:89:7f:98:cb:4c:10:ca:53:
84:48:87:ea:6a:99:1f:f9:d9:2e:be:7a:6c:2a:b9:46:59:ae:
4d:18:ac:65:a3:f9:5b:98:76:67:c1:4e:a9:cd:94:43:b8:e8:
a3:8a:cd:2e:22:58:67:ea:02:f6:df:32:0b:19:6d:b9:e6:70:
3d:23:b3:42:fd:fb:39:2c:11:20:43:2f:1a:34:52:07:3e:c5:
6d:73:c9:1a:c0:f3:92:c7:7f:0a:4e:04:e0:82:d3:f6:2e:df:
08:a5:e1:25:bf:92:d1:69:00:9f:4d:e6:0d:1c:3a:83:d4:84:
59:42:ce:d4:1f:45:c1:cf:61:f3:69:c0:a2:e9:d1:96:7e:25:
41:d1:c8:78:9c:e9:b2:b8:af:6b:1f:91:e6:82:cb:ac:03:c3:
ad:9c:e2:7a:75:49:1a:35:42:c1:e8:76:9b:a2:fb:29:19:ae:
2b:6e:eb:e2:a9:e3:67:b3:a5:e1:ac:50:ec:c4:f0:1c:02:5a:
e9:a3:e9:34:90:e1:8b:6c:91:74:b5:f0:a7:8e:4d:25:7e:c7:
71:9b:e3:8f:da:33:95:73:48:50:b7:bb:6a:7d:e7:e4:96:fb:
68:07:98:19:1e:2a:79:78:97:2c:87:dc:b4:89:88:da:4f:74:
47:90:fd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 15:46:44 2026 by rpki-client