Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
File: yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft (raw, json)
Hash identifier: Ddyd9WuBoWN5eTIDT/OkkRs4w6cmjcB333EsNCRZ+3E=
Subject key identifier: A3:19:EF:05:B4:EC:D8:C9:1D:B1:FB:4E:E6:3E:88:73:E2:19:36:34
Authority key identifier: CA:4E:BD:61:51:F1:BF:38:DC:57:A3:A2:4D:BB:5E:DC:5A:6B:F9:67
Certificate issuer: /CN=ca4ebd6151f1bf38dc57a3a24dbb5edc5a6bf967
Certificate serial: 019FA2CEC38789DA04C326D64C360E88A889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:01:27 +0000
Manifest this update: Mon 27 Jul 2026 09:01:27 +0000
Manifest next update: Tue 28 Jul 2026 09:01:27 +0000
Files and hashes: 1: V6bKVS9T3ePUCH9UZ-VTrpdXmtg.roa (hash: k7QFZGHM/ZMsVcAH78Z7/y2s4KVJ6ki/nf3Wx24haNo=)
2: bdlGew9HpYI1DB2bRx2omQSvv3k.roa (hash: jVc7jDsAgJp6NFCHEUd8hmbhRfzZi/N70RVFxzIvxJU=)
3: yk69YVHxvzjcV6OiTbte3Fpr-Wc.crl (hash: FkvbgC25+RgjC5GKxSQOv43sXApBGb03MH3fZh9toGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:c3:87:89:da:04:c3:26:d6:4c:36:0e:88:a8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca4ebd6151f1bf38dc57a3a24dbb5edc5a6bf967
Validity
Not Before: Jul 27 09:01:27 2026 GMT
Not After : Jul 28 09:01:27 2026 GMT
Subject: CN=a319ef05b4ecd8c91db1fb4ee63e8873e2193634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:32:60:f3:50:d9:3d:7c:2b:99:7b:01:6b:
a9:d5:be:21:39:c7:3d:97:b7:b1:3e:aa:df:19:e2:
d9:60:ba:92:cd:fa:3a:81:59:f5:e4:f7:29:a0:b9:
aa:d9:0b:82:8d:49:f8:74:45:5a:29:e3:82:59:a1:
8f:28:7d:ee:20:a1:63:89:97:b7:9a:04:b0:04:56:
e4:fe:7a:e1:77:4d:f0:e2:53:16:d8:ed:b1:48:d2:
23:d1:5b:cf:9d:81:b2:38:42:a2:e9:69:d8:5b:bb:
2e:b8:cd:23:88:0d:fd:b6:54:09:3c:15:3d:60:b7:
63:13:36:97:32:6e:27:3b:94:da:8c:99:41:19:d8:
31:bb:39:c5:a1:75:c2:ab:ed:ce:b8:10:d2:ec:8e:
aa:6b:88:6a:46:8c:26:f4:87:00:74:24:e8:12:56:
0f:e9:ff:93:6f:47:45:59:ce:6c:fa:b1:18:68:48:
25:b9:fa:b1:b3:59:cb:0e:88:e9:93:d6:68:b1:94:
05:77:45:83:db:8d:2d:c1:99:68:e4:02:91:97:0a:
c5:49:5d:5d:e0:14:f2:07:aa:54:5c:46:a5:f3:8e:
8d:64:55:b1:a3:e2:95:be:6b:96:84:17:a7:61:cf:
5f:b4:ca:43:37:84:18:f7:d0:89:39:52:97:ba:67:
0d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:19:EF:05:B4:EC:D8:C9:1D:B1:FB:4E:E6:3E:88:73:E2:19:36:34
X509v3 Authority Key Identifier:
keyid:CA:4E:BD:61:51:F1:BF:38:DC:57:A3:A2:4D:BB:5E:DC:5A:6B:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:85:51:a1:06:08:72:76:eb:1e:4c:36:7e:20:b1:16:8e:93:
ab:f1:f9:38:df:3b:27:56:3c:a3:2d:87:42:e2:0c:94:e8:94:
a9:07:48:2b:43:9e:b6:a7:41:1d:e1:c7:4b:8b:8f:75:d3:76:
c0:82:db:9a:28:db:d4:02:ee:3f:23:b8:6f:78:dc:45:4e:77:
98:80:db:0e:c4:99:2d:c3:2b:9f:e3:74:23:55:cc:b0:96:58:
e5:a9:b4:f5:78:19:2a:24:42:c4:3a:26:4b:a8:e7:6f:85:05:
d6:82:47:47:73:98:e5:39:74:17:42:e2:0f:b2:49:a7:c0:c9:
b4:53:4a:ee:92:56:b7:ec:7a:f0:42:24:57:2e:6a:75:94:58:
fd:e2:0d:fe:0e:63:14:d3:2e:24:66:3d:da:ce:96:53:24:56:
0c:e4:7e:ae:d3:37:ad:a6:e0:27:a2:8c:57:94:35:a5:81:de:
33:b7:e6:bc:53:f3:a1:c3:ec:b4:f1:3e:41:99:fd:06:96:08:
bb:12:d5:a8:13:96:9c:93:96:e8:37:cc:62:6a:9a:32:9d:6e:
21:6b:54:0d:b0:e2:29:aa:05:d8:3d:8c:3d:79:7b:eb:8c:02:
d4:7f:b0:71:6a:e4:b6:42:e5:15:dd:3a:b6:b4:c3:74:e2:28:
1b:a2:89:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:47:08 2026 by rpki-client