Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File: yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier: q4KKR/NsaMiAhbNCm5D6K9DG73kGdroRj4jSJIjUtm4=
Subject key identifier: 5C:62:AC:25:92:7B:30:33:28:3F:D4:84:15:6B:F7:F3:7D:25:EB:DF
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 019FA30540A746BE5D9A0291809C9897CFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number: 136F
Signing time: Mon 27 Jul 2026 10:00:58 +0000
Manifest this update: Mon 27 Jul 2026 10:00:58 +0000
Manifest next update: Tue 28 Jul 2026 10:00:58 +0000
Files and hashes: 1: 2N5xpRJZNXE8KzyralBufJCFAGk.roa (hash: Gqf6uvdiXISfNhnWADuNcf6vyOowNUUoaBaYKh4kdEc=)
2: sO9pZ5FwOgUvmAOslbboRpxPFe0.roa (hash: VzoA5+Tb86N+TDJqseTFSnd7RnKY9v3RHbW5iUpaNO4=)
3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: LhYZJYXpm478xmHBwqv0dpRsA/5Yc6uLo/7OGYzYsoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:40:a7:46:be:5d:9a:02:91:80:9c:98:97:cf:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: Jul 27 10:00:58 2026 GMT
Not After : Jul 28 10:00:58 2026 GMT
Subject: CN=5c62ac25927b3033283fd484156bf7f37d25ebdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:83:69:75:f5:57:7a:cf:75:21:93:c4:d6:
ea:fe:ad:8a:d1:18:2a:21:f1:15:3f:30:fd:99:ef:
d1:39:d9:ef:a1:7f:9f:8e:c4:e4:26:1f:ea:83:f7:
ae:0a:8d:0c:47:06:5c:fd:d0:f0:ad:b8:17:8c:3a:
c3:92:fc:33:93:32:3a:88:93:5e:bc:53:33:8c:77:
a8:49:c9:10:45:95:68:18:2c:37:26:80:f2:f6:2e:
68:07:9a:88:1d:23:03:3d:c1:51:bc:72:67:7d:31:
d0:d9:35:5c:55:f3:02:eb:6a:ac:af:25:e1:c9:68:
f7:12:ac:2b:0a:b6:c9:d0:4e:ec:95:b4:7b:b5:05:
5a:0a:ed:f8:96:7b:08:d7:00:b5:db:99:5b:4f:ad:
e9:42:89:22:82:c7:56:64:83:20:29:4e:0f:2e:ee:
2f:b8:5f:8f:88:5d:48:55:3d:26:bf:d1:b3:a9:fe:
9b:23:fc:db:b0:50:7b:ef:c1:1c:28:2b:a2:59:4d:
30:b7:f6:52:23:62:5a:0a:c5:f7:43:6f:74:2f:79:
fe:a6:c5:cd:84:31:63:ac:be:5a:d8:77:92:47:c9:
18:f8:46:01:8d:1d:0f:96:96:d0:8b:b2:50:4a:e6:
bd:0d:be:ca:3c:5b:94:6d:c3:fc:0d:62:79:79:5c:
64:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:62:AC:25:92:7B:30:33:28:3F:D4:84:15:6B:F7:F3:7D:25:EB:DF
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:80:bc:e4:d2:bd:f2:9b:4e:3a:09:f7:bf:ea:c4:90:cd:47:
36:6b:53:c1:ae:c2:28:8c:88:c0:5c:11:58:86:71:86:61:a3:
8d:3b:1e:5a:8f:ae:82:a7:b3:e7:06:fe:c7:c6:1d:66:f6:6d:
af:39:4b:f7:2a:d2:d7:6b:60:37:4b:81:7e:8d:7b:ad:8f:ae:
9d:72:49:2c:68:ee:9f:79:71:37:e9:28:2e:fd:e7:dd:5f:27:
7e:cb:a9:e4:77:e1:7a:b5:00:ec:6a:84:51:72:82:2d:82:88:
5b:cf:0e:c3:7a:dc:ea:c7:e2:17:20:8e:bf:8a:7c:db:7a:98:
3a:54:88:4b:c4:55:ee:5f:52:2d:ef:4b:fe:79:87:9a:d1:86:
be:7a:34:ea:0a:0d:33:62:6c:26:53:94:ea:fc:69:88:88:9b:
a1:30:df:e2:9d:8a:1c:7f:4b:9a:dc:ad:70:3d:93:0e:77:39:
85:eb:27:6a:13:19:32:17:d0:4b:5e:d7:2d:ce:52:44:d3:4a:
80:63:44:fc:a1:f0:ab:57:56:bf:15:d5:e2:60:75:8d:16:c1:
08:2d:4a:86:9c:06:6d:3a:6f:b9:f2:7a:d5:4a:f2:35:90:83:
c9:6a:05:dd:af:55:bc:c3:6c:63:b9:d7:5c:4f:48:30:60:3e:
f5:e7:07:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:50:42 2026 by rpki-client