Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: TRKIxFkZBB0wrcDLtlreDYPANKcjOodNNmNJJYd4wT0=
Subject key identifier: B4:9B:B0:EF:4B:D6:59:B6:05:B2:10:BF:7A:B3:DB:D9:EC:BD:24:86
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 019FAABE54644A0FEA70D570A13FF6E69F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 10C1
Signing time: Tue 28 Jul 2026 22:00:27 +0000
Manifest this update: Tue 28 Jul 2026 22:00:27 +0000
Manifest next update: Wed 29 Jul 2026 22:00:27 +0000
Files and hashes: 1: N5RdOcKSZn2WXo-xhdOApmXM6X8.roa (hash: RQA+nWi3E8uaz/WCsQIw7b6rquiEkScjYVEe+LbnjAM=)
2: eG6HpNNeD2WlW2-WkUghRp2wqyY.roa (hash: nvEhBM2Rox5+ny1WoBOojQfN4JcL4da706fz8O30oPs=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: gFV/eerv12OwU4Gnd3T1CzNScYd78s1OdZ0siIeIoSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:54:64:4a:0f:ea:70:d5:70:a1:3f:f6:e6:9f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Jul 28 22:00:27 2026 GMT
Not After : Jul 29 22:00:27 2026 GMT
Subject: CN=b49bb0ef4bd659b605b210bf7ab3dbd9ecbd2486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c2:c1:6e:6e:f3:b0:b5:f7:22:c7:23:9b:01:
c9:b6:d8:8a:de:5d:f7:35:42:79:f4:80:e7:3f:f3:
2f:c2:91:01:49:88:6b:24:ab:14:93:04:17:db:f4:
a3:76:ae:2d:5c:8f:52:4c:9d:a0:a4:c5:95:6a:b3:
d9:3b:03:69:a3:71:3f:32:ed:de:ef:97:81:c2:96:
d6:0d:af:e0:5f:8a:df:a4:17:27:b5:db:91:16:5c:
2b:bb:43:bf:1c:dd:39:76:23:f7:60:56:a5:80:4f:
79:5f:11:3f:11:59:94:e5:d9:6f:4b:0f:27:5e:e2:
da:8c:69:ba:5a:61:c2:49:0d:c0:4c:6d:9c:8a:74:
84:25:d7:0c:de:60:69:56:e9:f9:a9:98:a0:66:6b:
95:72:ed:f6:53:7b:50:00:e0:4d:a2:b1:58:14:7d:
91:e3:14:d4:8c:24:49:7a:89:6d:9e:e1:65:b9:96:
0f:ba:95:bd:c4:5f:47:04:01:65:ff:2e:bc:b4:5f:
03:bd:5f:5a:0c:5b:87:2e:e7:8d:c7:5a:dc:d1:26:
3c:c6:94:54:90:99:19:d2:b1:12:b0:c4:eb:99:55:
00:77:ad:0b:69:95:51:f4:75:32:92:6e:3e:b0:52:
90:a2:d4:18:12:4d:90:84:75:f3:27:cd:9c:22:af:
ec:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9B:B0:EF:4B:D6:59:B6:05:B2:10:BF:7A:B3:DB:D9:EC:BD:24:86
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d5:a1:53:b0:b2:05:fa:54:9e:e6:a5:68:ce:74:39:bc:ca:
8a:1a:6f:64:78:5d:70:46:35:10:75:c1:4b:5d:96:6a:91:d5:
90:a1:b2:fb:dd:9c:85:86:d7:3b:6c:35:3e:e7:d0:e1:b3:6c:
e3:aa:f9:f3:2e:96:d5:1f:3e:2e:99:f8:9d:f8:b0:9a:8c:fc:
fa:db:2f:38:0d:86:95:ad:24:b0:89:f4:4e:65:8c:f7:fc:35:
83:96:4e:b9:ad:9e:b2:87:7c:3a:8b:3a:1e:71:d6:1c:37:c5:
44:4b:b3:10:a3:5b:5e:c0:b7:ad:37:d5:ba:46:dc:b0:95:b2:
de:0a:05:b5:45:4e:11:4b:da:8d:a1:1d:89:66:1e:22:67:ed:
b2:15:46:92:68:78:b6:ea:fe:78:bf:21:e0:07:b9:72:69:f5:
ab:3b:eb:5d:33:c2:61:e8:99:09:5b:04:d1:89:a2:9c:e6:9b:
af:ee:35:4d:f8:41:11:a9:79:b2:f2:a8:57:0b:9c:17:94:bf:
46:2c:52:ca:94:73:3e:88:e6:e0:4d:02:73:fc:15:1c:1c:1c:
c4:1b:47:84:54:50:90:d7:41:88:5f:61:71:26:4b:3d:36:71:
5f:9f:47:59:28:0d:ac:58:b0:df:e3:87:0c:59:33:83:de:db:
9c:a1:be:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:32:05 2026 by rpki-client