Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json)
Hash identifier: x2/2jKlv/F36pz8VeJBdbjYkxHP475M54FBgQNiXlz4=
Subject key identifier: 6A:F4:B8:5E:5B:A6:0F:54:B0:D9:F2:EA:CD:0F:CC:0B:9E:EC:97:7F
Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Certificate serial: 019FAABEE6F472BA838340B4CCFA57DFDACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
Manifest number: 042B
Signing time: Tue 28 Jul 2026 22:01:05 +0000
Manifest this update: Tue 28 Jul 2026 22:01:05 +0000
Manifest next update: Wed 29 Jul 2026 22:01:05 +0000
Files and hashes: 1: 9ZaI8P7W_rtc492x3ky7rPk83Y8.asa (hash: MzLmuEES291ExAirdiJ6+pNE6IoqMZTiHB+WGFxcNOs=)
2: iGdr3YLiLVQi6j5DQ01DGKsu5ss.roa (hash: h6FlbN1+Nek1LKhgDeDKXC7AdnM99VdSyR1ScXlrIKc=)
3: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: EMDv2Hth32E3dFjDHUnU/DoB0xqM+ybZ4Os+Jr937Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:e6:f4:72:ba:83:83:40:b4:cc:fa:57:df:da:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Validity
Not Before: Jul 28 22:01:05 2026 GMT
Not After : Jul 29 22:01:05 2026 GMT
Subject: CN=6af4b85e5ba60f54b0d9f2eacd0fcc0b9eec977f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:ca:03:b1:f2:05:58:9e:8a:c5:68:9a:ea:
b8:e8:99:31:b4:50:d2:db:e2:da:63:a6:59:99:fa:
82:74:96:bf:af:fc:01:1e:f7:f2:f2:ea:96:a2:01:
9e:c2:b3:ed:d1:9e:ef:77:34:2e:7c:c4:36:59:63:
88:cc:c0:c4:76:e5:26:87:8b:b3:9e:da:e5:6e:21:
ad:83:eb:98:56:31:0c:90:0b:21:a2:df:95:64:61:
c4:c1:fb:fe:5e:d5:8c:50:f4:75:d6:1a:fe:e5:1d:
2a:e0:13:92:07:fa:bc:aa:41:0f:1c:a2:85:cd:75:
bb:69:ff:f0:c6:23:70:aa:e8:34:85:2f:f5:cd:81:
d1:4b:a9:cb:a8:d5:4e:27:ba:0d:46:79:ee:b9:a2:
7e:ff:92:95:2a:e7:c6:8d:cc:6b:ff:2a:12:af:a7:
5e:8b:27:09:69:b0:a9:91:89:71:da:d1:1b:33:d8:
2e:9f:b6:1a:51:1a:6e:9e:5b:11:35:c1:ca:7d:0d:
55:8f:ca:e8:e4:d5:f9:9d:5b:9b:a5:1d:8a:bc:7d:
03:e0:50:39:e3:36:a0:34:83:c6:49:6e:2f:34:55:
06:ae:a5:e2:a9:72:7d:18:ff:e7:37:58:c3:14:35:
75:d3:29:1c:b9:7f:9e:19:74:e1:80:98:d6:62:54:
7e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F4:B8:5E:5B:A6:0F:54:B0:D9:F2:EA:CD:0F:CC:0B:9E:EC:97:7F
X509v3 Authority Key Identifier:
keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:73:3f:b1:bc:d1:37:c7:cf:83:60:c7:e0:cf:ce:a1:ab:5c:
de:76:f4:20:a4:b1:db:f1:63:8b:e1:d0:d3:d0:92:3f:85:3a:
ba:c2:04:ac:cc:7d:9a:53:a1:73:4b:2a:5b:83:a6:7d:fa:48:
a9:e3:d4:fb:39:57:76:af:c0:a3:32:d9:c8:42:ec:35:c1:3e:
1c:8e:7a:d7:07:43:40:10:af:29:1c:00:10:3d:34:22:f5:63:
c9:6f:38:b2:d5:05:16:e9:74:5e:7e:54:95:db:99:31:00:09:
26:79:86:a2:bd:36:51:d4:22:28:13:4f:ed:c7:11:35:84:18:
7b:86:51:e0:e9:bf:5d:ae:e2:16:13:3b:8b:8a:9a:39:5f:d7:
37:af:d4:44:9d:f6:23:25:fa:c2:6f:6c:2c:a7:ee:ba:84:41:
46:df:bf:39:49:0e:f4:02:c5:da:cd:12:03:bc:3b:b0:66:6c:
f6:13:2e:98:f5:3c:aa:a2:1a:00:0b:82:8b:06:cf:2a:e3:a0:
b0:9e:2d:f2:ac:fd:4c:ed:7a:8e:77:09:88:07:c7:4a:65:35:
8f:48:98:81:57:38:3a:d7:23:8c:71:5b:fb:17:dc:88:db:85:
53:75:81:9a:5b:03:54:e6:85:b4:d5:25:98:a2:cc:60:3e:0e:
22:29:57:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:11:31 2026 by rpki-client