Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json)
Hash identifier: RnJHfzNyeWu3dmj28VurQJW6slm/TtYCnBzYFRWFyOM=
Subject key identifier: D0:CA:65:E7:C1:44:96:B7:C1:F5:71:47:48:98:35:20:42:84:6F:DB
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 019FA9E2ADFD13AACB88AAFE9BCBCA9280A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
Manifest number: 1156
Signing time: Tue 28 Jul 2026 18:00:32 +0000
Manifest this update: Tue 28 Jul 2026 18:00:32 +0000
Manifest next update: Wed 29 Jul 2026 18:00:32 +0000
Files and hashes: 1: 0sTykt04zhafsgKWmG0fpAc6Xi4.roa (hash: s3D/zF9I60gRgjWMCWnW5l2vwcfUO0zatEx48bleBv8=)
2: 13bSAbvbvGDWUO5yvtSsKXnlK94.roa (hash: DXldFZAd6AGXUWvxh5LvcSzCrQoe+CYXwhAGhk24KDA=)
3: De_n5gWs77mFUbESDcEhMP4Zgu4.roa (hash: 6EezXySVgGXz55sVzTpFqjj+QzByDEb/wr63m1U01ek=)
4: T5zUGgRal9JKPPCQ5ILhLwlQlHM.roa (hash: YHDYE65RL2KgOZOOjjz6vjoQjHzxsBWW9qIdkVOIzBk=)
5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: uLruQjmLqQxzj7YB84A+jYIGHGkSsMcT6LKqNGdk2S8=)
6: Z943jXHlAqEjC8HhkAmn0vuwcbY.roa (hash: zwEb4pXvmmR3brxpaMTgJgnaLu7vluGbc09IMA9MXt4=)
7: aZEJdlE8rryKdFsxcXIyoyt-SOg.roa (hash: BG6zGbPXxvvnXkdjQ9fWCyghzw5YTxYUyEjcqpnK0GU=)
8: d9cqCh7w_HREeS5tpm1EQv7bdkc.roa (hash: DnP+rNEbo3897fPDs3e26jS0WYx/AYH67Gkmxad3fpM=)
9: tL-DJ8EbDPZqo5Hcwxd2ywWIDr0.roa (hash: 7ypgmIY8clfcgfXd8ScXxIyNvL0UG8VUmIwT7yY7+ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:ad:fd:13:aa:cb:88:aa:fe:9b:cb:ca:92:80:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Jul 28 18:00:32 2026 GMT
Not After : Jul 29 18:00:32 2026 GMT
Subject: CN=d0ca65e7c14496b7c1f571474898352042846fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b2:6a:a1:60:fb:73:2c:d3:a1:d9:77:1c:09:
2f:f2:a1:fd:ef:94:61:ec:2d:c7:09:f9:94:9d:37:
cd:03:e7:52:23:07:3c:69:0d:a2:9c:78:84:4c:54:
9a:66:d9:ec:9d:1d:7a:95:89:df:7f:75:f9:d4:c7:
1d:33:90:dc:b2:55:ad:62:80:dc:0d:9f:f7:cb:af:
41:6d:d7:30:ef:40:59:e8:b1:1f:17:cc:ae:6a:3a:
cb:62:d7:a5:bb:3d:ca:4f:bf:d9:84:df:78:d7:e0:
e8:c6:9e:4b:9b:7b:69:13:40:ae:fa:2c:8e:4e:47:
2a:59:6e:2c:17:f6:94:eb:79:e6:0b:b7:c0:8a:58:
6d:3e:e8:12:20:20:cf:56:61:68:6c:fb:71:01:30:
60:87:7b:35:df:d3:68:9a:95:e4:bf:e0:c5:09:96:
fc:38:40:1d:af:e1:fd:8d:90:b3:34:77:2c:9a:7b:
d1:f1:30:02:e9:3c:09:34:99:33:eb:9b:d9:c4:42:
df:5e:3f:cc:89:65:64:ac:61:33:97:b1:cc:92:b8:
d4:98:4d:ee:fb:05:8f:32:d2:6e:1b:c9:33:9f:88:
be:53:ee:ff:dc:a6:4e:03:95:b5:cd:60:fc:05:af:
89:e7:db:7f:4d:67:52:7e:18:b9:be:c8:fc:dc:bf:
56:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CA:65:E7:C1:44:96:B7:C1:F5:71:47:48:98:35:20:42:84:6F:DB
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:61:0e:0d:87:ae:93:66:3e:20:6d:fb:b0:b9:58:6c:9d:6c:
2c:84:45:1e:2b:6f:0b:02:21:95:d6:89:e5:92:b5:f2:60:ef:
95:08:0c:08:0c:82:14:c7:70:e1:0e:7a:91:d6:1a:f1:25:49:
a3:bb:85:7f:d1:f2:c8:84:23:e0:36:76:83:9c:ad:fc:76:c9:
6c:41:82:09:1f:eb:05:cb:3e:38:62:de:2c:39:81:61:71:db:
e4:36:c4:0e:70:2f:27:e1:e0:80:5c:e4:b4:b3:5d:5e:7d:af:
56:17:92:2b:d8:3e:9e:5f:3c:2b:08:c9:f0:0b:38:19:f2:97:
98:74:df:6d:9a:7d:c8:d5:2a:d7:37:c7:3f:53:07:d6:e5:69:
d7:2d:f5:aa:1d:87:bd:bc:cd:08:b0:7e:04:94:ca:1e:21:63:
4c:8a:48:c0:2a:a2:32:e0:d8:bc:d4:e4:df:f7:01:d9:b7:5e:
3e:39:1f:2b:d1:28:41:2d:04:5b:76:55:96:d0:1a:d7:be:c2:
e4:ed:a9:80:50:90:8e:d6:d2:02:f8:8c:9a:08:65:9a:c6:5f:
55:bb:77:05:6b:56:54:ab:dd:c3:c7:e6:11:53:4e:db:88:6c:
39:c4:9b:d1:ef:9c:b3:d0:1d:f1:9d:45:a2:92:d9:f3:28:79:
48:2c:97:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:54 2026 by rpki-client