Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
File: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft (raw, json)
Hash identifier: fUfSgbJNDNZOVeD8xo1o6pK88yYxP5DX1vIG65bXmXI=
Subject key identifier: AA:03:50:3D:2B:A2:2B:7C:11:BF:52:08:31:89:27:0A:CF:3F:8E:2E
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial: 019FA906D07F211B4284988401C127ACED90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
Manifest number: 19DA
Signing time: Tue 28 Jul 2026 14:00:23 +0000
Manifest this update: Tue 28 Jul 2026 14:00:23 +0000
Manifest next update: Wed 29 Jul 2026 14:00:23 +0000
Files and hashes: 1: 8Q0Zf_p2yrZ0sNHZrjCdOSKVFH0.roa (hash: yTf6BtJWlrsaOEBrk5U/warCLRXhsKvIf1U8hGm0E84=)
2: Dch7ul5aVnL_m2XEZjfUT9TlzKI.roa (hash: dY0WBC4mPaz5+Exli1KBR1KbgYfTH82golhb7jbBUj0=)
3: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl (hash: +qy+c0rAFwM15GOg8kvWXJ42h+6fVbwIMAjTdUc69rM=)
4: ZcwqCFu-ugccIfT-C61LOqP6Rms.roa (hash: zUv7VdLIHUw6+UwEQbFc7BcKwkxW2AOANbLeMf0i6t0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:d0:7f:21:1b:42:84:98:84:01:c1:27:ac:ed:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Validity
Not Before: Jul 28 14:00:23 2026 GMT
Not After : Jul 29 14:00:23 2026 GMT
Subject: CN=aa03503d2ba22b7c11bf52083189270acf3f8e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:cd:3c:b5:54:bd:d0:dd:e8:cf:7f:e7:63:
9d:4e:14:ae:a2:60:60:b7:ec:23:c5:68:ac:9e:77:
e4:0f:10:2f:d5:15:f2:ad:85:d5:76:82:30:b7:16:
fd:ce:60:ac:46:fd:2f:de:1a:78:02:f4:5c:59:75:
ba:69:6f:ee:e7:ca:6f:19:39:77:b8:99:84:41:b1:
eb:2f:6b:32:90:72:ae:bd:7e:57:7f:93:df:53:18:
e3:f2:c2:e7:f6:a6:9a:de:3f:41:c9:61:b0:61:b9:
4e:d1:64:a1:0f:90:05:b3:79:33:1e:df:56:04:bf:
45:57:85:1e:3e:ef:20:59:26:41:95:b7:ea:01:f8:
70:2d:01:a8:16:c2:78:f8:13:f1:93:25:6c:fe:dd:
94:54:1b:9d:f0:99:50:2d:8d:af:60:18:09:a1:77:
e0:80:3e:e2:19:e3:3a:65:af:bc:40:0d:52:2a:1a:
a4:24:d9:3c:4c:ec:7d:a2:76:95:49:21:b3:d7:5e:
30:7f:32:7d:7d:3b:20:7e:e7:7a:0b:85:b8:03:a1:
ce:e2:5b:0f:0f:d1:2a:02:fc:4a:df:b4:8c:38:32:
c3:3f:7b:ba:a8:9a:c1:af:cd:88:df:7f:13:7d:47:
20:c2:a4:10:ea:d3:b8:3c:5f:7e:54:68:d3:f8:3e:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:03:50:3D:2B:A2:2B:7C:11:BF:52:08:31:89:27:0A:CF:3F:8E:2E
X509v3 Authority Key Identifier:
keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:52:8a:ca:52:99:7c:9e:e2:32:84:0f:8f:25:db:a3:0b:2e:
4f:91:7a:4b:f7:85:16:ba:29:73:71:24:e2:cb:38:76:d1:20:
2c:3c:66:53:43:97:be:ec:2e:8b:ee:64:d3:26:95:7f:f7:c4:
7e:b2:29:8a:44:9c:a5:1d:77:5d:16:94:5a:24:b6:38:d9:a2:
80:48:99:90:ff:b7:42:a4:0d:af:73:e3:19:3b:5b:7d:e8:39:
e3:dd:05:7d:06:61:00:ca:05:20:e2:2b:b5:39:45:e2:4c:94:
cc:a9:a6:1b:45:ad:52:87:82:a2:57:b7:19:48:f9:a9:bc:e4:
f5:eb:97:0c:24:30:ef:34:32:3c:3d:82:82:16:70:07:be:27:
93:8f:51:12:5b:6c:86:08:ff:c8:25:1b:cd:2c:78:72:ef:e1:
53:4c:a3:55:aa:a7:b4:28:cb:7c:7e:b0:38:66:4f:f2:83:ba:
04:c9:87:93:c9:6f:00:92:5d:1a:a0:84:3d:fc:34:9a:60:43:
e5:66:f9:a3:c1:1e:92:91:a3:3b:0f:5f:5c:9d:43:76:37:4f:
03:f8:ae:90:58:f7:83:2f:93:1d:18:c2:43:f9:2d:7a:e0:72:
5a:7e:6b:43:84:d3:9d:66:4f:1f:c5:7e:f9:55:4f:0f:1f:b1:
b0:ef:84:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:16 2026 by rpki-client