Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
File: YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft (raw, json)
Hash identifier: CywYYqm1HEB31uPRZqyrPsnm8bIJqPM3TWR2N9marUo=
Subject key identifier: 49:F3:2E:51:A5:E5:00:F8:30:1F:FE:6A:B5:AA:FE:3B:00:81:D5:09
Authority key identifier: 61:F8:0D:83:D9:48:E2:48:B9:68:60:66:76:60:7B:84:70:E2:E4:1C
Certificate issuer: /CN=61f80d83d948e248b968606676607b8470e2e41c
Certificate serial: 019FA9E33258A931F4FDE3C5C5BC452AEBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
Manifest number: 6B
Signing time: Tue 28 Jul 2026 18:01:06 +0000
Manifest this update: Tue 28 Jul 2026 18:01:06 +0000
Manifest next update: Wed 29 Jul 2026 18:01:06 +0000
Files and hashes: 1: 1-LvrevNxn8xjvxwWO9shI6PuFvU.roa (hash: iqWesMjsdrjmX1g6QE9vIbNV9BRrg4iuwDL5XHq0ynQ=)
2: YfgNg9lI4ki5aGBmdmB7hHDi5Bw.crl (hash: ZmbiDa7hunP3F3pKNrX/x6DxFa98bl8RLAGoPq2lvTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:32:58:a9:31:f4:fd:e3:c5:c5:bc:45:2a:eb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f80d83d948e248b968606676607b8470e2e41c
Validity
Not Before: Jul 28 18:01:06 2026 GMT
Not After : Jul 29 18:01:06 2026 GMT
Subject: CN=49f32e51a5e500f8301ffe6ab5aafe3b0081d509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:a8:d1:73:e5:87:0f:16:bf:18:fe:fc:10:
31:b1:64:e4:f8:09:34:a3:09:07:a8:7d:99:49:c0:
18:f2:8c:1a:6e:7f:1c:fa:73:a1:64:12:4c:01:89:
a9:83:1e:5f:7c:61:f3:39:62:b7:25:69:28:5d:5f:
68:94:03:b5:cb:11:e5:9c:0f:f7:bc:e0:b4:c4:e0:
c6:68:a6:5d:b0:03:81:ae:04:37:2b:84:0e:03:c3:
5c:c3:38:f4:aa:7e:81:14:ef:35:3a:cc:fe:5c:d8:
56:9b:e6:6c:17:4b:87:dd:54:15:2e:eb:88:d2:01:
3b:53:08:6d:7b:fb:fb:62:7e:21:3c:94:cd:6f:13:
7c:8c:00:79:e8:44:97:f0:6d:b5:a2:82:c2:91:0b:
41:49:f1:48:66:1d:fc:aa:3c:29:16:01:bd:1c:2a:
5d:85:33:49:e8:cd:bf:59:a5:03:d3:b0:12:6d:66:
f5:45:f3:75:dc:75:6a:ab:47:25:54:bc:60:bf:68:
2e:eb:eb:08:d6:cc:9d:67:e8:d9:f5:ea:a5:e1:86:
9d:d6:58:18:23:34:b9:77:41:9a:4b:70:9e:cd:de:
d3:9f:89:00:18:32:64:f8:1a:e8:33:b6:2f:f1:80:
73:96:dd:95:d6:dc:63:cf:ce:a0:65:20:2b:c5:14:
b1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F3:2E:51:A5:E5:00:F8:30:1F:FE:6A:B5:AA:FE:3B:00:81:D5:09
X509v3 Authority Key Identifier:
keyid:61:F8:0D:83:D9:48:E2:48:B9:68:60:66:76:60:7B:84:70:E2:E4:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d9:fd:06:35:84:ca:18:32:84:12:9f:f0:bd:d6:68:79:a5:
bb:24:f2:da:00:d9:19:3f:e3:24:4c:4b:7d:f4:ef:74:76:9b:
2f:2c:06:16:6e:0f:e4:dd:41:e9:dc:ad:a5:ee:d2:51:20:f5:
f0:a8:bd:b3:8d:25:4d:61:21:fb:41:60:1a:04:2e:a6:76:df:
13:82:71:27:8c:1f:b6:5b:ff:db:bb:a1:39:17:c9:70:37:a4:
c3:2a:e2:74:f0:6c:a1:0e:b4:04:d5:de:7b:f9:38:44:17:31:
51:ba:11:45:48:ff:95:09:e4:04:28:d5:3d:22:99:76:b5:98:
c9:3f:ad:93:73:f9:33:cc:99:49:aa:22:2a:68:5b:b6:a6:30:
90:a9:6b:11:b9:0d:91:54:76:94:44:53:98:c0:95:a7:15:49:
63:cf:b7:c6:50:1d:58:80:fb:01:41:b2:fa:b1:d9:82:0d:e3:
c0:92:9f:ee:41:72:87:9e:97:6e:16:e6:fa:34:3e:f4:eb:df:
39:c2:4c:4f:84:79:11:60:a5:83:58:e7:43:31:01:8b:80:47:
e0:07:25:b6:74:e6:28:ca:40:4d:7c:f1:71:b9:2c:1a:93:ff:
e0:a4:fe:c4:29:7b:aa:75:76:ea:85:64:7f:0a:e9:4a:15:8c:
50:53:b6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:15:52 2026 by rpki-client