
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier: 78LLlc3amxEBq28zB0YOTy21s/dJIHCn5m3Xj5JHpzg=
Subject key identifier: 0C:33:DB:24:FD:2B:E2:3B:12:A2:05:2E:29:EC:34:C9:69:4D:BB:3F
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial: 019FAC3F266D615EF55FCB0D39F755A411FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number: 14F4
Signing time: Wed 29 Jul 2026 05:00:47 +0000
Manifest this update: Wed 29 Jul 2026 05:00:47 +0000
Manifest next update: Thu 30 Jul 2026 05:00:47 +0000
Files and hashes: 1: _V1LSsZtamsE4WXP60Yw8QNvv70.roa (hash: 86294W5FbZlicyPxaf1Bh5Vh3kJ1iu3Y1KxTGDfYWAk=)
2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: 355U35GTqsp3G1vlVu3zxGeOEspbAcYj+iv0WEojDBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:26:6d:61:5e:f5:5f:cb:0d:39:f7:55:a4:11:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Validity
Not Before: Jul 29 05:00:47 2026 GMT
Not After : Jul 30 05:00:47 2026 GMT
Subject: CN=0c33db24fd2be23b12a2052e29ec34c9694dbb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:00:47:4a:39:43:c1:f4:19:88:f0:d4:6e:54:
95:ee:85:01:b4:e0:bd:f5:8c:e6:0d:17:50:a6:63:
98:01:20:6f:82:b7:47:93:9a:d0:0a:fc:b3:78:77:
c2:00:33:fa:f3:fe:88:02:7f:72:c0:ce:05:0d:38:
3b:70:19:d9:92:c3:83:3a:b4:86:08:b2:e0:cc:11:
33:5d:62:50:dd:39:01:ff:63:e1:a5:22:a4:8f:62:
42:89:62:34:e4:4e:6f:a0:8e:40:ab:63:f0:fd:09:
e5:93:17:36:cb:90:4d:01:48:9e:17:9b:8a:ce:44:
5f:d4:15:0f:99:4a:63:79:8d:0e:36:f5:ac:d5:ad:
64:a0:fc:ef:45:21:55:7d:c0:fd:ad:83:4e:e2:ed:
c2:44:00:60:31:b2:7c:6c:f6:d6:b3:ce:86:5d:00:
59:0d:f0:0c:4d:89:5d:b1:1f:d6:33:a8:77:2f:b4:
64:1e:93:a5:e7:ba:61:2e:d0:83:10:b5:68:06:ea:
80:77:5d:4b:42:a3:63:bd:1e:b6:6a:81:d9:99:2b:
78:2c:ae:06:1c:7c:bd:c7:76:cc:13:28:f2:0e:7c:
b6:92:fb:4e:96:d4:25:2f:77:e8:74:9f:0c:b3:5d:
d7:e3:46:a5:e7:45:98:c4:a2:21:03:37:ff:03:11:
a0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:33:DB:24:FD:2B:E2:3B:12:A2:05:2E:29:EC:34:C9:69:4D:BB:3F
X509v3 Authority Key Identifier:
keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:96:a5:40:d0:b9:d7:aa:46:24:02:68:fd:f0:dd:11:71:c7:
6d:09:33:9e:b4:8c:92:cb:05:05:0b:93:9a:76:70:6d:f3:f2:
b2:2c:ef:44:96:48:4c:86:35:21:1f:33:0c:82:37:2d:36:66:
0e:4b:66:79:a2:91:b4:da:50:c8:83:31:45:b7:02:76:34:a4:
71:36:a5:43:51:dd:4c:33:f4:db:d1:32:e1:ba:db:ab:de:ec:
e2:47:ee:29:5f:2f:58:55:17:9f:6f:4b:9b:08:08:dc:e0:ac:
01:2d:2c:c1:4c:35:9a:65:3c:8f:36:74:99:89:1d:9d:1e:ba:
c6:07:14:87:73:cc:5e:cb:26:a6:53:56:fd:96:0a:0b:4f:85:
6c:89:41:d6:9c:0d:33:3e:cb:1e:f8:47:2a:9a:c9:ed:26:fc:
24:c3:48:ea:5c:2b:49:3a:fc:ca:e9:05:76:f8:af:c3:cb:48:
33:a7:9d:98:a7:7a:29:86:3b:00:24:25:fc:50:f1:07:fb:23:
89:67:c8:08:d4:fb:84:0e:62:87:06:6c:0c:22:32:d4:59:b3:
b3:7c:d1:50:8c:62:e7:fb:f1:69:8a:2e:5b:7f:a3:6d:96:0d:
8a:16:d3:29:2e:49:8d:ad:12:90:1a:9c:f3:3b:c7:4d:5f:5f:
03:80:d4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:21:44 2026 by rpki-client