Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
File: ym3NrZkpBFbG18GOscBY2UEIiAE.mft (raw, json)
Hash identifier: DVwDhXDRg8UsKBQw9lVA8SHtpBxx5RMrvxnxEg2Jhhg=
Subject key identifier: CA:3A:0B:D9:EC:E9:89:D6:6E:FE:92:C4:8C:9B:C6:48:34:45:41:40
Authority key identifier: CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
Certificate issuer: /CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Certificate serial: 019FABD1B65FF15A8B30F0C3808C7D431E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
Manifest number: 1979
Signing time: Wed 29 Jul 2026 03:01:15 +0000
Manifest this update: Wed 29 Jul 2026 03:01:15 +0000
Manifest next update: Thu 30 Jul 2026 03:01:15 +0000
Files and hashes: 1: bG2ai37iVGCdW98mBInWrIrYPA0.roa (hash: xkK4nEMctXQLAAuz2jXwdJcPBigpmy2jrTbYqyPGIj4=)
2: ym3NrZkpBFbG18GOscBY2UEIiAE.crl (hash: 1EY1Ies/6URq83gbR7AdsIKZox49B0+7LWsLK1uQ8MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:b6:5f:f1:5a:8b:30:f0:c3:80:8c:7d:43:1e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Validity
Not Before: Jul 29 03:01:15 2026 GMT
Not After : Jul 30 03:01:15 2026 GMT
Subject: CN=ca3a0bd9ece989d66efe92c48c9bc64834454140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:7e:73:46:70:d7:d5:da:c2:aa:85:7e:3a:
a3:d1:44:3c:25:5f:79:04:ce:04:94:90:44:ba:59:
18:27:73:31:70:0c:92:b0:2a:92:e9:83:b3:8c:9e:
ba:f8:c0:3f:18:b4:17:e3:39:13:ad:38:39:24:80:
18:36:97:aa:c9:b3:ab:cb:a2:19:b6:ca:44:06:d2:
6a:17:59:53:46:15:60:ac:59:4d:44:9a:bb:8b:48:
dc:b3:b9:20:f1:4b:35:2c:a7:0a:97:79:47:a3:a7:
f0:8c:11:22:09:a5:00:89:52:2b:c8:c0:67:cb:84:
e0:22:71:3c:c9:87:b1:4a:97:d1:c1:01:88:4a:43:
ad:d6:57:62:37:7e:8b:fa:ba:c0:da:78:13:95:86:
2e:50:0a:7e:9f:ba:e5:a0:d9:4e:76:ac:9b:ce:b2:
17:7b:87:70:f9:9b:4e:9c:20:bb:80:1f:c2:12:ee:
76:4b:d9:ad:c3:59:ef:d0:bc:73:90:f9:14:64:93:
72:a1:30:b2:c5:78:1e:d0:be:1c:52:0f:6c:1c:fa:
51:76:1f:d0:27:45:9d:fc:d5:c5:91:fb:d6:5b:4f:
c9:45:79:fc:c9:ef:de:56:c8:e7:72:bc:89:e5:5e:
ce:92:da:9e:ea:f7:0f:81:a8:60:97:3a:33:21:ad:
7c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3A:0B:D9:EC:E9:89:D6:6E:FE:92:C4:8C:9B:C6:48:34:45:41:40
X509v3 Authority Key Identifier:
keyid:CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e6:76:0a:55:c4:b9:90:4d:28:72:6c:a9:c9:6e:0c:c2:4b:
2c:a0:7a:d8:79:01:1f:be:d7:4a:60:12:13:4e:a3:99:73:bf:
b5:49:d5:05:99:c5:a5:4d:a4:8c:38:43:b9:81:fc:01:53:8e:
51:92:ed:7d:64:90:18:66:b9:8b:7b:89:c9:1b:d5:0b:9c:c0:
15:3c:6c:d1:95:23:43:51:d3:ec:e1:bd:7c:0b:d8:92:61:a8:
a9:6a:8d:c6:8c:1b:2d:e5:e0:46:d9:db:44:2b:97:9d:37:10:
b1:83:af:59:40:6e:64:93:b7:41:81:40:48:53:6a:53:40:06:
43:04:36:33:c5:a0:6e:2e:bf:03:fd:52:49:89:97:ec:75:22:
1d:9c:0b:08:67:48:1a:72:c9:39:c3:46:8c:37:5a:b3:6c:9b:
62:ee:3c:d9:97:f6:33:ef:28:9f:57:ac:4f:d2:87:6e:a9:b6:
8a:c6:ab:be:21:b7:28:13:48:2a:5f:12:9b:d9:86:54:55:d3:
d4:85:d0:86:07:a3:e6:f0:44:1f:4d:b1:57:35:a8:44:d5:16:
e9:fb:3f:c4:ab:c4:75:b6:19:7e:d1:b9:1e:ec:40:46:28:ba:
74:28:7a:a9:28:5e:f4:b6:80:e4:3a:62:46:6e:43:df:84:c4:
46:f6:eb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:27:52 2026 by rpki-client