Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
File: YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft (raw, json)
Hash identifier: hFxB2qSeXcYb9YBMDtT7CB81OtpjwUXge5+gq9Ylrks=
Subject key identifier: 6D:7D:79:36:04:BC:25:F5:63:D7:E9:34:CC:D1:AF:4A:A4:14:0F:A2
Authority key identifier: 62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA
Certificate issuer: /CN=6290e6b0cdd7f4986be518d890a8493153504eda
Certificate serial: 01A03894B266AB6428997274C512D741C643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
Manifest number: 0250
Signing time: Tue 25 Aug 2026 11:01:04 +0000
Manifest this update: Tue 25 Aug 2026 11:01:04 +0000
Manifest next update: Wed 26 Aug 2026 11:01:04 +0000
Files and hashes: 1: Ci_joaoGd-NiKdKN-xSlHZZHjsU.asa (hash: w5DoIaMOdhrQzX31C6GNjSJG7G7L2zsb0JalX8bgFEE=)
2: YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl (hash: dbZjxvIooX+CNhgZU1EcQb3uZPK7UGnSjre00HmRnVo=)
3: jyKuE2XBeuJrzXa_q0tmSaVEGSw.roa (hash: /T26sfmgIuFdLLHz0t8HyV2eonc//D9WC+03dI2ySjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:94:b2:66:ab:64:28:99:72:74:c5:12:d7:41:c6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6290e6b0cdd7f4986be518d890a8493153504eda
Validity
Not Before: Aug 25 11:01:04 2026 GMT
Not After : Aug 26 11:01:04 2026 GMT
Subject: CN=6d7d793604bc25f563d7e934ccd1af4aa4140fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:ec:00:bf:d4:03:e8:d3:c6:a5:97:f2:d1:
28:39:0b:99:19:23:d0:3a:0d:78:16:1d:e0:5f:72:
5c:a1:9b:6c:33:e4:af:bc:a9:aa:74:10:73:4a:14:
a7:24:44:c6:ec:a6:27:83:42:cc:07:d0:c1:26:f9:
5f:af:c6:4c:92:67:2e:0f:28:82:6d:7a:d7:3e:c7:
2a:ab:5d:ef:a0:b8:0e:15:51:cd:7d:91:0a:75:bb:
7f:e1:bc:dc:d9:8c:ae:00:19:94:35:cc:d0:78:db:
63:52:fd:d7:11:ae:d0:ec:12:16:6b:46:1e:5a:ef:
3e:8d:79:dc:f1:89:bd:77:3e:42:b3:01:2c:cf:7b:
55:ab:64:80:9a:8e:d9:f9:cc:d0:e1:42:f9:ea:7e:
ed:2d:f7:c1:2f:87:4a:86:0b:d3:8f:dd:ab:6f:9b:
f7:c1:41:99:9c:8a:d2:42:da:0f:06:41:17:37:eb:
a0:81:27:f8:b8:dc:41:93:a7:fe:8b:e0:16:ce:3a:
23:63:08:dc:a8:bc:26:6c:99:1b:81:7a:90:75:8c:
b7:26:2c:84:13:84:a8:d2:ef:fe:a3:96:68:0a:5b:
7f:de:07:99:0c:72:8a:c5:dc:5e:7a:a2:74:e4:09:
cb:93:ad:61:6b:16:07:60:02:23:cf:27:17:db:c8:
23:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7D:79:36:04:BC:25:F5:63:D7:E9:34:CC:D1:AF:4A:A4:14:0F:A2
X509v3 Authority Key Identifier:
keyid:62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:71:b5:47:c7:b4:2b:d8:4e:66:52:d4:55:08:d4:71:3d:5e:
b3:92:f8:e2:71:c2:9f:a2:c1:f5:b2:2d:50:96:bf:be:f3:7a:
9b:d0:a3:f9:a3:b1:03:25:82:7b:54:98:18:03:ba:ab:03:ef:
a0:94:2d:48:16:ac:34:6f:6b:2d:8f:f0:97:b7:c4:14:ef:e2:
5d:ea:67:3f:22:49:7f:88:64:01:b0:15:e6:bd:f0:3f:6b:62:
36:46:d6:64:d4:05:f8:e1:e6:8b:1f:84:a1:a5:eb:ab:0d:d4:
86:4d:bd:58:e7:7f:85:f8:d6:a9:17:47:f1:6b:ac:b6:84:11:
7d:b2:f4:02:04:dd:b4:9c:04:77:91:13:36:94:52:72:27:59:
c0:f8:a7:f0:b1:0e:27:bb:be:e4:87:45:e6:62:70:38:8f:4d:
80:7b:21:5b:38:5b:18:c8:46:2f:77:0a:92:94:79:53:a9:75:
89:3f:11:d1:d4:9e:0f:1a:4f:c4:fd:e0:ba:5c:80:3f:42:a7:
87:16:79:f6:6d:7e:45:5f:c2:ba:f2:bf:61:c7:d4:50:aa:b1:
81:17:52:f6:25:dc:d2:1a:31:a3:c6:c3:62:eb:0d:0e:fe:ac:
37:2f:29:28:22:90:87:67:49:b6:d5:51:4d:a0:c2:03:a1:d7:
c2:81:1f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 16:15:27 2026 by rpki-client