Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
File: yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft (raw, json)
Hash identifier: dib5D9mFi8DXqvFFNVxziNqsOPLuvmccs5t78dtg3eU=
Subject key identifier: D3:57:F7:A0:FB:53:43:E3:1D:B3:C9:DC:3E:E8:FF:60:D2:EA:1E:9B
Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Certificate serial: 019F72196C75EF2925C66B3C51C8B2E34AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
Manifest number: 06D4
Signing time: Fri 17 Jul 2026 22:01:36 +0000
Manifest this update: Fri 17 Jul 2026 22:01:36 +0000
Manifest next update: Sat 18 Jul 2026 22:01:36 +0000
Files and hashes: 1: 4vtYbcZI2E5thjXIkhV7Fuwh_C8.roa (hash: teuW6Uqx1V2y5WJ8UJGDWcpw8cpD9xgHQ0Zadlt/dZ8=)
2: 9Px8z48R321lmmBfJpYZPXnmcpo.roa (hash: 2fda7ZTjyIH4HX9HuDuDyOX1MzL7aXtB6nPUNzP2md8=)
3: yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl (hash: psJOwny2NoU5Dc/3zNUDeHUi6Aq3vGGwUz7HdS9FIQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:19:6c:75:ef:29:25:c6:6b:3c:51:c8:b2:e3:4a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Validity
Not Before: Jul 17 22:01:36 2026 GMT
Not After : Jul 18 22:01:36 2026 GMT
Subject: CN=d357f7a0fb5343e31db3c9dc3ee8ff60d2ea1e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:98:1b:00:06:41:a1:fe:bf:22:0d:d6:c9:
fa:bb:75:60:af:c3:1b:f0:48:c2:42:9b:4f:e5:66:
f4:d5:9d:ce:d5:f2:28:7c:e0:33:1c:45:24:d2:26:
18:dc:0e:dc:a6:72:ef:99:8f:32:1c:d1:00:fa:01:
94:a1:d9:00:ae:e1:6e:be:2d:ae:c4:e7:da:fe:c8:
ca:20:46:90:77:21:15:10:97:2a:3a:13:9f:0d:1a:
96:23:d3:ac:22:0f:d3:fd:f3:02:69:1d:10:f2:96:
e8:53:5b:64:9f:2d:3b:de:a3:b3:3b:ed:ff:1e:9d:
0d:5f:a5:0b:24:41:2b:5c:ea:96:af:8c:43:37:5d:
e3:b6:b5:98:92:ad:ac:02:ef:bb:95:05:7c:19:98:
06:46:a6:7d:66:78:32:1b:bf:0c:80:81:de:7b:6f:
16:06:38:10:9d:81:25:6f:5a:db:39:4c:7c:cf:fc:
08:ca:18:c6:3c:ee:fb:4a:67:3c:cd:b0:e5:73:1c:
aa:ee:dd:2b:ec:b4:06:69:dd:9c:6e:fd:eb:03:1a:
6f:f3:3e:79:60:87:3f:9e:b1:a2:94:95:1d:ae:d5:
79:1f:4f:d0:29:58:cc:1f:c7:8c:65:7d:e2:8c:78:
56:af:a4:25:26:f3:fa:de:40:ec:5c:d0:14:f7:c8:
a0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:57:F7:A0:FB:53:43:E3:1D:B3:C9:DC:3E:E8:FF:60:D2:EA:1E:9B
X509v3 Authority Key Identifier:
keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a4:83:a7:ab:76:c9:a0:c9:6a:0f:ed:db:ba:9c:d9:13:26:
47:42:f3:5c:eb:1a:d1:00:1c:05:7d:e1:65:a6:d0:59:f2:7e:
8a:73:2d:94:fb:89:6d:c3:f2:bb:95:72:b6:a5:3d:2c:51:b1:
5f:5e:2e:e8:5b:b9:48:2e:54:b7:f3:24:76:ac:37:b6:d2:17:
3d:e4:74:ea:11:f8:af:16:fb:4c:9f:48:2d:1f:8e:b8:4e:9a:
f4:78:78:08:05:26:b7:8e:67:5b:13:85:d4:d4:bc:9c:da:4c:
e8:22:d1:e8:cb:bc:c8:b5:df:a8:c4:bc:64:1a:05:89:77:ef:
dc:e2:7d:c2:3d:94:1f:96:c3:bc:65:f6:41:65:9a:c0:0e:ce:
c1:28:90:94:1f:c2:96:a8:36:d5:ab:78:94:a9:27:be:e7:26:
88:23:5f:29:21:9a:3f:89:01:bf:c4:3c:89:da:0e:35:08:f7:
95:fa:74:7a:ac:ff:cf:14:14:b2:d9:3e:67:39:fe:f8:d4:7c:
0f:9e:c9:d0:ad:1e:d2:ad:51:9b:31:17:58:99:b4:bf:c6:25:
3e:d5:43:c1:ab:9d:91:b4:55:65:1a:57:0d:a2:2d:d4:e1:bf:
ac:11:0c:d9:fe:35:b9:2e:61:4d:ba:89:72:77:d9:85:1f:2a:
9d:41:d9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:17:31 2026 by rpki-client