Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
File: YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft (raw, json)
Hash identifier: tBLFcrgn6Mb2FHL6ofybsYQsIRM84R/R/yl+Aj7VqHg=
Subject key identifier: 96:F5:44:E5:5E:63:54:7C:10:2F:37:ED:05:F9:FC:93:4E:93:55:FE
Authority key identifier: 61:F8:0D:83:D9:48:E2:48:B9:68:60:66:76:60:7B:84:70:E2:E4:1C
Certificate issuer: /CN=61f80d83d948e248b968606676607b8470e2e41c
Certificate serial: 019F190CC50E3F33E0E36E44657D2C788859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
Manifest number: 20
Signing time: Tue 30 Jun 2026 15:01:35 +0000
Manifest this update: Tue 30 Jun 2026 15:01:35 +0000
Manifest next update: Wed 01 Jul 2026 15:01:35 +0000
Files and hashes: 1: 1-LvrevNxn8xjvxwWO9shI6PuFvU.roa (hash: iqWesMjsdrjmX1g6QE9vIbNV9BRrg4iuwDL5XHq0ynQ=)
2: YfgNg9lI4ki5aGBmdmB7hHDi5Bw.crl (hash: CFtHs89t02ndCEjVgUegGtgVt/l+k0dom4K+cQ4pSoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:c5:0e:3f:33:e0:e3:6e:44:65:7d:2c:78:88:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f80d83d948e248b968606676607b8470e2e41c
Validity
Not Before: Jun 30 15:01:35 2026 GMT
Not After : Jul 1 15:01:35 2026 GMT
Subject: CN=96f544e55e63547c102f37ed05f9fc934e9355fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:56:61:d3:de:a2:ea:c4:ca:ec:2e:a4:8d:f9:
91:8c:99:ad:64:bd:96:38:a2:1c:90:a4:a1:0c:9e:
53:66:d7:97:82:cd:f9:a6:72:17:4b:36:be:d9:9a:
76:ce:27:f4:52:c6:e2:59:22:35:f8:3f:a0:99:73:
ae:c8:49:62:0b:b5:e1:c9:4f:42:88:8a:08:4f:d7:
2f:cd:2b:44:2a:01:2e:50:2b:89:55:a3:f5:03:72:
d4:7e:4e:e5:b4:5b:71:24:d0:27:2b:36:a5:77:2d:
8b:8f:b2:97:35:16:40:4e:54:87:e6:71:d9:71:7f:
8d:d1:50:e6:50:ed:ff:d7:ec:94:54:6a:39:bf:28:
2c:a7:35:ab:4d:89:f7:db:bd:fa:08:de:45:9c:28:
9e:87:b5:4e:af:2d:49:4f:94:4d:0c:93:f7:64:7d:
2e:5f:cb:97:53:99:e4:bc:1f:e6:2e:8e:60:8b:dd:
ed:07:ec:d7:af:6c:cf:5a:66:cb:58:59:63:32:e4:
9e:0e:13:f5:ef:30:b9:b9:aa:ec:df:a2:db:ab:3e:
78:20:47:95:cc:03:fd:2b:05:e5:ff:09:f7:df:e1:
9b:0b:9a:7a:02:58:6e:6c:51:5a:9f:96:5b:78:f3:
e7:9d:f8:a0:8f:60:03:e3:ef:9e:4f:a3:ed:f3:56:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F5:44:E5:5E:63:54:7C:10:2F:37:ED:05:F9:FC:93:4E:93:55:FE
X509v3 Authority Key Identifier:
keyid:61:F8:0D:83:D9:48:E2:48:B9:68:60:66:76:60:7B:84:70:E2:E4:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7b:66:ff:df:65:c5:f8:fc:a8:d7:45:53:17:e5:bd:79:d1:
a7:b8:79:ea:6d:4e:b8:a9:2e:06:01:e7:00:41:5c:24:c2:4a:
0c:c7:2c:b1:a2:74:25:61:f9:a2:7e:a2:01:63:4c:36:f8:da:
64:c4:5c:e2:1c:72:f4:1c:17:43:ab:d7:25:43:8d:f4:27:60:
bc:80:55:32:58:3d:7c:8d:8a:0b:8f:62:67:95:e8:c4:0f:95:
f0:84:ce:92:79:dc:7b:e4:71:bc:6f:82:51:aa:b6:da:88:54:
d4:8f:7a:18:92:d1:e3:6c:d6:0a:6c:15:d6:cd:79:b9:c7:92:
0c:85:c8:95:e4:24:3f:d7:b2:25:64:e3:8f:23:d4:16:26:f9:
45:35:b5:4d:27:8b:29:e6:42:2b:9a:21:26:44:88:28:93:a1:
f0:61:00:d3:80:4b:47:75:92:6a:fe:92:6c:93:ae:2e:6e:2f:
a0:f8:20:67:11:89:e6:09:f8:72:ed:c1:23:5b:2e:56:5f:63:
ef:d6:42:bc:d8:5c:89:2c:d3:d6:c6:aa:07:63:da:28:dd:dd:
22:66:cf:2d:43:3c:43:44:34:56:42:f8:fa:b0:65:97:44:8c:
9a:f1:c5:4a:65:82:55:d4:2e:ce:36:d5:e4:8d:06:62:d1:ad:
97:41:9e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:17:14 2026 by rpki-client