Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
File: ym3NrZkpBFbG18GOscBY2UEIiAE.mft (raw, json)
Hash identifier: 4Ajux+PUXNnTfKM2fTgSy8XC5qwhIjlOu0EHdmT/Ccc=
Subject key identifier: 7F:08:36:15:0B:13:C6:33:39:98:19:81:F9:B8:60:AB:32:12:4B:3F
Authority key identifier: CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
Certificate issuer: /CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Certificate serial: 01A002B8F4A35753FEBF4A979D784BB44924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
Manifest number: 19A6
Signing time: Sat 15 Aug 2026 00:01:10 +0000
Manifest this update: Sat 15 Aug 2026 00:01:10 +0000
Manifest next update: Sun 16 Aug 2026 00:01:10 +0000
Files and hashes: 1: bG2ai37iVGCdW98mBInWrIrYPA0.roa (hash: xkK4nEMctXQLAAuz2jXwdJcPBigpmy2jrTbYqyPGIj4=)
2: ym3NrZkpBFbG18GOscBY2UEIiAE.crl (hash: LOjkeQQRIOfpowMMJi+0DRVaygeXEt30tDtHn9eBksE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:f4:a3:57:53:fe:bf:4a:97:9d:78:4b:b4:49:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Validity
Not Before: Aug 15 00:01:10 2026 GMT
Not After : Aug 16 00:01:10 2026 GMT
Subject: CN=7f0836150b13c63339981981f9b860ab32124b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d6:fd:b8:fd:0e:7b:17:e5:4b:2d:43:d2:6a:
ed:54:ad:06:f7:95:54:ec:60:0f:b3:86:c4:0e:e1:
f4:69:03:15:d7:47:a4:38:ab:c1:74:3d:14:ab:b5:
0d:40:14:1d:a3:7f:be:04:bc:cd:06:a0:a2:37:1a:
bb:48:8b:9e:d1:a0:a9:c7:aa:59:00:95:f0:c5:d6:
e8:37:be:c0:6c:e2:c9:47:1c:6e:03:f2:c7:60:23:
99:3f:54:81:6f:78:01:ce:2f:35:44:57:a4:c0:77:
64:e7:08:15:78:aa:16:35:98:a8:78:97:73:15:8f:
4d:b1:2d:94:71:5b:67:9b:03:e3:e6:02:77:c8:1c:
f1:52:22:52:98:d3:2f:6e:6d:03:7a:3c:f0:1b:86:
a2:ce:5e:31:77:7a:36:79:eb:2f:55:b2:8a:44:bc:
55:fc:9d:06:0a:0f:aa:a4:a1:b6:ac:3a:cc:0c:40:
04:b0:82:7c:50:45:39:13:9f:de:74:8b:3d:4d:6a:
58:d5:ee:64:01:92:4c:06:6f:23:da:24:7a:07:1d:
60:2e:c7:8b:52:14:70:22:3c:09:32:d7:23:23:c5:
bd:f6:2c:e5:a5:3a:54:23:26:38:19:9b:53:60:8f:
27:a7:f4:03:a4:cb:c1:ac:6c:27:d5:24:0a:96:28:
47:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:08:36:15:0B:13:C6:33:39:98:19:81:F9:B8:60:AB:32:12:4B:3F
X509v3 Authority Key Identifier:
keyid:CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:59:1c:32:fb:6d:d5:5c:65:ce:10:64:29:f3:9a:88:29:4b:
ac:cd:6d:7a:1e:0a:b9:af:20:c1:9d:e3:af:79:6b:57:14:bd:
22:af:06:88:98:95:e3:4b:ff:33:cd:4a:94:e7:81:c1:5b:b4:
66:fc:f0:7b:03:69:a7:93:a0:80:c5:0a:0f:d8:e8:d2:b9:22:
a9:31:3b:59:30:06:c8:7a:15:c5:b6:2d:d2:8c:dc:0a:7f:39:
d8:f3:b3:e4:20:95:d4:59:5e:8d:c3:a5:52:a2:83:fa:03:70:
ff:f4:b5:35:fb:d7:3c:f5:2d:3c:ff:5c:71:c5:9a:d5:40:b7:
47:75:0b:76:f2:66:1d:8e:bd:29:c1:bf:2d:42:78:0a:dc:95:
3c:57:d7:6e:56:e9:1d:cb:d9:4e:71:58:5f:99:ea:66:a8:c8:
7e:57:10:16:47:7f:b8:d2:b9:22:81:c1:cb:63:fa:11:29:2e:
09:58:79:59:3b:f9:69:b9:0c:c5:a1:b3:73:66:3a:8c:09:af:
62:70:d2:ec:49:e2:3c:1a:89:14:ba:9c:dc:79:92:ce:27:54:
87:c2:93:06:ea:c1:18:5b:4d:f6:67:c9:7a:fb:d4:e9:2b:c4:
5c:14:a0:5a:db:19:02:27:7b:8f:c2:7b:f5:d4:0f:3b:07:ca:
99:b4:c5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:23:48 2026 by rpki-client