Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
File: ypAPHhHi0l0LIxatbgEmhIOayB4.mft (raw, json)
Hash identifier: V7vwyH1EzZqhni2xVGGiKiUeyMJt+0zdbEZh63nynBc=
Subject key identifier: 2A:F2:12:47:80:5E:30:93:F8:72:A9:8B:BE:22:BC:87:7F:B0:C5:D3
Authority key identifier: CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
Certificate issuer: /CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Certificate serial: 019FD6BBCF94CD5DDFF09040F302A0C8EA35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
Manifest number: 19EB
Signing time: Thu 06 Aug 2026 11:01:00 +0000
Manifest this update: Thu 06 Aug 2026 11:01:00 +0000
Manifest next update: Fri 07 Aug 2026 11:01:00 +0000
Files and hashes: 1: K2muBRhSzEeWwEOKyiaVJYw5K3c.roa (hash: 9FMIKD8yGkaykJTy68XJ8mxhdE87R0V7qtYcMc3oayY=)
2: ypAPHhHi0l0LIxatbgEmhIOayB4.crl (hash: K5euq0eY8Aj9qifWe6ZJ8+fhw9w2Cr3kH+CDz8E/XSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:bb:cf:94:cd:5d:df:f0:90:40:f3:02:a0:c8:ea:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Validity
Not Before: Aug 6 11:01:00 2026 GMT
Not After : Aug 7 11:01:00 2026 GMT
Subject: CN=2af21247805e3093f872a98bbe22bc877fb0c5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:f8:85:8e:27:fe:b0:25:2a:d1:50:3a:f4:
4c:44:d7:91:a3:c2:b7:dd:a0:04:14:e9:42:1d:1e:
c1:57:b2:3d:fa:f6:a0:9c:6f:fc:b1:4f:32:6a:4c:
11:2e:1c:fa:53:80:c9:1a:31:ae:1a:2d:d0:6f:cb:
dd:dd:7f:7d:df:cf:10:08:eb:36:76:55:aa:f0:7b:
c9:29:e3:43:49:3e:28:8f:6b:27:58:5d:49:06:7c:
5c:14:64:73:8f:9d:28:16:97:ed:28:14:40:cf:a0:
6c:61:ae:6d:49:57:fa:f2:04:25:c0:21:8d:94:b3:
43:aa:5a:8b:a3:4f:53:4c:c8:3e:a6:8a:07:57:83:
00:2c:e6:1b:09:b4:da:e0:a4:f2:f5:95:f5:35:80:
af:85:f3:62:cb:17:14:16:53:ec:d5:ea:80:6c:f2:
70:39:1f:d1:1a:d8:83:d3:6f:8b:ea:0c:77:57:89:
94:ff:41:76:2b:a8:b9:e4:7f:df:4a:42:ef:27:a0:
16:1c:da:8f:a2:9d:45:57:03:55:6e:b4:3a:3d:1b:
9c:14:64:a5:65:8b:8e:d6:f4:be:4e:a1:09:12:31:
43:6f:60:95:26:90:2a:c3:df:3d:db:d4:0b:ba:b3:
09:0f:51:7d:ce:ec:06:46:39:4f:38:87:ac:67:72:
21:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F2:12:47:80:5E:30:93:F8:72:A9:8B:BE:22:BC:87:7F:B0:C5:D3
X509v3 Authority Key Identifier:
keyid:CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f7:84:29:69:c4:aa:3b:43:7e:47:9a:64:6a:85:de:a1:17:
d4:81:a8:c0:35:6b:c6:ec:b6:2c:37:79:40:32:52:ca:ba:c9:
a8:59:7b:b2:16:ed:6d:ee:e9:71:47:32:1b:79:0c:15:71:11:
01:14:28:69:6a:5c:87:a6:f0:47:fb:81:b4:bf:99:09:cd:4a:
0e:b6:ba:43:e3:eb:0b:63:cc:ba:37:51:c8:c2:56:74:f9:a7:
8d:14:3a:eb:2b:b0:f5:5a:81:df:69:35:03:70:ae:1e:5a:5e:
6d:8f:8b:14:b1:c5:8d:a4:3e:fc:7e:39:01:59:b4:4e:e6:12:
e6:da:9d:95:ae:62:fd:59:cf:3d:ae:68:18:26:9a:4f:a0:ad:
1a:09:56:bb:cf:ce:6b:8f:d9:0f:30:e0:7f:7b:a6:12:ef:a8:
cd:ca:b6:cc:ad:35:4e:bc:e6:57:8a:7c:48:8c:e8:14:1f:de:
74:c6:70:53:9c:51:18:00:9e:47:59:e5:a9:fe:e3:5d:fb:5c:
42:e6:8f:8c:6a:2c:ba:bc:a0:16:76:8c:75:b6:3d:7a:4c:fc:
af:b7:75:51:de:49:3b:8d:7e:b7:fd:e8:af:64:32:0f:e2:0e:
1f:ea:5a:ce:94:05:1d:50:9c:e6:c2:19:63:26:d7:25:57:4c:
58:9a:c8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 14:50:56 2026 by rpki-client