Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
File: YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft (raw, json)
Hash identifier: EjewfGvtnN69kkXuSLLNG6fCp/Q3zzaVkusF6vt2KvI=
Subject key identifier: 29:68:36:24:A9:1E:50:41:28:07:AF:02:1B:9F:08:64:6B:BA:78:3F
Authority key identifier: 61:F5:FB:83:DA:45:58:46:EA:64:1A:A7:21:11:C5:FC:2C:7C:46:83
Certificate issuer: /CN=61f5fb83da455846ea641aa72111c5fc2c7c4683
Certificate serial: 019F393C472DD07092AF544EFFB49857343C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
Manifest number: 5D
Signing time: Mon 06 Jul 2026 21:01:19 +0000
Manifest this update: Mon 06 Jul 2026 21:01:19 +0000
Manifest next update: Tue 07 Jul 2026 21:01:19 +0000
Files and hashes: 1: YfX7g9pFWEbqZBqnIRHF_Cx8RoM.crl (hash: 2rD0DsM5P6HiIpHHLxNREwfakvCWJyjHhJhDjm5RPwE=)
2: r4vw3CV_1lGW-7JvXgWzIRjbm3U.roa (hash: 0TvJ5qpmjC4SexSyQHzjCW5fHWTpVt06kKMKKnnsoV0=)
3: w-zL9cm1eAuLHEkbGACu_Uty4Ws.roa (hash: 4C8sJjkhX9FkHPcP/da4C31h5T/IA24CkXSEegBHM68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:3c:47:2d:d0:70:92:af:54:4e:ff:b4:98:57:34:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f5fb83da455846ea641aa72111c5fc2c7c4683
Validity
Not Before: Jul 6 21:01:19 2026 GMT
Not After : Jul 7 21:01:19 2026 GMT
Subject: CN=29683624a91e50412807af021b9f08646bba783f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f8:3b:8f:d0:08:76:cb:b7:60:54:c8:4f:12:
a1:fb:14:ea:9a:95:dd:9e:0c:1f:ca:27:1e:ac:77:
6d:62:d7:d0:26:79:7b:88:96:5e:45:59:2a:50:f8:
a5:4c:0c:45:c5:00:ae:18:02:8c:a3:79:69:dc:2d:
97:14:c6:da:e5:20:16:62:59:16:80:69:10:66:4d:
69:2e:e1:a3:b1:d1:c9:ca:03:84:db:4e:cc:c2:3e:
c8:90:97:b6:5b:cf:d1:be:17:60:42:67:97:85:65:
9b:59:5a:cc:9c:38:0e:1b:60:3e:2e:b9:86:92:af:
dc:71:3e:46:c2:3e:fe:53:fa:04:8d:28:f1:c9:12:
8b:d9:6b:28:48:1d:f0:01:f4:fc:6b:c0:c1:c7:0c:
71:e2:9d:f1:6c:b1:df:b3:f4:6e:46:14:db:a8:37:
5a:ea:7f:aa:de:d9:fa:b0:c6:d7:81:60:e2:8a:6d:
56:66:e1:ec:f9:d4:f2:cb:b4:7a:ac:b2:84:15:f4:
01:56:77:5e:4b:90:09:db:34:84:15:bd:d3:46:51:
85:4f:9f:93:cd:a8:bc:f5:83:c1:91:da:fe:91:22:
21:30:f4:55:e5:67:0a:09:4a:ff:e6:cf:1f:dc:b2:
46:ab:49:fa:9a:36:53:c2:a3:02:89:31:fb:24:be:
b6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:68:36:24:A9:1E:50:41:28:07:AF:02:1B:9F:08:64:6B:BA:78:3F
X509v3 Authority Key Identifier:
keyid:61:F5:FB:83:DA:45:58:46:EA:64:1A:A7:21:11:C5:FC:2C:7C:46:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ce:8a:9a:53:31:83:30:fc:8d:f6:a4:2e:c6:ab:b8:28:7b:
d0:64:f5:e5:42:af:f7:35:c5:34:e7:a7:8b:e8:b2:91:8f:5b:
ee:1a:0b:8c:ef:68:f2:9a:17:4d:ad:c8:69:a4:3b:13:0f:6d:
8a:d7:5c:83:16:84:36:52:78:a5:59:f0:85:c6:75:b6:53:fe:
49:e3:f9:16:e4:ad:3b:1c:92:a9:ab:4b:f2:86:3e:e2:f3:5e:
46:f6:63:41:39:42:e5:bf:8c:78:b3:d9:02:e2:14:6d:b2:0d:
13:04:59:c7:af:db:64:5c:54:4b:92:7c:66:2b:35:c5:93:82:
d5:76:6a:e8:2a:3f:f7:69:cc:93:17:dc:8b:37:b2:d9:cc:bc:
75:b2:a0:c2:b7:47:50:25:30:74:aa:17:c8:4d:e7:80:66:21:
29:a2:35:d9:cf:db:61:f8:26:4a:50:88:33:c5:99:21:d7:26:
92:9d:cc:39:44:4f:21:aa:b9:2a:12:73:a5:0e:9c:cb:50:8b:
6e:78:a7:19:72:84:8b:54:28:50:12:28:e2:f0:c9:ea:13:99:
6d:ba:a0:a0:c2:01:9b:95:fe:cd:0c:18:71:80:07:14:e5:29:
da:aa:e0:25:78:6f:96:1a:a6:d4:23:e2:60:5a:72:a2:0e:db:
4e:6a:1e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:17:26 2026 by rpki-client