Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
File: Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft (raw, json)
Hash identifier: 5izdON41Pia8938Wx0LGOLb3g88P+YQN5frkGOzTv74=
Subject key identifier: 82:79:27:24:32:1B:81:FC:D4:BD:D4:CC:C8:B8:5D:F9:3E:F9:C2:D6
Authority key identifier: 63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
Certificate issuer: /CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Certificate serial: 019FA1BB585455AFD71F1BB58BFF2895E823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
Manifest number: 13EA
Signing time: Mon 27 Jul 2026 04:00:37 +0000
Manifest this update: Mon 27 Jul 2026 04:00:37 +0000
Manifest next update: Tue 28 Jul 2026 04:00:37 +0000
Files and hashes: 1: YS4KfdF48rW5SEIpeCeYxOP-Du0.roa (hash: FKGkIDKaHogWgazEiZbFbdSEfBT5S7dX/PkphiCX2e8=)
2: Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl (hash: 2viseDmVfchbp0AOaTkJd1Anw5A/ZMQmhinZ0B5tb5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:58:54:55:af:d7:1f:1b:b5:8b:ff:28:95:e8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Validity
Not Before: Jul 27 04:00:37 2026 GMT
Not After : Jul 28 04:00:37 2026 GMT
Subject: CN=82792724321b81fcd4bdd4ccc8b85df93ef9c2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:09:e2:fc:16:ea:9a:53:bb:7e:de:6b:eb:
95:35:c4:b4:c2:8d:62:22:02:53:71:99:b9:a1:20:
2c:f9:86:4e:90:b6:76:0a:b6:af:c5:75:09:87:c4:
94:c9:d6:3c:d9:7b:f5:bd:a7:4d:dd:ea:a3:05:33:
e5:eb:8b:6e:e6:a2:b1:8a:a8:da:7b:d8:c9:f4:33:
11:e3:01:e8:ea:77:8c:05:b9:21:9c:3f:5e:ab:c3:
87:bf:7b:02:f1:51:6b:45:6f:2c:7d:7e:59:a8:a9:
16:43:c7:0f:f6:b7:ce:fe:87:15:ef:09:00:a8:ef:
92:37:00:21:42:d5:20:09:45:56:42:c8:05:6c:b1:
a7:24:89:de:cf:49:d0:54:2e:1a:08:41:06:9c:e0:
cd:ec:c2:21:94:01:b8:79:65:6d:49:a9:9d:48:3e:
ff:76:fc:c0:82:68:41:6d:14:5c:16:a9:fb:27:43:
8e:95:a5:d2:f5:2e:fe:a9:23:0e:f7:49:76:7f:e2:
95:30:95:a4:f1:96:c7:28:de:96:4a:b2:5e:74:b5:
6a:f6:27:6a:70:c0:e3:0b:14:7d:dc:3d:1d:b1:37:
1a:96:d7:5f:ed:17:96:5c:b1:cf:c5:4c:14:01:df:
0a:7b:ce:fb:23:3c:c4:83:fb:8d:0e:ff:1d:8e:64:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:79:27:24:32:1B:81:FC:D4:BD:D4:CC:C8:B8:5D:F9:3E:F9:C2:D6
X509v3 Authority Key Identifier:
keyid:63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:cc:81:76:a5:42:e7:1d:05:3e:11:ab:9e:12:1f:75:52:eb:
b6:9c:9f:d5:84:a3:a9:78:54:63:e1:9e:2c:4d:d3:a7:2d:c7:
fd:2f:89:a6:95:84:e3:e6:4a:23:a0:20:38:8a:5a:95:2d:ed:
b8:12:cb:d0:0f:29:50:67:1c:ed:c3:90:cf:c1:27:1e:a2:7d:
a9:61:7d:3f:8b:1e:ae:de:87:4b:79:cb:49:cb:b6:34:d8:26:
b8:2f:4a:2b:5d:08:84:86:40:83:ef:2a:59:6c:a0:4a:de:2c:
72:cc:fd:55:c6:ad:41:33:61:c3:49:9b:95:1d:5b:35:ad:03:
72:40:f5:99:63:d8:9c:3d:56:f3:3f:66:d4:af:93:01:48:e5:
57:97:4c:e6:f1:d9:b5:98:5b:18:4d:fe:16:85:3d:fe:7a:e0:
38:91:35:79:da:19:42:86:5a:75:f2:9a:c0:df:ac:71:c9:35:
13:28:51:42:b8:08:ca:8d:69:9d:35:d5:c2:6c:d1:b7:0d:f2:
97:e1:b7:0c:39:dc:89:8c:b3:1d:a6:8a:43:b3:16:b5:c6:ff:
95:1b:8a:91:79:c8:6e:54:cd:0f:12:df:11:97:f2:70:eb:0b:
7b:54:c6:87:6a:f7:ba:24:98:e3:6c:15:12:06:bd:01:09:28:
c5:a1:9d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:37:48 2026 by rpki-client