Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
File: ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft (raw, json)
Hash identifier: +u6fUEa8cTG2PbRa7FYdAFfbHcCN1M+Il/+bZzj6NUs=
Subject key identifier: 6F:92:CD:17:E7:9B:0B:8E:F5:F3:73:4F:9F:5F:F9:95:AD:C3:57:3A
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Certificate issuer: /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial: 01A01FE7EDAC2DFC03F79A96A27565AA62C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
Manifest number: 137A
Signing time: Thu 20 Aug 2026 16:01:28 +0000
Manifest this update: Thu 20 Aug 2026 16:01:28 +0000
Manifest next update: Fri 21 Aug 2026 16:01:28 +0000
Files and hashes: 1: 16Fc5-LnF5siMEpZnuR4lKcQNuI.roa (hash: /DFWjdkQzHlEBKOGD6xuczzfIPaMRVwEIuK9rhvSJyI=)
2: II2FD1f4xCm3D1NbPKz8FS6h0Jc.roa (hash: 7LsFeRZGlNF+Y+qphYoLdVC4raU4LnXBUOFidUeAFTk=)
3: XO1viMFitX_oQoNKUBYNw7H6D54.roa (hash: jVh+iUQm/gwRWI08v+pcXmrPul1qy5rkSN9bPBWuSAg=)
4: ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl (hash: fL44gjtzGWapB05D8mPecvliGM6xYohfzRWljCaZ+tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:e7:ed:ac:2d:fc:03:f7:9a:96:a2:75:65:aa:62:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Validity
Not Before: Aug 20 16:01:28 2026 GMT
Not After : Aug 21 16:01:28 2026 GMT
Subject: CN=6f92cd17e79b0b8ef5f3734f9f5ff995adc3573a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4e:64:4a:68:c6:fa:10:fc:1f:bb:c3:de:fc:
49:4a:fd:20:9e:5b:ae:99:38:3e:cc:08:f5:87:bc:
13:e3:b3:ee:f6:c3:67:cd:32:ce:98:6b:92:91:84:
23:2f:96:a9:c9:94:d4:2c:d4:cf:54:44:0d:7a:0c:
25:c2:b6:20:dc:e8:9e:35:8f:b9:65:78:da:cd:07:
e0:61:04:4f:41:52:36:09:94:bc:59:4e:f5:72:ee:
a4:f9:8e:4d:33:e6:73:9f:d5:d3:5c:0d:e6:79:8e:
62:a6:fc:1f:22:bd:0f:fd:52:36:73:fd:37:fa:7c:
2b:b9:f5:dd:f9:df:78:0c:46:ca:47:a6:6b:48:16:
91:74:52:49:6e:ef:1a:79:30:c0:9c:de:45:c5:5f:
35:f0:95:87:69:9c:6a:2f:fa:4f:06:71:10:d9:38:
63:93:82:dc:bc:00:c2:05:39:7d:25:d6:41:fc:3d:
cb:b8:39:09:aa:4d:f2:a2:73:be:3c:20:03:9a:2d:
c5:d2:50:ec:19:62:b6:57:c9:d5:97:c0:dc:ad:bc:
81:e7:da:17:eb:95:2a:37:eb:b4:92:48:7f:fa:ef:
f3:0b:b5:87:d7:b8:6f:a9:52:c6:9e:a8:fa:72:6a:
51:22:ba:5a:76:40:19:b7:ea:99:83:02:26:03:7c:
11:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:92:CD:17:E7:9B:0B:8E:F5:F3:73:4F:9F:5F:F9:95:AD:C3:57:3A
X509v3 Authority Key Identifier:
keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:fd:14:24:18:5b:59:b7:23:76:e6:49:fe:3f:a3:89:43:b2:
8f:f9:71:88:c3:9b:fd:6a:37:d1:af:91:53:ee:db:84:65:54:
86:96:1b:3c:dc:b4:ac:f2:50:f4:ea:bf:6c:e5:1f:a2:57:b0:
64:90:ea:75:bc:72:70:c5:ab:2a:10:b6:5b:76:fe:ce:4b:64:
66:27:4c:28:c2:4b:ff:51:fd:32:d7:88:03:c5:47:fc:0d:b1:
f3:1b:01:fc:15:12:c3:c5:04:28:d1:ca:3a:0b:13:fa:3d:5d:
be:ff:ab:80:a2:e0:85:f2:df:97:1c:3c:34:6b:b4:21:53:c4:
3a:a0:f6:a7:3d:cb:fd:f9:5c:83:d7:c0:60:94:16:4f:37:a0:
c1:2a:84:5f:28:73:2c:52:c3:63:ab:43:78:e2:2e:71:b9:4b:
34:e7:06:83:99:af:b2:e3:bb:15:e1:bb:f3:89:24:91:2a:2c:
c4:60:31:ec:be:4d:61:94:e1:f4:a5:fd:de:65:f9:3a:a5:26:
26:4b:dd:4d:b7:50:16:ae:5d:2b:38:fa:7e:ba:10:0b:30:31:
89:f8:66:ab:0f:af:a9:27:a1:d7:48:c7:1b:93:2b:f4:d3:9e:
93:fe:f7:1b:bb:fa:04:6f:31:a8:f8:3e:39:4b:57:f1:84:cd:
67:64:f4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:39 2026 by rpki-client