Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: 7L3lx/X1VqU4MfCu1tgteyWlzjFJF/hdfTihqAZuIv4=
Subject key identifier: B3:89:5A:AA:59:5C:74:15:0F:A0:E5:67:1B:A2:F6:02:11:25:38:7A
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 019FA0046F9554CD7ED1D1CDA1805E4CA2A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 16F9
Signing time: Sun 26 Jul 2026 20:01:13 +0000
Manifest this update: Sun 26 Jul 2026 20:01:13 +0000
Manifest next update: Mon 27 Jul 2026 20:01:13 +0000
Files and hashes: 1: C3nc48r2b2USpSkgOVzgsEQF2h0.roa (hash: kvFI72ZsGMqBnEvEAYRTWIp6gxPL8rac8rSJwcsVy0w=)
2: XaIcpqpb27hhGRIZ8h_xuzKRev4.roa (hash: pQLbKPAj3ndWd5qjjlikkIwvz29S32Fkmehgv5Ouuf0=)
3: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: EtidHfCouKOG1aiYUm3fotIWk3CaLOyjPDw5g2rejGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:04:6f:95:54:cd:7e:d1:d1:cd:a1:80:5e:4c:a2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Jul 26 20:01:13 2026 GMT
Not After : Jul 27 20:01:13 2026 GMT
Subject: CN=b3895aaa595c74150fa0e5671ba2f6021125387a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e7:b5:f8:a0:74:d9:fa:cb:b9:eb:bb:1e:56:
8f:f1:07:f8:38:d2:3a:30:5b:f0:c5:5b:c5:83:7f:
c4:24:c5:12:b2:e8:a7:84:7f:14:ec:e4:a5:f3:81:
7f:00:9d:62:d7:b9:1b:4f:3d:a0:95:99:49:e1:69:
97:e9:c3:f9:51:03:54:00:f7:31:e7:3e:5c:09:c4:
ed:dd:c1:aa:f2:55:f1:57:8a:b1:bd:7b:61:38:b3:
44:66:46:04:18:44:2d:45:b7:37:cd:e1:13:7a:67:
35:2f:5f:5d:65:f6:16:2c:67:9c:d5:db:12:d0:33:
f3:67:fc:62:a8:1b:88:72:dd:a7:07:d4:41:84:ff:
c1:5e:80:27:80:28:9a:47:5c:9c:2b:d4:a9:12:b9:
bd:9b:24:31:38:4f:8f:aa:8f:82:f6:bf:f4:fb:cd:
98:e0:7a:96:e9:c9:d8:29:78:22:4b:ac:43:71:57:
0e:34:e0:f9:a1:46:8f:5c:97:e1:46:7e:07:ce:aa:
91:a4:01:f4:dc:42:7e:e9:ee:95:ed:77:b0:16:44:
c8:87:40:f5:55:dc:19:85:b7:8f:25:15:ac:d1:7e:
1f:85:05:07:ad:60:55:49:0b:a4:75:12:6c:ef:62:
b0:59:f1:d7:28:6c:a8:cd:b8:97:19:ea:1d:09:3c:
70:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:89:5A:AA:59:5C:74:15:0F:A0:E5:67:1B:A2:F6:02:11:25:38:7A
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c9:45:a2:84:9e:78:a1:07:be:9a:40:99:31:7c:a5:35:0e:
8f:e9:76:c9:17:e5:33:ed:89:4e:23:41:c3:c5:7c:16:77:cf:
0d:e4:8f:ca:05:70:88:1f:55:5b:f9:e2:63:68:a0:e9:84:0c:
a3:ee:a4:13:fa:34:e7:d6:0b:a6:0a:d3:5a:4c:7d:7c:91:78:
21:4f:42:32:ed:e9:3c:9a:cf:14:e0:38:31:b3:4f:05:bc:a0:
d9:bd:4b:8f:90:83:83:e1:e8:f7:32:1e:2a:43:3c:49:36:aa:
40:f5:ff:46:d4:6f:c2:aa:3f:9a:f7:05:a4:c4:64:b8:ca:e0:
34:bd:8a:3c:6c:91:c6:db:b2:0a:7f:23:9f:ce:19:5e:df:38:
f1:0c:b6:5a:9f:3d:40:64:d9:fb:b2:74:fc:2c:8f:05:34:56:
1d:77:04:0a:0c:30:18:e9:ca:bb:c5:97:05:81:a6:ee:70:66:
e8:66:9e:36:ec:06:e3:56:4e:f9:55:c3:25:41:6f:fd:03:98:
02:65:09:f6:eb:79:32:bb:12:28:04:91:d9:d5:0a:c6:22:72:
fc:86:84:3f:e2:b4:c3:ac:56:04:6d:9c:19:cd:b7:4a:41:f9:
b7:fa:b8:6e:68:39:25:8b:49:99:b9:a1:6b:85:66:84:80:f7:
99:eb:d1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:52:29 2026 by rpki-client