Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
File: YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft (raw, json)
Hash identifier: No7OXKJDLRn2Oe1W+lklB7hzn4QZsZGRuy9tWrPi5GM=
Subject key identifier: 19:A7:09:B9:A9:69:07:B3:62:E1:AD:15:70:91:C3:BC:E0:2C:3E:4E
Authority key identifier: 62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA
Certificate issuer: /CN=6290e6b0cdd7f4986be518d890a8493153504eda
Certificate serial: 01A0BDD52A20E6897729B52BE1D6ED67C4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
Manifest number: 0295
Signing time: Sun 20 Sep 2026 08:00:58 +0000
Manifest this update: Sun 20 Sep 2026 08:00:58 +0000
Manifest next update: Mon 21 Sep 2026 08:00:58 +0000
Files and hashes: 1: Ci_joaoGd-NiKdKN-xSlHZZHjsU.asa (hash: w5DoIaMOdhrQzX31C6GNjSJG7G7L2zsb0JalX8bgFEE=)
2: YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl (hash: ZNC0SThWUODNpPB02A/tdgcffD+waZW/YxAnGoK0uo8=)
3: jyKuE2XBeuJrzXa_q0tmSaVEGSw.roa (hash: /T26sfmgIuFdLLHz0t8HyV2eonc//D9WC+03dI2ySjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d5:2a:20:e6:89:77:29:b5:2b:e1:d6:ed:67:c4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6290e6b0cdd7f4986be518d890a8493153504eda
Validity
Not Before: Sep 20 08:00:58 2026 GMT
Not After : Sep 21 08:00:58 2026 GMT
Subject: CN=19a709b9a96907b362e1ad157091c3bce02c3e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:93:f2:07:6d:97:22:13:c9:f8:2c:b0:62:
4d:c8:b2:1d:9d:bf:c5:36:37:a2:c5:07:ab:88:e8:
6a:6b:98:1c:e7:f0:31:f2:62:e4:6a:4e:7c:0b:1b:
ca:7f:f4:8d:55:77:e6:d0:d6:67:40:dd:3a:92:ac:
9d:47:85:27:79:dd:b7:6a:a3:39:51:84:50:f2:d1:
46:03:c9:16:87:88:37:ac:68:f5:09:55:96:16:be:
7b:8e:e6:d6:8a:f9:53:15:a8:97:65:95:a4:02:ff:
61:bc:48:fd:b2:a0:aa:3c:c9:1e:61:54:bb:03:84:
bc:2d:81:70:cd:08:d3:9e:90:ea:20:6d:cb:07:fa:
85:ad:28:75:67:22:4f:8b:f9:06:a6:95:68:6f:59:
d4:0a:99:22:ff:7e:f1:b3:dc:db:cf:38:e9:ce:ed:
a4:59:b0:f7:43:5b:6d:b4:17:9c:22:87:52:fe:de:
14:18:d5:10:65:98:d1:39:7d:2b:5d:e2:f1:1c:1c:
4d:4f:b7:e8:7a:c3:23:a9:41:59:bc:d7:a3:4f:cb:
96:72:7a:be:f7:1c:52:21:31:65:b9:ed:5a:37:68:
d7:20:e5:4c:d6:7a:a5:a5:06:3f:3a:36:32:59:3e:
ac:6d:17:5e:6c:b2:ed:98:91:bd:6d:fe:cf:3c:35:
12:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A7:09:B9:A9:69:07:B3:62:E1:AD:15:70:91:C3:BC:E0:2C:3E:4E
X509v3 Authority Key Identifier:
keyid:62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2e:1e:af:9d:16:fc:b0:3e:ba:f1:35:ca:f8:5d:ee:b5:31:
0c:a9:c9:05:da:db:ab:f9:1b:54:52:ac:d8:c7:74:e7:d2:bf:
b3:ff:a7:91:f7:95:71:71:20:17:ec:32:36:51:5d:ec:59:f1:
ef:9c:20:11:8c:69:e2:2e:40:bb:20:9e:5a:61:2b:37:e7:b5:
91:f2:6e:ca:37:07:3c:3b:98:f4:98:0c:f1:81:d4:8b:f0:76:
fb:38:e8:7a:6b:58:bc:97:9b:18:86:cc:b1:a8:6e:e5:a9:d8:
93:f5:1a:22:5a:5b:d6:c4:23:19:cc:90:1c:d3:47:dc:b6:7d:
81:0c:32:38:5b:97:c7:21:c7:80:b3:36:3c:85:dc:09:c9:e9:
00:5b:eb:fa:4b:6b:e5:8c:1a:d9:f8:15:57:46:e3:9d:e4:41:
7b:91:53:39:8b:3c:2c:6a:c3:7c:80:ff:c4:22:70:7d:91:0a:
00:4a:8e:ab:57:6d:2a:8a:82:3d:68:bb:fd:aa:11:3b:65:b1:
33:4f:7d:9a:f1:8e:cd:38:fe:9e:c7:b1:31:50:36:49:9c:e0:
a3:5b:14:e9:9c:c3:32:b8:f1:0d:38:73:47:a6:3b:73:94:f3:
ff:b6:e9:0d:39:b2:d8:0e:56:b7:ac:12:1a:af:d5:e6:ae:bc:
81:48:96:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:52:26 2026 by rpki-client