Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
File: YRs47qO8cHP29KpNIe1BNmXXyic.mft (raw, json)
Hash identifier: 6LYCbRPPvdUtJ6eMUmQ+T9MbSLBOBkbCLnBcTaywpDE=
Subject key identifier: 4A:45:D5:E8:DE:47:5A:B2:89:31:0F:8D:33:75:18:92:7C:73:9B:5C
Authority key identifier: 61:1B:38:EE:A3:BC:70:73:F6:F4:AA:4D:21:ED:41:36:65:D7:CA:27
Certificate issuer: /CN=611b38eea3bc7073f6f4aa4d21ed413665d7ca27
Certificate serial: 019FA89994784508E0155BF5EF96DE6768B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
Manifest number: 3D
Signing time: Tue 28 Jul 2026 12:01:04 +0000
Manifest this update: Tue 28 Jul 2026 12:01:04 +0000
Manifest next update: Wed 29 Jul 2026 12:01:04 +0000
Files and hashes: 1: TcaCPZlW9b7nUjd0B-e1yd0zAE8.asa (hash: Oy2UJlXOZ8xOLUsWDNeaDlW0wd+hjDN8NHEzf1/ZIt0=)
2: YRs47qO8cHP29KpNIe1BNmXXyic.crl (hash: wNsDfg2H8BHJMeaDUd2Adp9OF0AmvfNrzY8sEaoP+cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:94:78:45:08:e0:15:5b:f5:ef:96:de:67:68:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611b38eea3bc7073f6f4aa4d21ed413665d7ca27
Validity
Not Before: Jul 28 12:01:04 2026 GMT
Not After : Jul 29 12:01:04 2026 GMT
Subject: CN=4a45d5e8de475ab289310f8d337518927c739b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:65:94:ba:eb:52:dc:47:0a:52:6c:86:2b:
9d:07:81:3a:dd:9d:6c:35:01:c3:b0:19:9f:b1:01:
73:e2:41:52:ac:ef:ed:f0:23:60:95:58:af:18:5f:
7e:aa:22:e7:fa:f6:b0:ca:40:37:48:88:e9:92:e2:
e2:c1:10:5c:8f:1d:52:c7:95:cb:e0:10:0b:6b:c1:
35:5d:3f:ae:96:39:66:7c:36:3b:f0:b9:1a:f8:76:
a5:f3:3e:e4:15:7c:64:27:c0:45:02:43:d8:b2:92:
51:75:c3:77:9f:c7:39:92:1c:2f:f7:5f:59:33:f5:
ab:87:1e:90:fb:59:92:73:b3:d5:e2:9f:77:60:50:
74:7e:f9:cd:b5:f4:00:86:6f:b9:e1:f7:ac:cb:38:
23:21:47:2c:73:2f:e3:7f:e4:90:33:a5:4a:21:1a:
b4:ce:02:e5:e5:88:52:1f:f0:ea:32:b8:7e:be:2d:
a2:30:9f:8b:c8:f6:9d:94:1a:a9:5f:ca:a0:21:02:
2e:09:a3:45:d2:ee:8b:81:6f:c5:e1:f7:6f:a3:9d:
dc:c1:25:1d:e7:d0:3a:c4:bf:9e:f4:9d:73:37:00:
36:69:03:a5:c6:bd:22:6e:fa:91:3e:88:9c:4f:42:
2c:f7:fe:4b:b1:53:a6:a4:1c:65:5c:ac:54:3f:c9:
ba:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:45:D5:E8:DE:47:5A:B2:89:31:0F:8D:33:75:18:92:7C:73:9B:5C
X509v3 Authority Key Identifier:
keyid:61:1B:38:EE:A3:BC:70:73:F6:F4:AA:4D:21:ED:41:36:65:D7:CA:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c3:48:bd:f8:e5:87:93:10:48:c1:ad:a4:72:54:b3:63:42:
50:eb:6f:ac:9c:bf:ba:ee:d2:b0:90:2f:7d:65:be:00:97:13:
32:6f:d8:cf:a9:88:5a:36:01:7d:ea:e6:ef:24:89:66:b0:33:
01:88:03:41:45:ec:17:5b:f8:71:2f:e3:cb:15:15:e0:3f:61:
e5:21:bf:01:3d:5a:9e:01:e5:81:e2:1f:43:27:e9:f2:6e:d5:
f4:96:08:b1:32:70:25:23:6b:4e:85:d1:28:36:3d:99:cb:19:
aa:df:b5:01:6b:2d:ef:e9:98:65:3f:41:10:5d:f1:fa:ea:a6:
b8:53:e3:09:82:b2:37:76:df:09:cc:50:ec:e3:97:f6:ab:74:
7c:de:ee:b0:79:9d:74:e5:74:1a:95:02:ce:60:9a:02:50:b7:
aa:6b:46:78:72:36:24:96:f9:c1:19:e9:27:30:77:a7:56:70:
c9:88:fa:28:f4:f9:c7:88:f3:95:6d:76:40:b2:66:21:92:b9:
1b:f3:f2:25:e1:43:56:6e:e4:18:de:a4:73:90:80:66:93:58:
fb:27:e5:a1:79:f1:b0:b5:46:28:d8:70:36:60:32:51:d1:1c:
25:fe:2f:fa:44:52:d3:31:82:3d:e2:4f:de:e1:b0:83:48:ae:
cc:38:df:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:41:57 2026 by rpki-client