Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
File: YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft (raw, json)
Hash identifier: fMRoQNFin9stACiBuLQKDy95eQV/8vLFQeVnsLVe2g4=
Subject key identifier: 41:CF:D1:63:15:E6:C9:10:78:E7:25:5C:C9:6D:C0:DB:57:05:35:BE
Authority key identifier: 62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA
Certificate issuer: /CN=6290e6b0cdd7f4986be518d890a8493153504eda
Certificate serial: 019F1153267CF54D3DE3CFE476FDF7C46388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
Manifest number: 01B7
Signing time: Mon 29 Jun 2026 03:01:29 +0000
Manifest this update: Mon 29 Jun 2026 03:01:29 +0000
Manifest next update: Tue 30 Jun 2026 03:01:29 +0000
Files and hashes: 1: Ci_joaoGd-NiKdKN-xSlHZZHjsU.asa (hash: w5DoIaMOdhrQzX31C6GNjSJG7G7L2zsb0JalX8bgFEE=)
2: YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl (hash: CTxblI0pgIEeyndxQqIqiERkm54zkBfRxjKeW8WECdY=)
3: jyKuE2XBeuJrzXa_q0tmSaVEGSw.roa (hash: /T26sfmgIuFdLLHz0t8HyV2eonc//D9WC+03dI2ySjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:53:26:7c:f5:4d:3d:e3:cf:e4:76:fd:f7:c4:63:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6290e6b0cdd7f4986be518d890a8493153504eda
Validity
Not Before: Jun 29 03:01:29 2026 GMT
Not After : Jun 30 03:01:29 2026 GMT
Subject: CN=41cfd16315e6c91078e7255cc96dc0db570535be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:e3:7d:84:22:f8:6b:4d:52:dc:82:2f:e4:
3c:fe:e4:b6:17:bc:66:05:31:7a:c5:d1:81:81:71:
6c:14:e4:10:e2:20:45:37:db:7e:37:a2:f7:5c:06:
4c:37:da:ba:f5:ef:2d:5d:73:b5:57:2a:bd:08:d7:
e8:0d:7e:12:5d:50:2e:89:f7:1a:a2:a2:2e:72:05:
37:75:92:e3:8b:39:97:95:9a:19:9a:17:41:af:fb:
d2:58:c3:38:58:92:1c:52:da:5c:5f:3b:ce:1d:6d:
30:68:12:8c:d2:9a:58:01:9f:60:bf:71:1b:88:33:
e0:83:35:10:c1:fa:e9:29:29:21:67:81:44:f7:82:
9e:a3:fc:ea:be:28:79:d2:0b:4c:94:15:80:8f:e1:
de:8f:64:68:c2:56:6b:35:7e:40:c5:55:e4:15:e8:
3f:1b:3a:df:50:9e:af:5f:e4:b2:d0:6a:66:5a:18:
89:07:ad:71:4b:7b:e4:a9:b9:bc:50:03:67:b7:81:
a4:be:80:1b:79:96:89:3e:4c:00:20:27:8a:2c:59:
5b:ab:94:8f:f2:dd:16:bd:2a:47:9c:ef:7e:b2:ce:
32:bf:ab:f9:53:6d:ec:49:a4:47:65:d4:8f:58:d0:
d5:21:2c:f0:ed:fd:1e:6e:8f:20:3f:1a:14:5a:b4:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CF:D1:63:15:E6:C9:10:78:E7:25:5C:C9:6D:C0:DB:57:05:35:BE
X509v3 Authority Key Identifier:
keyid:62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:03:3e:43:2d:cb:cd:b6:57:98:69:0a:a6:b0:75:99:49:af:
14:09:fc:4b:a2:17:17:a0:3c:54:67:78:f7:1d:20:06:a3:ac:
b2:28:d4:8f:53:37:6d:2b:a4:22:98:93:ba:69:8a:7b:df:cd:
40:14:b8:2a:fd:fc:4b:b0:bc:7d:d9:2b:10:68:2d:6c:92:4d:
b7:76:24:8f:31:91:26:96:52:3f:65:df:5b:8b:ef:64:94:02:
e1:99:28:97:b4:1a:af:fa:17:97:5b:e9:de:97:8a:9a:2b:d1:
fb:3a:bb:24:8c:b3:84:9d:68:8e:b1:2a:c9:e3:11:be:fe:d9:
aa:6c:3e:dc:ba:98:81:60:7a:19:d7:b6:35:9c:da:8a:51:a4:
77:52:50:46:f1:62:fd:6b:03:fe:c2:05:e5:22:53:e0:b6:fc:
6b:0f:55:da:5e:27:b2:eb:71:4c:c1:65:4b:9f:14:9c:ff:6c:
4d:73:b0:5a:bf:5a:67:63:11:03:20:7e:f3:24:be:ab:63:cf:
32:77:4a:1e:47:65:97:77:1e:12:d5:9d:20:8b:80:b1:1e:d8:
69:35:3c:99:fa:32:62:79:fa:cb:e1:d0:35:4b:94:2d:4a:ed:
1c:51:c4:5c:69:1d:09:1b:30:ac:f9:64:e3:86:b1:34:ea:f8:
05:74:a7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:23 2026 by rpki-client