Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File: YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier: 5vMuMEq7mH7JAtj+DBnDCZgR5wyCVjSD10dfwqXyPpg=
Subject key identifier: F3:41:F5:14:76:80:11:AD:64:79:FA:B8:27:7E:68:2F:3C:87:49:20
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer: /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial: 019F32273260B058F9F25E4570E04913B8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number: 1997
Signing time: Sun 05 Jul 2026 12:00:57 +0000
Manifest this update: Sun 05 Jul 2026 12:00:57 +0000
Manifest next update: Mon 06 Jul 2026 12:00:57 +0000
Files and hashes: 1: D8kmbrxGH990IEjHOfCChDR_0RI.roa (hash: av49JGDKCD6wMkJgxe4+rUguaf8/22rVV0DlSQeu/3g=)
2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: txZgW4nwEzMnbBZM7Vt+Dy4wIDCVyxQSTOwwP5LlyhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:32:27:32:60:b0:58:f9:f2:5e:45:70:e0:49:13:b8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
Validity
Not Before: Jul 5 12:00:57 2026 GMT
Not After : Jul 6 12:00:57 2026 GMT
Subject: CN=f341f514768011ad6479fab8277e682f3c874920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8c:60:77:19:65:de:4b:9b:fa:d4:ac:0b:df:
c7:c4:98:6b:77:07:e0:44:23:83:b6:b6:35:a5:10:
68:ca:38:60:e3:ff:f7:d0:91:26:2f:47:ca:1c:09:
b2:e2:1d:75:c2:0f:ed:16:b0:6e:55:23:3a:9f:9e:
7d:06:f8:ea:fc:61:0b:64:76:68:be:30:b6:8d:c8:
2a:c6:1b:ef:58:5a:5c:45:0a:1e:88:df:d5:c9:08:
4e:36:f5:b9:e6:5e:0d:84:47:88:cb:d4:bb:c4:d0:
a2:c0:ca:d7:ab:f9:c1:45:ec:a6:45:ed:02:f8:9a:
6a:6f:42:ec:95:5e:14:36:44:9e:dc:4d:a7:3b:41:
83:8a:a4:84:bd:42:f1:40:b4:ae:2d:2f:64:48:e1:
21:ba:f7:df:98:0f:56:c9:83:41:c6:0d:e8:52:59:
7f:96:29:96:1a:5b:f2:d4:46:f4:69:4c:f4:7d:6a:
ef:99:83:f3:45:ca:e3:12:07:d9:f2:e7:3a:c5:f7:
28:bd:a2:bb:da:3b:d4:93:83:b4:6f:fc:d1:99:17:
d1:6e:1e:4f:2e:5c:46:ad:17:5c:16:8a:f9:ab:d0:
49:0a:86:ca:1e:89:c1:be:1a:1f:f0:cd:ef:31:07:
2d:70:00:35:4e:82:13:6d:8d:a5:8f:3c:4b:40:71:
a8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:41:F5:14:76:80:11:AD:64:79:FA:B8:27:7E:68:2F:3C:87:49:20
X509v3 Authority Key Identifier:
keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1a:ab:9e:2e:2e:fd:32:cc:8d:fe:ab:40:dc:d0:af:38:e7:
54:1d:9c:0d:cc:ca:95:c5:3c:da:49:f6:29:fa:fa:ad:44:37:
05:f5:6f:57:0c:36:62:dc:43:d1:77:c9:5b:50:8a:dd:8d:86:
97:2e:38:23:a9:56:1c:88:e6:dc:1d:9d:cb:b2:10:2f:da:b8:
b7:14:ae:7a:b6:d9:06:fd:a8:be:2f:30:78:67:21:41:9d:7c:
27:80:98:b3:89:ab:5a:9b:75:80:87:25:c0:20:94:79:55:49:
ac:a0:a5:77:20:d1:58:93:2b:f3:c2:ea:5d:d0:d0:ce:67:82:
d7:16:c3:68:81:10:14:69:a1:66:11:54:32:cb:9d:b6:57:fc:
36:16:ff:1f:1a:4f:67:d3:83:2d:6e:19:32:ae:ae:21:2a:17:
d0:c4:5b:5b:d1:25:a8:68:88:58:1b:46:5a:17:0b:84:a9:21:
2c:bf:0b:c2:88:cf:6c:34:c8:72:16:45:bc:b0:c1:29:66:a1:
47:b4:e5:57:36:d3:b2:c2:e7:46:d8:1f:c3:a2:32:c4:a8:6d:
2d:ea:5c:f0:5b:90:29:96:a7:96:df:f4:d4:88:e0:3b:9f:24:
a0:7a:c0:3a:18:38:72:1f:41:64:ae:7e:37:cc:4f:30:c1:c3:
46:9c:21:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 19:58:44 2026 by rpki-client