Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier: 1fvj0yjWDq5QE0HJHXL+YSkc+cZf8CkdPE7TlycaVFQ=
Subject key identifier: FD:35:92:79:71:D9:63:3E:03:1D:F5:6B:FC:90:88:71:7F:64:8C:C2
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 019FA44F099F7010D0F27B15C708D6577547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number: 0A7C
Signing time: Mon 27 Jul 2026 16:01:10 +0000
Manifest this update: Mon 27 Jul 2026 16:01:10 +0000
Manifest next update: Tue 28 Jul 2026 16:01:10 +0000
Files and hashes: 1: H1VE2ZkBqR8y9rnIA-ZTuzeFoCk.roa (hash: 3CEpvrN229vRpcqITP4Y01YD4936c1DOC0Lixuq0wEM=)
2: qRXAdJp0xbYo0FT6eucc0rsG8Yw.roa (hash: fUKa/Z+tq+35Z3GUfMU3rii79affOtxwZwlAfn3uJ6U=)
3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: OrT8KtRdZAC7dnK92Uc9TCn2Qkpy2j0nYpW56W212LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:4f:09:9f:70:10:d0:f2:7b:15:c7:08:d6:57:75:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Jul 27 16:01:10 2026 GMT
Not After : Jul 28 16:01:10 2026 GMT
Subject: CN=fd35927971d9633e031df56bfc9088717f648cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:82:12:ff:0a:e6:0d:36:e2:44:4a:69:32:2d:
4c:f3:48:57:21:f8:f1:0e:c0:5d:36:8b:ab:06:27:
06:45:b1:50:8d:90:cd:8d:4b:71:31:26:16:eb:02:
18:5f:1b:38:52:af:76:53:23:2e:03:10:dd:e0:03:
38:f4:99:ea:00:68:f8:51:fc:5d:24:29:27:95:28:
00:a4:5e:22:ea:59:01:33:fa:13:6a:ab:04:04:f7:
30:ed:2b:86:b0:bb:16:33:f4:66:39:41:fa:49:21:
e0:91:64:9b:14:07:0f:7f:55:96:0d:35:38:bc:5f:
5d:46:c9:5d:fe:4b:1f:c0:37:73:78:1a:93:02:c1:
bb:8c:48:f2:28:d7:86:a2:ac:11:ff:64:8c:7d:a4:
47:f1:67:47:eb:be:f2:e3:88:bc:f3:61:74:13:8c:
11:c1:07:d0:96:0f:9f:2f:0f:bc:8e:00:68:d4:0f:
d4:50:db:e1:f3:ce:b3:bd:27:d4:08:51:83:69:ad:
95:29:ca:aa:c0:16:f9:b8:d5:0c:a7:4b:8c:cb:82:
de:3c:14:9f:31:48:87:07:67:c6:00:92:b6:13:56:
30:c7:96:83:9b:d5:27:37:0d:27:6b:2f:c1:02:1c:
a6:80:35:bd:2c:1e:3a:6a:fd:73:74:70:42:96:5d:
ea:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:35:92:79:71:D9:63:3E:03:1D:F5:6B:FC:90:88:71:7F:64:8C:C2
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:84:19:d1:6b:f7:2a:16:64:b9:79:05:0f:9c:0e:4b:6e:5b:
1c:84:af:02:0c:f3:89:69:66:00:90:8b:6c:73:bc:f7:5b:41:
9a:5a:ce:0f:2b:de:68:eb:a0:e7:01:ef:0b:be:e3:09:ef:bd:
52:92:da:a7:a4:59:23:46:08:57:57:c6:f8:5c:12:20:1f:6f:
e8:dc:3b:6e:2b:c3:d1:a1:09:a4:fd:e6:58:c8:9c:39:7f:7e:
44:6f:87:82:74:f9:12:6b:88:fc:11:09:d1:57:9f:6b:ff:9a:
fc:1b:ee:13:d8:bf:8b:fb:f1:63:03:c4:0e:af:f2:54:ca:7c:
ce:6f:49:43:61:fe:16:12:a2:07:ca:04:ed:ab:0a:e0:0d:90:
ed:a9:ae:b8:01:cb:07:65:3b:97:dc:39:b3:f0:3c:ab:01:df:
a6:78:fc:ea:39:f2:c0:99:93:2b:17:61:5c:00:cb:76:a2:e9:
49:d4:31:40:27:a8:b3:1b:39:d9:a7:28:23:d1:82:59:5c:58:
83:ae:43:89:e5:0f:2b:a1:03:76:28:cf:b4:bb:59:15:01:e9:
d8:8f:dd:e1:c4:23:a8:d2:c0:2e:03:1c:15:c1:f6:5b:23:4b:
47:20:cd:b5:3d:69:a2:d7:5a:b2:d1:25:28:32:43:04:b2:89:
a0:40:4a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 21:01:12 2026 by rpki-client