Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
File: YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft (raw, json)
Hash identifier: xdiOAIatSQhwMaD18gM3D+ZLGyjdmjwW7joX0S446us=
Subject key identifier: D6:4C:8D:A4:F1:B3:2D:B6:BC:1D:FC:F6:F3:2C:53:6B:6B:DD:43:38
Authority key identifier: 62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA
Certificate issuer: /CN=6290e6b0cdd7f4986be518d890a8493153504eda
Certificate serial: 019FA9AB79ACA1235155F7EFB242E8A0F7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
Manifest number: 0206
Signing time: Tue 28 Jul 2026 17:00:14 +0000
Manifest this update: Tue 28 Jul 2026 17:00:14 +0000
Manifest next update: Wed 29 Jul 2026 17:00:14 +0000
Files and hashes: 1: Ci_joaoGd-NiKdKN-xSlHZZHjsU.asa (hash: w5DoIaMOdhrQzX31C6GNjSJG7G7L2zsb0JalX8bgFEE=)
2: YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl (hash: 3aynlHlsCYwQ3/XFxLzDGJeiE4y/gfRbzRZjoaDOe7U=)
3: jyKuE2XBeuJrzXa_q0tmSaVEGSw.roa (hash: /T26sfmgIuFdLLHz0t8HyV2eonc//D9WC+03dI2ySjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:79:ac:a1:23:51:55:f7:ef:b2:42:e8:a0:f7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6290e6b0cdd7f4986be518d890a8493153504eda
Validity
Not Before: Jul 28 17:00:14 2026 GMT
Not After : Jul 29 17:00:14 2026 GMT
Subject: CN=d64c8da4f1b32db6bc1dfcf6f32c536b6bdd4338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:82:ef:3f:cb:fd:83:cd:98:a3:6a:88:76:d3:
4b:27:71:28:55:c5:13:3e:36:23:16:bd:b8:e9:da:
66:ff:c3:99:eb:3a:24:c2:0f:09:f9:4b:bf:fd:d2:
b3:88:e0:f4:e6:26:8a:e3:23:45:62:7f:a3:2b:48:
63:23:9e:eb:70:14:57:22:e8:40:6e:63:15:e0:2e:
ec:79:03:55:f2:59:e6:16:13:83:b5:44:6c:be:12:
9e:f4:33:36:d3:74:6a:69:0a:0e:14:3d:5a:be:b8:
6b:d2:d7:2b:2b:86:fe:6e:1d:08:1c:ee:52:13:77:
b2:86:9d:5b:24:71:39:ab:ce:01:e6:f5:b6:b4:78:
18:2f:96:02:07:2e:78:ea:41:a4:d8:61:ac:ee:fa:
f4:e4:53:07:fe:d1:1d:5f:61:47:77:71:1e:07:74:
03:6b:80:e8:45:a2:aa:c6:3a:48:43:58:ba:c1:86:
34:e8:83:3c:7d:16:8d:64:02:9e:e4:63:b5:15:16:
d4:77:7a:26:81:2d:81:6b:e3:17:f2:3b:e1:9b:17:
69:f7:3c:6f:f9:a4:1d:4b:52:75:4d:a8:59:b1:7e:
64:f4:14:6c:92:2b:48:1f:82:71:ae:69:77:a6:57:
21:1c:ef:be:c8:10:2c:9c:bd:de:83:c4:7e:49:c2:
c1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4C:8D:A4:F1:B3:2D:B6:BC:1D:FC:F6:F3:2C:53:6B:6B:DD:43:38
X509v3 Authority Key Identifier:
keyid:62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0e:5c:0f:2f:dc:fa:2c:02:63:58:69:68:3e:10:3e:76:0c:
d8:7d:9b:aa:13:bc:5c:15:49:55:f0:52:ef:20:12:14:69:d5:
45:b6:4e:14:00:37:7c:b6:7d:09:39:15:35:c5:ab:b4:80:54:
79:3f:99:35:69:ce:66:30:b7:a4:fb:bd:d3:5e:c7:7d:78:d3:
8b:f9:74:59:b3:fe:7c:26:11:cf:4d:51:60:75:4a:2f:bc:f0:
ad:04:bf:17:75:61:f8:42:ec:d1:02:8b:13:28:f2:54:c1:5c:
7d:99:13:38:67:92:fa:06:93:bc:1a:d2:da:54:eb:62:e4:b4:
ea:d0:01:f7:05:21:f9:6c:72:ce:5f:0c:e1:3d:8b:8a:53:0a:
8b:b1:87:71:f0:1c:ad:bf:72:ef:31:db:34:6d:11:ee:b8:af:
a6:c3:4d:bd:f3:b1:dd:b6:f5:ce:38:e2:ff:34:56:48:8c:7b:
85:18:ad:cb:4d:c6:3c:f5:f1:8d:bd:3c:f6:df:0b:f5:5f:56:
51:c3:e7:73:9a:af:21:27:9e:b7:e5:03:c4:fe:2d:74:b1:f6:
6a:ad:8c:ab:13:42:43:b1:67:fd:1a:17:39:d5:8f:8d:4d:69:
45:5d:33:c2:31:e0:65:33:4a:c7:c4:96:08:a0:92:0d:fe:4c:
80:a7:b2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:13:06 2026 by rpki-client