Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: KTj66EshW7tRs4Ol1YsbNHRPMXFkalnStwzQfaigwEo=
Subject key identifier: C6:C4:51:5A:39:49:9F:A5:60:17:D2:51:0A:1D:9F:B2:A7:15:70:F1
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 019FAABE7774A8C9F44C4788C5EDB145E654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 0D90
Signing time: Tue 28 Jul 2026 22:00:36 +0000
Manifest this update: Tue 28 Jul 2026 22:00:36 +0000
Manifest next update: Wed 29 Jul 2026 22:00:36 +0000
Files and hashes: 1: 6PWOGz_KqRkb1zSJBPSYqwA3Obk.roa (hash: 2QNX7SpmW+cQkXWOHdllDN5APRnT1YGjOBVoLe9iX0U=)
2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: /YJThFzZhXo7oLEzyqjwUaXDenF9CS1764WL5XEqxBg=)
3: prAX8QK9sJ83-_8sb5b9uyxyLB0.roa (hash: MGpYm8TiAMHtR6UX1RiE9OEkX3HH/xl2rU9chl3K2sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:77:74:a8:c9:f4:4c:47:88:c5:ed:b1:45:e6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Jul 28 22:00:36 2026 GMT
Not After : Jul 29 22:00:36 2026 GMT
Subject: CN=c6c4515a39499fa56017d2510a1d9fb2a71570f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:d1:e0:ce:1e:74:d9:25:f9:db:02:99:f6:
60:b6:6a:e6:4d:0a:d2:b1:35:b5:d6:0d:30:84:1d:
44:37:49:1b:22:50:65:92:ec:ee:f5:e5:76:2b:77:
f0:9c:7f:e6:11:b8:25:6e:3b:60:a7:bb:9e:9b:80:
66:33:ed:83:c6:7e:ff:f3:9a:05:67:8f:44:66:0d:
c8:ef:83:21:56:96:8a:c8:c6:85:3c:72:86:5a:29:
7f:13:ca:5a:5d:a8:b2:2e:0a:85:1e:40:67:50:0a:
db:82:d6:dd:84:d3:98:a0:e8:d0:be:95:ed:0d:77:
71:5b:5e:03:66:16:88:f0:16:c4:b6:23:e3:26:b8:
c4:2f:b3:bb:7e:2a:3d:48:ed:56:f6:9f:dc:ec:c5:
97:a1:17:ce:7f:5c:34:b6:51:6b:89:a5:d1:04:8e:
70:81:68:18:6a:50:3e:3d:0b:01:2f:d4:9a:43:e8:
88:a9:2a:f7:10:38:3a:79:53:53:69:41:af:49:2a:
74:1a:ec:69:93:3f:7b:95:cd:bf:28:45:ed:33:71:
7b:99:c7:48:17:a8:16:c0:b2:0a:aa:02:0d:88:ea:
a7:2f:4f:68:33:65:d9:8e:06:71:88:80:a5:14:ae:
66:24:26:b7:eb:b1:73:63:08:90:d2:47:db:1c:34:
ac:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C4:51:5A:39:49:9F:A5:60:17:D2:51:0A:1D:9F:B2:A7:15:70:F1
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1e:6f:45:0e:f4:fb:44:e2:29:69:cc:0d:c6:8b:bd:01:bb:
a1:42:b1:f4:6f:e4:8c:2c:3f:8d:ad:87:98:5a:50:05:df:c1:
96:b5:85:83:f5:42:65:0e:4a:5f:1b:f4:e9:96:3c:a5:af:67:
7c:c3:19:13:d0:17:a2:f0:93:aa:58:fd:db:b8:c7:b8:10:0e:
e9:37:33:c5:bc:3a:f1:d5:82:26:67:e1:71:da:15:76:72:d5:
12:d8:91:b6:f5:75:f2:ce:ce:f5:01:25:38:af:03:2c:c0:bb:
1a:8f:e6:a2:8a:32:36:1e:4b:80:fc:55:25:e7:f9:12:56:20:
f8:88:6a:48:9e:08:ef:fc:8a:a9:cd:d2:cf:0c:d0:63:8b:12:
6b:0c:9e:f2:76:5e:d4:18:ae:47:dc:12:ac:51:db:7e:c0:45:
ae:c7:ad:ba:39:6d:fe:29:13:63:96:9c:32:d8:5a:c3:e0:1a:
63:a4:1f:73:2b:b4:b5:ea:12:73:f4:06:39:f4:3d:94:f7:35:
ad:d7:7a:e1:dc:dd:46:8b:4d:7b:da:c5:0f:33:d6:6d:a5:38:
b5:02:73:86:55:47:0d:a7:6f:f9:23:8f:80:a5:63:09:37:d5:
e2:7d:30:e7:78:d1:fd:04:a2:a2:c7:f7:63:12:e4:72:11:f5:
b2:5d:62:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:59:21 2026 by rpki-client