Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
File: yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft (raw, json)
Hash identifier: BVW4mY4YI6b67o03txK8nCG9aaDghyryqmoocWmu/ec=
Subject key identifier: 67:05:C9:C9:62:EC:5F:0E:17:E6:31:13:46:6E:77:9D:A2:73:F8:0E
Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Certificate serial: 01A059D692C5E6B1EF7D3DA83A1FEA7915AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
Manifest number: 074C
Signing time: Mon 31 Aug 2026 22:00:29 +0000
Manifest this update: Mon 31 Aug 2026 22:00:29 +0000
Manifest next update: Tue 01 Sep 2026 22:00:29 +0000
Files and hashes: 1: 4vtYbcZI2E5thjXIkhV7Fuwh_C8.roa (hash: teuW6Uqx1V2y5WJ8UJGDWcpw8cpD9xgHQ0Zadlt/dZ8=)
2: 9Px8z48R321lmmBfJpYZPXnmcpo.roa (hash: 2fda7ZTjyIH4HX9HuDuDyOX1MzL7aXtB6nPUNzP2md8=)
3: yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl (hash: yj/KpZGlcXW+zJiVcNrpGo8FpqoWzEiClBHkSizGlig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:d6:92:c5:e6:b1:ef:7d:3d:a8:3a:1f:ea:79:15:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Validity
Not Before: Aug 31 22:00:29 2026 GMT
Not After : Sep 1 22:00:29 2026 GMT
Subject: CN=6705c9c962ec5f0e17e63113466e779da273f80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:41:34:a0:1f:a0:70:ca:93:3e:47:67:8b:01:
1c:73:8a:1e:47:fc:9d:c0:b7:07:5d:e1:fd:27:34:
ca:a2:a2:30:3e:cc:cc:a3:ba:d5:67:55:b2:3b:30:
e2:36:a7:f3:e0:1d:d6:03:3f:46:9e:61:93:83:78:
05:60:c5:05:e3:ab:62:ae:d5:40:e5:5e:19:9a:53:
d3:4d:bd:3d:b0:18:18:58:35:41:52:5b:30:58:1e:
7f:e6:83:bb:81:27:94:ca:fb:7e:66:cc:66:ca:0f:
94:f7:3a:8b:fe:13:f5:cb:cb:ff:8a:1b:67:9b:e0:
0b:69:52:50:ba:25:1b:4d:a1:88:11:5d:39:ab:a0:
68:7f:95:3c:3c:c1:98:42:7a:85:d3:7e:20:82:60:
18:1d:03:53:6b:0b:c0:8c:f7:3c:c6:7e:47:7b:eb:
22:86:19:8e:ad:14:7e:e6:a5:6d:d0:ca:69:96:5b:
18:98:14:97:a7:c7:37:ea:d7:f5:22:84:8d:fd:a1:
08:7b:d8:c3:74:82:47:a1:87:9d:1a:74:b3:43:4b:
69:db:8e:ff:d8:23:08:fc:c2:5d:6b:3e:84:f5:ba:
24:4e:3a:c3:cc:1f:e6:75:6e:31:6d:b5:7c:48:25:
99:7f:2e:8b:13:32:bd:09:1a:a1:09:47:c2:83:12:
98:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:05:C9:C9:62:EC:5F:0E:17:E6:31:13:46:6E:77:9D:A2:73:F8:0E
X509v3 Authority Key Identifier:
keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:71:76:8d:c5:9d:23:34:ec:8d:1f:e2:b6:33:d3:49:fa:5c:
39:1d:c7:2f:2a:72:0c:37:3d:fd:db:f3:cf:81:7b:49:42:93:
8e:e5:cf:69:ef:bf:bf:cc:34:22:c0:d5:86:03:41:2a:8d:a2:
ff:bc:29:4c:9b:8c:f9:86:88:75:18:39:37:d2:5d:58:ff:f1:
6e:52:ad:a5:c5:f1:78:6d:9c:8f:b0:b1:f2:89:13:71:ea:c7:
2d:fb:1d:92:df:0f:d0:da:da:59:70:fe:88:be:61:1f:19:04:
01:bc:82:03:96:a2:db:a4:94:2f:89:15:2d:af:de:ef:2b:af:
61:db:92:11:a5:b1:12:23:1d:eb:74:e1:d2:b8:ed:eb:59:e6:
f0:7c:0a:0d:36:18:f0:b6:ae:39:d3:08:ce:26:73:5c:c2:c3:
bf:34:c1:bc:ef:66:d1:33:12:2d:10:89:f7:6b:29:3b:da:66:
8f:b0:40:1a:c3:27:d7:49:cd:54:0d:6b:17:cc:83:d7:d0:a5:
8d:9c:c4:d1:c5:16:c4:63:cd:20:91:90:3e:29:85:3d:4a:b6:
e2:48:07:48:50:c0:85:88:49:58:bc:36:a0:b4:cc:4a:8a:b2:
61:ba:17:0d:f3:69:95:19:5f:58:5a:b2:8c:8f:44:6a:74:90:
fd:e2:9e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:50:35 2026 by rpki-client