Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
File: yxyjwd2KVS42ekmgIZkGlyKUpnw.mft (raw, json)
Hash identifier: iEYpSXSmYaj0WoF2cW+GsTSuR5ZVr/gcwqXrMd3ECL4=
Subject key identifier: 20:C4:8A:AA:11:24:C8:CF:3A:30:51:24:A0:18:5A:78:D1:83:9B:30
Authority key identifier: CB:1C:A3:C1:DD:8A:55:2E:36:7A:49:A0:21:99:06:97:22:94:A6:7C
Certificate issuer: /CN=cb1ca3c1dd8a552e367a49a0219906972294a67c
Certificate serial: 019FA0DFB7EAFEAF3B3A1F9B3982BC818D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:00:43 +0000
Manifest this update: Mon 27 Jul 2026 00:00:43 +0000
Manifest next update: Tue 28 Jul 2026 00:00:43 +0000
Files and hashes: 1: QiN9rG_Ysuf7jDr6rlJvaZKS1SY.roa (hash: CVle1wefvKSXiK7/zejKSn/++K6IZllecq4TO7iTCZg=)
2: U2-pyUEFz_jV5xze95sKqmITK9E.roa (hash: qFKlY0WTggQuoTIdTFaI1jSEY0M+4i8LehCtLGlHHT0=)
3: yxyjwd2KVS42ekmgIZkGlyKUpnw.crl (hash: +HcbNYY7i6JT9PfOjSTj347tRXpkMf7zfwhFthC+rP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:b7:ea:fe:af:3b:3a:1f:9b:39:82:bc:81:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1ca3c1dd8a552e367a49a0219906972294a67c
Validity
Not Before: Jul 27 00:00:43 2026 GMT
Not After : Jul 28 00:00:43 2026 GMT
Subject: CN=20c48aaa1124c8cf3a305124a0185a78d1839b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:8a:07:cf:12:f3:44:5f:51:f6:26:f6:fa:
a6:e8:aa:10:33:1c:72:6f:80:bc:3a:26:70:07:cb:
58:34:f8:53:b2:0d:de:54:e9:b8:ac:ae:61:49:4c:
e7:f1:aa:65:d5:04:3a:25:ae:7a:ee:76:4e:5b:14:
ee:da:75:a0:b0:f6:a6:f3:86:fa:08:b1:04:4d:52:
63:fb:8a:6b:ce:03:38:5c:7b:c5:5e:c2:55:bb:58:
ea:ff:9e:84:a4:5b:a2:c7:7f:3b:c2:80:50:fc:64:
70:84:d3:c5:bd:f2:5e:9e:23:ad:2a:2b:da:ea:f0:
09:b3:04:3b:10:ce:5e:18:75:c7:92:f8:78:c8:f1:
45:45:2b:bd:18:55:30:86:31:e3:67:8a:8f:9e:fe:
7c:d2:a7:88:eb:04:91:d7:ae:0a:8e:a9:c1:f7:c6:
e6:de:e7:88:a4:7b:1c:05:8c:0e:f3:b2:c7:c7:d5:
02:ab:33:04:2c:6a:7a:f9:f7:e0:f9:b8:30:62:6a:
69:47:09:a1:9b:a5:eb:14:dc:74:2b:99:a9:0f:38:
a3:76:28:32:1b:c5:65:93:62:0d:b7:56:4c:05:f1:
f0:40:fc:d5:5f:1f:0c:0f:96:3c:24:67:c1:82:04:
6e:be:4d:05:c4:37:31:ed:05:b1:a5:cb:6e:0e:58:
96:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C4:8A:AA:11:24:C8:CF:3A:30:51:24:A0:18:5A:78:D1:83:9B:30
X509v3 Authority Key Identifier:
keyid:CB:1C:A3:C1:DD:8A:55:2E:36:7A:49:A0:21:99:06:97:22:94:A6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:cb:96:e6:20:64:1d:ae:16:71:3d:2c:8c:c7:02:e0:32:aa:
5e:9e:fd:35:6e:5e:c8:82:1d:57:2f:8d:c0:aa:91:43:d7:ba:
e5:2e:69:ba:3f:0a:e8:29:c5:79:7b:2c:36:73:4d:01:b7:f9:
b0:b0:a3:8e:d3:fd:08:58:86:1a:d5:81:2b:95:39:33:ec:f2:
a9:d7:8f:fe:0e:5e:a6:32:d9:51:bf:41:43:ca:e5:45:bd:2e:
8e:9d:a2:04:be:4a:83:fd:f7:26:b2:7f:0d:ec:00:fc:cf:af:
38:79:f6:cb:a1:41:13:60:56:74:b7:57:db:6e:62:35:c8:78:
9d:f5:8c:66:08:51:70:7f:95:ad:c5:53:b0:ef:40:2d:59:c3:
5f:3c:a0:63:cc:29:1c:06:b5:13:46:83:fb:f6:02:88:c6:42:
3f:e6:b5:1a:f0:00:25:02:97:2c:45:35:6b:65:77:e5:a3:d9:
98:57:f3:3b:d8:44:5e:09:a8:d0:aa:c8:9e:80:1e:26:53:21:
32:34:cb:d5:04:53:98:45:9a:7d:63:85:28:73:59:df:40:6a:
56:ff:ce:68:b3:55:a3:73:d0:3b:5b:a7:b7:21:1f:cf:c6:27:
a7:02:f7:9e:7e:d8:9d:94:c1:04:ac:23:ed:cf:ca:e0:5f:16:
4f:6e:e8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:39:04 2026 by rpki-client