Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
File: ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json)
Hash identifier: 3P8ODuIHa75Z+c0bskyFVxzEZ58TzwMz4PpK9nbGQLc=
Subject key identifier: 2E:4C:40:A9:17:1C:D8:A1:DF:B0:D4:6C:A7:35:51:66:55:D9:2A:C1
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 019FAA1A273961187295249395CEC9AF4C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 19:01:08 +0000
Manifest this update: Tue 28 Jul 2026 19:01:08 +0000
Manifest next update: Wed 29 Jul 2026 19:01:08 +0000
Files and hashes: 1: 8qyFq0Jw2vV5jElWSS9BdEiMHZI.roa (hash: v/1+49rt+1xmD87nJbTdyd9Pwk6XUeag3Zc7Vhx+XuE=)
2: ENuqnzA3ruRTEDO8nV_unXXFG3s.roa (hash: jqM94Qjxb5BwlTK0O468kBtFYUuLS+gQcO3XoaFwmmI=)
3: roAOVMvnNsfrpVkf2GW7F0kGBAc.roa (hash: IkSo7h5qyB5UPtAZ0suaOuHLsEp0jVopR3VGK0uOiaE=)
4: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: Sn7akjNSSDIhTCKmC3deSMv8fDHETYToFATWPo+IJuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:27:39:61:18:72:95:24:93:95:ce:c9:af:4c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: Jul 28 19:01:08 2026 GMT
Not After : Jul 29 19:01:08 2026 GMT
Subject: CN=2e4c40a9171cd8a1dfb0d46ca735516655d92ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:0d:3f:e3:9d:ea:f7:02:c6:4a:9c:ba:d1:
48:a2:20:54:78:33:0a:73:25:09:cb:d5:eb:76:62:
40:c0:f5:1f:5c:c7:72:9d:74:cd:0d:e8:a4:f6:a9:
cb:8c:09:89:0a:11:d3:a1:ca:c6:c0:f6:79:e1:fb:
b0:21:fa:43:dc:17:02:7b:e2:4c:01:a9:66:90:a4:
f5:41:c3:c4:a0:46:dc:78:89:af:f3:7a:de:ce:22:
58:1e:d9:34:62:1e:88:09:1f:7f:15:ff:be:7d:97:
71:0b:fb:03:18:07:6e:bb:2c:39:49:3c:82:cf:24:
82:8d:d8:95:54:87:67:75:dc:5b:18:85:d9:74:4c:
65:8b:15:31:bf:92:6a:5c:0b:48:c6:6b:d9:d7:95:
e0:34:5f:0c:dd:4a:2a:df:ce:2e:23:a8:82:61:44:
e8:f0:a9:cc:ea:44:23:6c:96:3d:b2:c2:1f:f6:6c:
c2:38:66:28:11:35:5f:fe:94:80:88:9c:ef:07:18:
15:26:a9:57:1b:18:a4:67:9a:94:1e:19:07:e8:b8:
2c:53:79:1d:99:58:19:c5:02:96:50:ec:13:34:5b:
c0:b0:31:4e:4b:0a:37:ed:11:6f:67:68:4f:77:40:
69:f4:5f:b5:64:2c:85:e1:0f:7f:7e:6a:45:73:71:
7e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4C:40:A9:17:1C:D8:A1:DF:B0:D4:6C:A7:35:51:66:55:D9:2A:C1
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0d:e6:31:12:ef:b8:a7:aa:39:93:6d:ca:73:1e:d7:c8:8e:
a2:46:f1:0d:13:82:56:2a:dd:81:f7:f0:4e:8f:dd:71:31:ad:
e3:54:d6:0a:ed:d0:38:2a:8c:cc:62:6a:17:85:cf:27:e5:78:
5a:75:08:11:8f:41:8a:36:50:09:af:62:35:de:31:41:6e:96:
ad:0b:29:a6:6b:15:79:6f:65:87:5f:39:cb:fb:bb:fe:1e:27:
5a:79:23:5a:1c:fe:a3:4b:17:83:b8:1e:07:53:29:18:27:45:
fa:d7:62:b8:cf:1c:7c:c8:fd:be:79:a7:f2:de:d1:b9:63:2b:
0a:a2:00:a0:c2:87:bb:23:21:b0:45:54:77:26:0c:e5:0f:72:
6e:d6:af:4e:41:ed:de:34:df:a3:5e:42:15:a7:e9:0e:1a:6e:
f4:8f:8b:b0:dc:c4:1b:86:10:86:ad:19:05:22:70:47:48:a2:
0e:f1:41:2b:cd:2b:b5:ce:fe:06:3d:ea:67:06:11:e7:0e:43:
40:bc:d9:4a:6c:b5:33:16:8d:cd:08:fb:a4:dd:56:9c:10:65:
2e:77:27:eb:ba:39:82:e4:41:6d:0f:59:c0:db:ac:e4:ce:a8:
5d:24:f4:26:80:96:19:23:20:a6:79:fd:fd:da:8f:56:e5:d2:
b4:24:26:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:50:46 2026 by rpki-client