Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
File: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft (raw, json)
Hash identifier: MMiKpYLxTcFnrZS3o3wTINbV8vg/msL8K7emueJFwEQ=
Subject key identifier: DB:9A:67:A5:3F:64:BF:02:31:8E:4F:9B:28:4E:19:E0:B0:B2:DD:5F
Authority key identifier: 61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
Certificate issuer: /CN=61041121ccc6e65d933961fd572d59e261f21a31
Certificate serial: 019F9FCD673170969C6DEBE8993AED108887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
Manifest number: 19CF
Signing time: Sun 26 Jul 2026 19:01:06 +0000
Manifest this update: Sun 26 Jul 2026 19:01:06 +0000
Manifest next update: Mon 27 Jul 2026 19:01:06 +0000
Files and hashes: 1: 8x9EixpS_cTo1YUsFO5RBhE9yQg.roa (hash: H+557dvreWM3Tp/NNdorNLcHs2h/JJEHvmmY5yieUec=)
2: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl (hash: G89BAzrwYT/iS8u2tP+BS7GkjfQBFGPyZmsp3theB/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cd:67:31:70:96:9c:6d:eb:e8:99:3a:ed:10:88:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61041121ccc6e65d933961fd572d59e261f21a31
Validity
Not Before: Jul 26 19:01:06 2026 GMT
Not After : Jul 27 19:01:06 2026 GMT
Subject: CN=db9a67a53f64bf02318e4f9b284e19e0b0b2dd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:cc:89:ea:65:36:e1:69:e9:be:87:2d:d1:
53:08:16:f7:90:79:8f:9a:e8:ae:d1:47:20:b2:6f:
0f:20:f6:18:8c:45:34:f8:db:96:5a:b6:81:9d:57:
5e:b2:f1:14:4a:b7:ca:e5:40:70:94:fd:a6:30:3d:
2d:31:ff:f2:f9:bc:63:27:b4:57:88:e5:08:fd:bb:
97:cf:6d:d7:82:31:9b:2e:a4:51:94:d5:de:5a:51:
f8:bd:99:6c:d1:99:2f:19:73:28:9f:b6:18:b6:db:
0d:0a:2e:5d:7c:3c:68:8b:b3:11:b4:9a:ae:98:cc:
8b:35:44:42:e6:0e:4c:91:e5:3a:85:b4:e6:7f:f2:
5f:f3:d0:2b:71:f3:74:58:8c:03:16:88:e3:94:2a:
cb:24:37:b2:c2:90:41:78:f4:bb:73:84:26:d2:32:
e4:91:b7:a8:7f:a3:27:99:01:37:f7:63:f7:51:7f:
48:68:f3:18:f1:71:e9:b4:12:6a:18:e9:6a:58:6f:
06:0b:52:55:5d:eb:eb:c6:72:af:55:ee:cd:f5:4d:
9d:5d:6b:c1:80:5b:cc:bc:f8:e1:9e:2f:01:af:20:
68:a4:e9:e8:a3:0a:54:73:c1:c7:6b:25:d9:73:e8:
ea:ee:b0:03:c7:ba:43:cd:7e:59:5f:37:0f:0e:f1:
70:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9A:67:A5:3F:64:BF:02:31:8E:4F:9B:28:4E:19:E0:B0:B2:DD:5F
X509v3 Authority Key Identifier:
keyid:61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:71:53:15:2f:8a:08:c3:e1:76:7f:4d:bc:6b:8f:31:5f:15:
fb:ff:75:9b:d2:93:09:98:e0:6b:8c:49:5a:0b:a6:d7:20:b7:
27:57:ae:e6:b1:05:c0:ed:85:2c:0b:65:ee:d8:47:b9:fa:97:
b5:d6:d9:c4:91:c3:83:98:9d:b7:61:40:87:b3:cd:cb:f6:6d:
ef:c8:a5:8e:e7:1c:6b:52:ef:6b:d6:bd:b0:4e:6a:e7:1b:76:
52:45:6f:5c:78:13:ff:4c:1e:b1:74:67:3e:81:91:15:f1:c9:
bd:cc:3e:eb:77:21:b1:b8:78:a0:e9:2e:2b:45:22:e1:a5:87:
af:99:2d:15:2d:14:40:1a:99:4b:96:20:9c:a2:c2:e5:5a:51:
3b:09:fa:39:21:61:28:a4:ac:da:4c:be:b0:df:11:5d:5c:29:
a0:63:ae:78:7c:76:a0:aa:93:4f:33:bb:b8:ae:bb:0c:05:0a:
33:03:e9:6e:65:04:f1:3d:6f:93:7a:12:3b:a1:e7:7f:00:35:
bd:89:40:b9:46:35:49:fa:7d:de:80:53:dd:7e:34:33:9d:d6:
31:16:3b:96:d3:49:c7:b5:8e:46:6b:c5:7d:ff:96:ad:c4:0f:
6c:86:f9:91:46:46:be:10:9e:92:02:f3:4c:74:6c:e9:3c:73:
2a:c7:66:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:32:42 2026 by rpki-client