Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
File: __YE3HiSupn1NSlrkQLY16GEQ4g.mft (raw, json)
Hash identifier: 3Kt3y0A0IMUKhp3hMykw4OWkfygMQ2gYqsVcZhcwukw=
Subject key identifier: D2:23:87:13:F7:CA:1F:BD:FB:00:3C:12:97:06:92:AC:7D:80:13:EB
Authority key identifier: FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
Certificate issuer: /CN=fff604dc7892ba99f535296b9102d8d7a1844388
Certificate serial: 01A0024B2F708C9229932B74D7FABF2C63E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
Manifest number: 1993
Signing time: Fri 14 Aug 2026 22:01:16 +0000
Manifest this update: Fri 14 Aug 2026 22:01:16 +0000
Manifest next update: Sat 15 Aug 2026 22:01:16 +0000
Files and hashes: 1: __YE3HiSupn1NSlrkQLY16GEQ4g.crl (hash: Pb3ThPOx4ZeuxCeEGDUUpuKnRG2NKSk+5VmGGdD3VlM=)
2: gI3uUzSnYf7Q7BZtYjFQ_fPF2OU.roa (hash: ydHk1WEPluuP+9CX+LPaHVAvbLA6LF+fubk2zBDCmt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:2f:70:8c:92:29:93:2b:74:d7:fa:bf:2c:63:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff604dc7892ba99f535296b9102d8d7a1844388
Validity
Not Before: Aug 14 22:01:16 2026 GMT
Not After : Aug 15 22:01:16 2026 GMT
Subject: CN=d2238713f7ca1fbdfb003c12970692ac7d8013eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:18:76:51:20:d0:ce:11:f2:04:15:a3:f3:
8c:d3:5a:1a:84:ba:2b:83:ac:b4:65:b8:59:72:a5:
eb:28:a2:b8:79:27:6c:5f:0a:e0:6b:24:ff:f0:cf:
40:db:19:78:26:53:6a:51:28:8e:7d:d6:d2:dc:2e:
ee:16:fd:ab:17:5c:84:08:dc:ed:0e:69:70:51:d2:
78:33:cb:6f:dc:99:1a:99:19:78:8d:d4:51:71:81:
58:88:d1:95:37:d6:6b:07:0f:62:2f:06:69:92:77:
0d:29:77:e7:15:50:41:b6:a9:f2:89:a3:f5:4c:d3:
83:c7:58:46:dc:86:71:95:77:4a:d9:1d:b8:0b:90:
ac:c3:a6:0a:e8:a7:b5:29:da:e4:fa:be:f0:58:1c:
a0:27:c9:0a:43:a6:de:5b:b9:80:df:ca:65:c3:0a:
2d:0e:74:f4:94:9b:46:3a:fa:d4:7b:67:07:fb:77:
57:ea:12:69:b4:c9:e1:70:dd:44:3b:e5:60:57:a5:
90:57:2b:ef:75:c5:cc:1e:c7:79:f5:85:21:28:7b:
85:f7:89:75:ca:fa:9f:a3:0c:61:4a:a9:34:fb:40:
61:7b:3d:11:d2:5c:20:50:02:58:c7:ab:28:17:8e:
51:14:e0:70:7f:8a:0b:3f:f5:b7:6a:7c:dc:5e:7c:
2f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:23:87:13:F7:CA:1F:BD:FB:00:3C:12:97:06:92:AC:7D:80:13:EB
X509v3 Authority Key Identifier:
keyid:FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0b:c7:65:92:8f:d9:ea:15:6f:38:7f:56:83:77:37:80:1c:
d7:f7:3f:97:71:35:41:a5:09:04:a5:5e:8a:87:a5:ee:2e:a1:
b4:03:a2:ef:b8:32:1f:57:2c:48:54:af:ae:8c:49:67:7d:ae:
ca:bd:87:96:20:d6:d3:c6:03:08:86:5c:20:64:a0:95:61:e7:
1b:27:27:01:d2:47:8d:7b:5f:20:18:b3:6c:ba:1c:ac:35:67:
70:63:cd:95:52:eb:1d:d9:03:20:14:58:00:a9:d5:5b:17:6c:
ef:1c:76:12:11:61:8c:08:17:bc:8b:23:63:52:1d:95:73:92:
fd:d4:fd:1d:3e:7e:ea:92:9b:0f:b1:b7:e1:7f:df:7e:e7:5b:
d7:a1:0a:fd:dd:61:29:03:e0:e3:14:19:7e:0a:b7:bc:a8:a3:
bf:b9:31:80:72:05:0b:a3:d4:1a:1d:91:df:ff:2b:e1:56:fc:
4f:7d:76:44:b2:69:0c:e2:29:a9:d3:b2:84:c9:bf:5c:5f:37:
c3:7a:ca:f3:7e:2f:63:7d:5d:93:f4:56:af:8f:6d:90:ca:b7:
38:f2:c5:23:b1:5f:52:b0:ae:c7:4b:a3:d9:34:d3:07:38:1b:
8f:fb:33:7a:e1:41:ef:4c:08:bb:82:d7:da:2a:fe:b4:36:84:
a9:1c:0f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:40:45 2026 by rpki-client