
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
File: YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft (raw, json)
Hash identifier: OnTjU1hjerd9bLN07278Udca8cNLXDWFEucGHwXh94E=
Subject key identifier: ED:13:2F:FA:96:8C:98:66:8A:D8:A8:CB:70:07:CC:EF:DD:8E:4C:B7
Authority key identifier: 62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA
Certificate issuer: /CN=6290e6b0cdd7f4986be518d890a8493153504eda
Certificate serial: 019FA7BDFB156A2ED8746A8B0D7E6E329A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
Manifest number: 0205
Signing time: Tue 28 Jul 2026 08:01:13 +0000
Manifest this update: Tue 28 Jul 2026 08:01:13 +0000
Manifest next update: Wed 29 Jul 2026 08:01:13 +0000
Files and hashes: 1: Ci_joaoGd-NiKdKN-xSlHZZHjsU.asa (hash: w5DoIaMOdhrQzX31C6GNjSJG7G7L2zsb0JalX8bgFEE=)
2: YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl (hash: Ny0JenBZ6PNChwn0k6fe6LGFU/KY9iQB6F1dmRCXuHg=)
3: jyKuE2XBeuJrzXa_q0tmSaVEGSw.roa (hash: /T26sfmgIuFdLLHz0t8HyV2eonc//D9WC+03dI2ySjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:fb:15:6a:2e:d8:74:6a:8b:0d:7e:6e:32:9a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6290e6b0cdd7f4986be518d890a8493153504eda
Validity
Not Before: Jul 28 08:01:13 2026 GMT
Not After : Jul 29 08:01:13 2026 GMT
Subject: CN=ed132ffa968c98668ad8a8cb7007ccefdd8e4cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:8a:1e:6b:dc:7f:35:7e:2a:fb:1a:7b:2d:
f7:2e:9b:b8:35:f6:94:4f:c6:20:d7:0f:5f:22:83:
a7:38:be:0f:2e:4b:b9:be:0d:ec:d3:79:29:97:3e:
40:cb:52:5b:04:c5:0a:41:5d:c6:b6:db:44:03:1b:
c6:d2:e0:ce:f4:21:68:b7:56:0f:35:12:23:97:da:
a2:db:e9:d9:4b:c9:e7:3c:aa:1c:53:11:47:c1:99:
ea:1f:0b:c0:b3:7a:b2:96:40:f1:20:a1:18:6d:93:
4f:c8:28:d3:81:d6:ea:a7:49:44:2d:f9:b5:a8:b9:
77:c1:9b:74:7b:3c:76:a5:15:21:af:d0:28:9b:0a:
d1:aa:c3:bb:d1:73:2c:50:fb:cc:be:4f:42:a5:4a:
f8:f4:3a:a5:10:78:f2:1d:e9:80:76:d2:40:67:42:
10:a6:37:11:76:d8:47:c2:ce:da:6c:cb:97:39:39:
1a:8e:2b:39:2c:ea:46:c5:d4:02:e8:13:68:6a:7e:
e5:0f:e6:14:c2:71:0b:89:3b:59:63:e5:81:50:d2:
ca:32:e8:cf:2e:30:d8:fe:c8:57:26:ae:de:ac:e3:
2a:ec:1e:25:2e:6e:3c:1b:1b:03:e1:4f:bc:68:2c:
7f:aa:45:2f:52:51:f5:92:16:2d:72:b5:2f:61:3a:
a3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:13:2F:FA:96:8C:98:66:8A:D8:A8:CB:70:07:CC:EF:DD:8E:4C:B7
X509v3 Authority Key Identifier:
keyid:62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:01:69:11:03:f4:4d:22:28:44:ef:22:36:52:7d:b6:09:20:
9d:39:e2:28:6c:14:03:e2:9d:fb:dd:9f:b1:79:bf:97:f8:22:
35:fd:2e:23:ce:fc:47:a7:d9:a8:5d:d6:a1:35:93:41:c2:1c:
26:ec:67:9b:07:72:28:2a:37:b8:39:4f:7d:88:e1:51:65:f1:
45:f6:ff:13:f4:b9:5b:34:05:38:5e:95:18:b8:af:c2:ae:ab:
65:fc:ef:55:a2:de:5f:08:89:59:d2:a4:9e:27:3e:04:2d:10:
c8:16:21:8e:f2:fc:28:fb:13:bc:54:d8:2f:1f:02:fe:6e:2f:
4d:b0:e7:c3:56:b0:37:d7:fc:42:82:e4:3c:78:a2:70:97:0b:
97:f6:4e:42:28:24:46:d6:bf:52:be:16:39:36:f2:81:0d:4f:
f4:a8:a4:23:ab:a9:84:8f:8d:13:24:4d:88:e7:fb:e7:ce:e4:
55:95:cd:67:16:71:60:0b:98:8f:f6:57:04:9f:64:fd:44:8d:
ee:b8:f5:7e:c3:b9:b1:5e:30:15:9a:64:7d:74:04:ac:99:d2:
c0:49:00:8a:84:21:78:7e:6e:56:94:e7:be:33:d5:69:f3:47:
56:01:50:59:b9:9d:65:da:26:fd:3b:9f:55:fd:a9:68:e5:9a:
33:fe:b1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:07:20 2026 by rpki-client