Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: CMqaeTgivOTSjfLxNOR5qk+O/av8B5YjOiGaRYFrUXY=
Subject key identifier: 1A:7D:9A:51:53:E0:B1:B2:0F:35:25:2C:07:57:8E:EC:C7:16:19:D2
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 019FA975C678254D957E75A5B8A23ACF493E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 0CB2
Signing time: Tue 28 Jul 2026 16:01:35 +0000
Manifest this update: Tue 28 Jul 2026 16:01:35 +0000
Manifest next update: Wed 29 Jul 2026 16:01:35 +0000
Files and hashes: 1: gLMBJkPbwcb-wlbRSTpyVXmPT60.roa (hash: /0bw3wAUn3OHzY+Itn4sRpP0s819h7VmmcBki8z1uGs=)
2: ivQFZHRMsvejyMfxqalTl6eZyTU.roa (hash: WA+GjW1Muidb5011AIHmuW7RcHYLCIXNLZLjL3+5V3I=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: Dcs3jc8/Ry5uG0i8tTheFrbLD2XHtNnSxqhGj7Puv2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:c6:78:25:4d:95:7e:75:a5:b8:a2:3a:cf:49:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: Jul 28 16:01:35 2026 GMT
Not After : Jul 29 16:01:35 2026 GMT
Subject: CN=1a7d9a5153e0b1b20f35252c07578eecc71619d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dd:1b:1f:95:b7:7a:38:5c:b5:3b:97:6c:9c:
e7:e2:1a:75:27:69:dc:0d:63:7a:e9:92:bf:19:d2:
02:af:6d:db:b6:ae:33:7e:69:70:d6:df:99:31:6c:
60:4f:cc:a8:10:d8:9e:26:74:a7:4f:d3:b1:c3:0a:
aa:c2:72:da:c3:37:7a:7e:4f:ab:b4:e6:ac:58:cf:
c0:99:f8:f9:b7:b4:46:a8:75:fd:cb:fc:00:f4:b3:
c0:51:b5:99:7c:4a:50:89:b4:e0:8f:49:5d:4d:f9:
fb:af:b2:7f:d4:73:ed:12:5e:fb:e5:d7:ec:fc:05:
60:21:9c:ff:9c:8b:8a:fd:d7:5e:ed:91:1b:62:44:
07:fd:81:38:d7:28:65:b3:9c:55:c9:05:7d:ab:b2:
f4:86:c1:47:ef:1d:6b:37:97:e7:61:6b:32:ab:e6:
e9:15:0e:6b:11:cf:69:9c:b3:e0:b8:98:82:f6:8b:
51:22:4c:68:e9:1b:08:20:6e:2b:76:d2:33:7d:cb:
b4:8c:57:32:8c:6d:44:79:af:5b:54:c9:47:98:58:
22:7e:e8:5f:74:bf:be:83:f6:ff:8c:4b:80:e2:05:
7c:6f:54:a8:17:3f:9a:9b:be:ce:40:33:f2:47:c2:
ae:2a:86:38:2c:5e:06:d2:51:9d:78:5c:26:68:11:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7D:9A:51:53:E0:B1:B2:0F:35:25:2C:07:57:8E:EC:C7:16:19:D2
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:22:b3:03:70:01:30:f8:50:ef:38:24:2e:94:4c:23:89:da:
dc:ff:36:fa:05:54:eb:bc:39:8d:66:fb:6c:04:84:0d:08:66:
65:b2:a0:72:e2:ca:82:a7:9f:1a:33:f3:78:93:d7:fa:f0:ac:
6e:82:ac:ef:ff:64:11:77:ed:6f:05:0e:f2:bc:77:0b:d8:37:
1f:34:c8:45:fe:17:fb:bf:74:21:70:61:90:64:c7:3a:a9:6c:
3f:e7:63:99:78:1a:a8:f7:dd:e0:74:34:ac:ea:f5:7d:09:b5:
d4:33:d0:77:ec:d7:62:1c:2b:c3:71:d0:34:b9:03:fe:4e:9a:
e1:ba:5f:7f:10:86:0b:14:ba:bd:bd:f3:58:0c:d7:66:5c:1b:
9f:4a:fc:47:cb:c2:b2:e3:e6:2d:d2:7c:70:90:af:a5:6e:62:
39:66:c7:46:f7:a8:7c:11:e8:fa:84:e0:67:7c:35:31:99:6e:
ac:aa:5a:93:ea:20:99:dc:24:0b:78:84:0c:f3:54:d4:9b:ad:
5e:72:07:c9:ee:b3:41:14:13:9f:47:4d:0c:b5:3f:e8:ae:63:
68:ef:11:9f:21:2d:a3:64:63:4f:ec:5a:98:e6:6f:d6:05:fd:
45:8c:f5:34:87:69:47:e7:ea:d5:27:8b:08:34:bd:83:0f:52:
18:62:65:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:19 2026 by rpki-client