Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
File: YRuftFY550kvKzYx9kD2q5r7YpA.mft (raw, json)
Hash identifier: N/uBEMgOlb09wR/B6DHESkXoOIugmz0ksIO9lZZBRiM=
Subject key identifier: A8:80:D5:95:F1:CD:30:5A:07:56:33:FF:E4:B4:6B:0E:FE:B9:F5:F3
Authority key identifier: 61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
Certificate issuer: /CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Certificate serial: 019FAB2C285A2D04DEBBFB83A356D5A6C4AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
Manifest number: 0476
Signing time: Wed 29 Jul 2026 00:00:25 +0000
Manifest this update: Wed 29 Jul 2026 00:00:25 +0000
Manifest next update: Thu 30 Jul 2026 00:00:25 +0000
Files and hashes: 1: 3-z9WVuuMK0MQ-O8ytcjQmUulmQ.roa (hash: QlGcIApQxI3USCeOW3H47w4RX3p+KD+avqAifqggosI=)
2: YRuftFY550kvKzYx9kD2q5r7YpA.crl (hash: oZyd5HAfkhBLdFpf8FMif/YTZhppHrDq522lP4kfx8Q=)
3: eYKGIFqmXxArxKrm4dHPlBfdDkQ.roa (hash: OjAQmRNCdlZ/ho0O0hjfQYZhYcPqc7W3tUBnTWwRO0M=)
4: i8JTjG8kAd1c1HqV5LoJhukgMAE.roa (hash: u27SpMwjFzAC7wQTCgUg0cr2wavmv6lyaTijyCZtCvI=)
5: uKdnnQsot7mlRO752cNll6GISRQ.roa (hash: VbgboVS4OB0UdrRSp+d5djlaTMUsF7uI2qR/6y5b4JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:28:5a:2d:04:de:bb:fb:83:a3:56:d5:a6:c4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Validity
Not Before: Jul 29 00:00:25 2026 GMT
Not After : Jul 30 00:00:25 2026 GMT
Subject: CN=a880d595f1cd305a075633ffe4b46b0efeb9f5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3c:18:52:dd:84:5f:f2:b3:0c:36:78:f4:62:
00:64:e2:eb:c8:c9:e9:8e:5e:9b:66:e1:1d:11:5c:
50:12:5f:7a:a5:c4:ab:4d:62:88:75:4b:95:9b:60:
22:39:ba:d5:64:b4:75:65:c3:e0:8d:9e:2f:05:ad:
dd:29:c7:dc:cc:f3:4d:79:27:d0:a2:d4:78:e8:2d:
2b:06:8f:61:90:1a:f0:c3:e3:60:fa:a7:de:95:d6:
e4:10:d3:cd:f8:c9:5b:4c:9b:28:eb:e4:f6:4c:fa:
6b:47:0a:40:ab:61:e7:8c:56:38:3e:e1:6e:f2:ad:
60:4d:35:5d:63:16:c1:da:8a:ef:14:55:85:83:40:
b4:da:e5:0d:60:3e:cf:3c:b5:47:9d:ff:ca:aa:69:
f9:02:4f:f5:c2:28:ad:75:56:1d:8d:d6:a3:ef:93:
24:50:52:85:ff:94:ae:0f:50:72:f2:27:eb:58:af:
f5:f6:34:08:2b:ae:1d:50:75:38:17:27:09:94:bf:
7a:6e:4f:e8:7c:e0:b8:a6:26:39:ce:ec:b3:c7:95:
52:25:f6:4a:76:5e:8c:97:8c:d9:48:fb:a2:07:6d:
fb:27:9f:da:8c:65:99:1c:37:e1:0e:46:e3:46:0c:
47:5c:be:ca:c5:11:c2:90:c7:fb:cb:32:5e:f8:23:
fa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:80:D5:95:F1:CD:30:5A:07:56:33:FF:E4:B4:6B:0E:FE:B9:F5:F3
X509v3 Authority Key Identifier:
keyid:61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:54:39:34:61:ac:25:60:ed:44:35:af:68:00:c9:7d:ce:13:
b7:16:45:5a:e0:f4:f0:de:3d:63:29:83:2f:c8:6c:08:8c:bd:
5b:89:07:55:63:5b:e6:b3:29:01:86:d9:bd:f5:bf:ef:0b:8e:
70:c6:4a:a1:2b:69:f0:4a:0c:dc:e6:b2:0a:28:05:8e:43:b2:
07:d2:d2:60:31:cb:b7:70:08:01:fd:fb:bb:2f:5b:30:73:14:
51:d0:aa:53:71:b0:1d:74:00:76:f0:3f:d2:b5:6c:f7:28:69:
61:ed:5b:26:04:4a:8d:21:07:ff:c2:16:d0:12:bc:a3:ca:41:
76:0a:b4:da:7e:c2:55:13:a0:7c:7d:e1:dd:40:4c:7b:d8:37:
fd:50:3a:dd:f4:e2:2e:ac:e1:99:4d:dd:f5:1f:82:7e:da:07:
10:55:6a:57:82:0e:95:d8:d2:e2:ed:d4:3a:6e:b3:6e:8e:09:
36:31:a8:57:bc:6a:07:21:b5:bc:ac:68:61:21:04:65:d8:46:
8e:c1:2d:c5:8f:d3:9c:f9:d3:c6:fc:90:8d:6b:17:95:48:0c:
db:75:49:14:0f:1a:aa:e5:08:b3:6a:3c:f4:be:2e:06:5b:88:
dd:bb:bf:d5:25:ba:b0:68:49:23:d1:36:1f:49:e3:3b:41:12:
40:9d:84:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:40:03 2026 by rpki-client