Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
File: ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft (raw, json)
Hash identifier: 7wRRKmBRUZD7oq73yJk8JLO0NVeyYjFKwt1elJZA7DM=
Subject key identifier: A8:A2:79:F5:D5:CB:A6:48:FE:CB:95:69:20:9D:83:35:7A:59:1A:AA
Authority key identifier: CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61
Certificate issuer: /CN=ca5154158905d1d44c4588dfd25802f324a93d61
Certificate serial: 019FF8DA6750CA714908DED3F1D70722A37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
Manifest number: 0855
Signing time: Thu 13 Aug 2026 02:01:30 +0000
Manifest this update: Thu 13 Aug 2026 02:01:30 +0000
Manifest next update: Fri 14 Aug 2026 02:01:30 +0000
Files and hashes: 1: 21j5g4eFqeXt9UiELcluAASkdJE.asa (hash: ewsE7s7l/JEATVoXs5NZK7cBLbOm114kUjZghA3hzjo=)
2: 4okKBfXSNKomjqjfKSyXyfQW8mg.roa (hash: c/G+cvhNW3akdlAhAKvUtf/mU2MrPEwZm3MMXGbYwZo=)
3: ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl (hash: T5aG07IXU2koSiZLWTj62bFFYDwaQVZ5ZxFXDmAn2IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:da:67:50:ca:71:49:08:de:d3:f1:d7:07:22:a3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5154158905d1d44c4588dfd25802f324a93d61
Validity
Not Before: Aug 13 02:01:30 2026 GMT
Not After : Aug 14 02:01:30 2026 GMT
Subject: CN=a8a279f5d5cba648fecb9569209d83357a591aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:04:4f:e5:bd:c0:92:a5:80:eb:71:39:d5:
8f:14:cc:35:0a:5d:e5:ba:0a:06:05:b0:9f:39:ce:
d1:7d:32:5d:e3:97:74:38:cf:d5:7a:15:0a:ac:00:
f9:c1:26:bf:da:24:6b:b0:dc:34:a2:b7:7e:b5:b9:
d2:11:b6:b8:4e:82:cc:30:ac:ea:de:22:ef:07:7c:
3f:15:bc:28:f1:df:1b:71:ef:53:52:11:06:0f:ba:
6d:3b:c7:e6:c2:3d:0a:33:89:02:31:e8:7d:59:70:
1d:c4:5a:82:fc:cb:92:63:10:cd:90:d5:14:9b:e8:
23:5a:1a:e8:0c:8d:17:19:fa:ac:8b:a5:ab:36:3e:
cd:56:ab:cc:38:93:92:19:45:c6:ad:ca:71:b0:37:
8b:58:b0:c4:af:b5:10:6d:46:2e:d6:f4:3e:2e:74:
de:07:f2:4e:99:6f:17:52:bf:d4:34:bb:d2:83:1e:
69:a3:c0:58:76:d2:46:e9:1f:a3:a3:4d:c4:ca:f2:
e5:55:24:ee:28:7a:9f:a1:d7:7e:43:d8:d3:de:75:
ea:6b:bb:d8:3e:92:23:39:10:ed:bc:13:4f:20:8a:
66:13:d1:d4:2e:0e:9a:3c:86:e3:0b:31:ab:d2:48:
9e:e4:45:78:cf:ac:5d:95:4e:6c:a8:c0:97:ac:52:
56:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A2:79:F5:D5:CB:A6:48:FE:CB:95:69:20:9D:83:35:7A:59:1A:AA
X509v3 Authority Key Identifier:
keyid:CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7a:d2:4e:cd:c3:63:44:c7:7e:8f:1c:cc:fb:18:df:8b:b4:
fb:84:a4:ed:21:07:30:65:9f:01:83:04:c3:cf:eb:06:a6:8b:
a7:fd:64:1e:09:81:30:01:21:c8:50:40:30:c4:24:8a:a9:d0:
70:85:c7:8e:9d:03:c9:d6:d4:22:d3:04:df:31:79:0d:d0:b7:
72:f8:20:3a:78:5a:f2:57:7e:13:9b:50:2c:33:1d:9b:fc:f9:
b8:e8:8b:17:cd:06:5b:82:9f:80:46:8c:7d:43:6f:36:8e:55:
04:04:27:30:88:0b:5e:06:34:2a:02:44:c6:ae:39:d6:4f:4e:
08:dd:ac:92:0e:5d:80:23:95:83:ae:82:6d:1d:e4:34:6e:72:
97:db:b9:07:0b:d7:8e:72:ce:91:c7:e4:7a:26:df:cc:2d:a1:
65:43:e4:d6:12:fb:fa:e8:7c:c0:56:92:87:ec:2f:2b:bf:66:
df:e0:4a:f2:7f:d9:4c:35:44:f1:d8:ee:01:65:df:72:99:55:
f4:72:f8:55:4f:7b:9e:df:10:c3:89:d3:46:3c:c2:f3:e4:15:
24:f2:dd:fc:fe:5a:02:49:6d:b0:ea:4b:2c:d4:43:08:3b:8f:
18:04:0f:ad:9e:a7:dd:61:82:f8:fc:00:18:46:7c:1c:3b:38:
d7:b5:a4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:39 2026 by rpki-client