Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
File: RY-YWypGQ0lCubLZHPEocHUuRvs.mft (raw, json)
Hash identifier: cTln1QN01xzNAzNnt+RojKNLWrn+EePuE9JBP/KfrTQ=
Subject key identifier: D5:90:B8:15:1A:A3:7D:7D:7D:18:58:EC:89:A6:F8:C9:98:CA:BE:A5
Authority key identifier: 45:8F:98:5B:2A:46:43:49:42:B9:B2:D9:1C:F1:28:70:75:2E:46:FB
Certificate issuer: /CN=458f985b2a46434942b9b2d91cf12870752e46fb
Certificate serial: 019FA2CDB8734297EC5AAC53E4EF8149E441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY-YWypGQ0lCubLZHPEocHUuRvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:00:18 +0000
Manifest this update: Mon 27 Jul 2026 09:00:18 +0000
Manifest next update: Tue 28 Jul 2026 09:00:18 +0000
Files and hashes: 1: RY-YWypGQ0lCubLZHPEocHUuRvs.crl (hash: +WNum5R+3Oc1ZM+oPrhJzlmr7OQ7EDvsgTZ5ev9zURU=)
2: ZMVggC6fnvi5QFfWX49Stx3sedU.roa (hash: 2N+/qv1zdtOS6klaheqYn3TqcaLDARy95PnzfT7lVJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RY-YWypGQ0lCubLZHPEocHUuRvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:b8:73:42:97:ec:5a:ac:53:e4:ef:81:49:e4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458f985b2a46434942b9b2d91cf12870752e46fb
Validity
Not Before: Jul 27 09:00:18 2026 GMT
Not After : Jul 28 09:00:18 2026 GMT
Subject: CN=d590b8151aa37d7d7d1858ec89a6f8c998cabea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4f:96:92:da:ba:0b:4b:47:07:8d:53:c3:7c:
15:5f:07:ce:16:49:19:ba:70:c8:7b:c9:c9:88:ab:
94:cc:de:87:a7:91:85:1c:19:9f:e2:cd:91:a4:3d:
c7:61:4d:78:b5:68:fd:40:3c:2a:48:33:b0:9f:0c:
d0:02:51:b0:1d:8e:53:93:66:64:cd:5b:e9:9f:10:
6e:ca:12:6c:ec:a9:ea:6b:93:40:4a:24:1e:ec:30:
e0:e0:94:eb:89:0c:75:cb:47:66:4a:32:58:62:08:
12:a6:67:77:0d:b8:95:2b:42:ba:b6:4b:ad:c3:eb:
ef:32:f1:8c:8b:c0:9e:1f:09:b8:5a:04:58:b4:9b:
30:32:ec:3a:eb:cb:54:bc:8d:9e:2f:c8:00:e3:36:
11:c7:20:1b:6e:a0:bb:99:c5:37:a4:f8:a0:ac:c7:
d2:18:57:f1:b8:73:06:ef:ae:74:f4:8c:e4:6f:fb:
5a:99:27:9a:58:19:c5:8b:4a:fa:50:67:00:a0:0c:
07:ca:12:84:8f:bb:76:1b:c2:a5:14:92:78:26:25:
6b:5f:50:93:03:7f:24:d8:aa:9a:4a:35:a6:f7:64:
c2:db:73:a2:f4:2e:df:1d:00:ed:ed:70:f4:bb:45:
81:c5:9c:7a:7f:22:3b:f6:9b:de:17:43:01:fc:12:
64:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:90:B8:15:1A:A3:7D:7D:7D:18:58:EC:89:A6:F8:C9:98:CA:BE:A5
X509v3 Authority Key Identifier:
keyid:45:8F:98:5B:2A:46:43:49:42:B9:B2:D9:1C:F1:28:70:75:2E:46:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY-YWypGQ0lCubLZHPEocHUuRvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:45:b3:91:64:50:14:a0:ab:24:93:9a:11:53:47:96:a9:1b:
78:c4:14:7e:ac:0c:42:7e:af:d3:9b:82:5a:63:bd:15:b4:77:
40:4e:26:96:fd:21:1d:55:b5:56:23:9f:8e:67:06:30:33:31:
84:fa:99:ab:9f:a9:a2:b3:b1:b3:75:f5:3d:ec:57:66:c4:a5:
96:b5:37:8b:1f:b9:14:26:dc:5a:e3:5d:70:0b:04:8a:93:0d:
64:6a:59:18:7c:9d:60:ea:c4:19:0c:ba:53:31:68:e1:74:61:
b0:43:f0:31:9b:ca:63:c6:1d:db:92:f5:62:57:6c:6b:72:43:
91:a9:be:45:e1:0d:07:12:20:19:27:52:bf:a0:6f:3f:3e:d4:
3b:37:67:78:93:17:0f:30:3f:ee:6f:7e:1f:85:0c:85:68:ab:
5f:d1:1f:38:13:5e:1b:6f:d8:13:09:39:9b:fa:6c:97:cc:14:
71:92:76:6c:17:c6:ab:6e:a7:3e:ca:26:d6:d5:bc:1f:5d:6e:
7e:5b:9d:ca:d7:b2:d9:16:06:5f:70:a5:9c:32:1e:8d:5d:e2:
41:b5:60:bd:9c:92:5a:56:37:c9:b5:8e:1a:a7:3c:23:06:20:
c6:87:84:a9:64:d0:ec:9e:1d:83:72:24:eb:14:54:6d:dc:d5:
1c:5f:03:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:21:39 2026 by rpki-client