Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
File: Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft (raw, json)
Hash identifier: PDAVdHYnT4VmJxKvm+8+nCwgsri4SiBs7fiHZL7qYN4=
Subject key identifier: AD:A1:D4:FD:81:CB:2C:8F:E6:8D:01:94:3B:E2:F5:85:88:25:6D:C2
Authority key identifier: 62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
Certificate issuer: /CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Certificate serial: 019FACAD424679019A47E989D36EBA467C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
Manifest number: 1595
Signing time: Wed 29 Jul 2026 07:01:03 +0000
Manifest this update: Wed 29 Jul 2026 07:01:03 +0000
Manifest next update: Thu 30 Jul 2026 07:01:03 +0000
Files and hashes: 1: 3Kmog7cWFs6s3S45GoXvhR3Efno.roa (hash: Iqqkv/IBYj5OUDfgj+1rxohlVAnDwSEOY17mdlZvfIw=)
2: JVvCSDu8rrifYpO5MIC8vy1zrds.roa (hash: okxALFImBayqCq+MjZ+88HtUfnizSp2j3P1VuBRZTtY=)
3: Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl (hash: 5ddrpBSF1uqOO4g4hpWgvVxCEcc+brgsVO4xIW6NiHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:42:46:79:01:9a:47:e9:89:d3:6e:ba:46:7c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Validity
Not Before: Jul 29 07:01:03 2026 GMT
Not After : Jul 30 07:01:03 2026 GMT
Subject: CN=ada1d4fd81cb2c8fe68d01943be2f58588256dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:86:1f:51:47:5f:c4:98:14:94:51:0f:38:
34:17:a3:f5:3b:da:13:29:ac:f6:ac:91:13:f1:25:
31:a5:bb:52:f1:84:30:a6:3e:32:d7:b4:00:ed:a8:
4c:15:ec:a8:80:2e:31:32:6c:5b:9d:8d:bd:fd:b8:
d8:51:f4:02:43:58:fa:a1:00:56:f6:4f:43:b7:85:
f6:23:99:a5:19:51:9b:a0:a6:ea:45:dd:6a:e5:e8:
1a:a3:70:bb:7f:29:1a:bb:70:00:de:9a:f5:48:2b:
cd:7f:c1:2b:66:f6:22:3e:0b:90:06:3d:ab:ad:ad:
c6:75:0b:4f:ec:e7:8f:ce:3d:38:c9:59:49:0b:bc:
de:fb:ce:aa:b5:55:70:02:36:06:cf:fb:f8:8d:4f:
29:0c:d5:8a:50:bc:16:f4:6b:6b:2c:54:f1:bd:73:
7a:d1:81:7e:41:68:ef:01:a0:43:03:59:ab:a0:45:
3e:9c:01:89:d5:ab:b5:1e:48:2f:05:ff:df:7f:5a:
48:15:e0:65:a5:3f:bf:52:b2:64:c6:1e:a4:92:6a:
e9:22:14:75:39:44:0e:c0:d8:51:ba:09:05:9b:7d:
6b:0f:0f:da:7f:1a:38:b5:28:46:bc:3b:1f:ba:7c:
fd:fa:41:33:89:fa:61:13:f4:40:b3:a3:bc:1f:fa:
4c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A1:D4:FD:81:CB:2C:8F:E6:8D:01:94:3B:E2:F5:85:88:25:6D:C2
X509v3 Authority Key Identifier:
keyid:62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a4:f4:07:ce:ae:a6:fc:0b:ce:b6:9f:12:30:07:f6:b8:81:
bd:f3:be:e5:58:86:9c:4a:9a:ec:ca:79:4d:ab:59:76:5a:4f:
30:89:93:b0:59:c9:28:72:3d:ad:1e:10:aa:40:a9:cb:a3:50:
2a:cc:fc:50:b2:22:ee:d8:dc:cb:5d:f4:89:e5:c2:0d:38:d9:
7c:18:96:fe:81:56:6b:1e:8f:36:b9:12:49:5d:45:96:ec:b6:
df:88:a5:fc:59:43:8e:ab:45:9d:00:b9:61:24:49:cd:2d:54:
35:11:8e:d2:be:3f:25:71:d5:2f:4f:c7:c3:77:49:67:c0:1a:
a7:db:d7:e1:a4:36:b5:d6:03:d1:95:fa:ad:a5:9a:05:07:06:
a1:d6:b8:7b:31:90:6c:6e:90:9b:a5:f3:1b:40:1c:19:3d:6e:
56:b7:40:25:5b:b3:89:6d:8f:e2:ad:f6:ce:86:8f:d3:b1:4d:
f0:04:70:b9:bb:25:92:fc:5d:88:dd:de:ca:58:73:2f:4d:a1:
00:ae:2b:8b:55:5f:c1:95:0e:50:ef:75:0e:18:8a:dc:94:6d:
e6:e0:ed:ce:0a:d5:ba:39:8c:5f:73:49:f8:f1:7d:52:e9:43:
03:01:eb:5a:e6:02:5b:4d:9c:b9:d6:c8:9a:d3:03:84:e9:58:
92:a9:4f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:16:17 2026 by rpki-client