Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.mft
File: yMr0p4F9msWWHUKkx-WuGrHRg_o.mft (raw, json)
Hash identifier: RsFLg1T9VxyLtwtIsKRNLoAfQwRRx6YI5Gw6JcUS//Y=
Subject key identifier: 4E:CA:1B:2F:0B:3B:1C:69:0C:76:AE:B8:FB:4E:41:3B:19:23:1A:15
Authority key identifier: C8:CA:F4:A7:81:7D:9A:C5:96:1D:42:A4:C7:E5:AE:1A:B1:D1:83:FA
Certificate issuer: /CN=c8caf4a7817d9ac5961d42a4c7e5ae1ab1d183fa
Certificate serial: 019FABD0D1617E6730427A22ABF0856E6A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMr0p4F9msWWHUKkx-WuGrHRg_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.mft
Manifest number: 3F
Signing time: Wed 29 Jul 2026 03:00:16 +0000
Manifest this update: Wed 29 Jul 2026 03:00:16 +0000
Manifest next update: Thu 30 Jul 2026 03:00:16 +0000
Files and hashes: 1: 8txx-a7bVPOx2o3RXnkrRbsFJvw.roa (hash: 9QzPxs6o1/HIn/z859bIlS9gq61Oxzk7wr0uT3OmX3c=)
2: yMr0p4F9msWWHUKkx-WuGrHRg_o.crl (hash: +ag016g1ZY1lHR+RMcwfKEKpk2aKgLN0Xi/Dw0EI22k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMr0p4F9msWWHUKkx-WuGrHRg_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:d1:61:7e:67:30:42:7a:22:ab:f0:85:6e:6a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8caf4a7817d9ac5961d42a4c7e5ae1ab1d183fa
Validity
Not Before: Jul 29 03:00:16 2026 GMT
Not After : Jul 30 03:00:16 2026 GMT
Subject: CN=4eca1b2f0b3b1c690c76aeb8fb4e413b19231a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:10:b2:a3:07:71:e5:b6:9a:de:c0:53:09:
a1:d0:61:58:09:c6:9a:ee:50:c4:14:73:39:fe:e3:
7f:5c:af:eb:0d:a0:3f:8f:f3:0e:26:cd:b6:89:9b:
c4:e8:df:e7:36:9d:5d:b8:0e:e6:92:d5:a3:65:39:
58:6b:fc:f4:5d:96:5e:53:00:1c:80:4a:52:22:a6:
6a:de:c0:e8:09:5c:ec:af:90:b0:84:50:c7:a3:de:
50:9b:19:57:7f:b2:a3:eb:2a:de:2e:c0:06:2e:bf:
51:46:50:83:ed:9b:30:18:93:16:74:1c:00:07:9f:
47:62:e9:5b:33:00:ca:04:40:8e:eb:b6:3c:24:52:
66:48:60:cb:6e:3a:dc:91:24:4e:71:5f:70:6d:1c:
20:bd:fa:10:b6:e3:15:1b:7f:24:f0:8e:45:33:c4:
9b:06:c8:c1:22:96:dd:aa:44:f3:ec:b5:31:bd:ad:
d9:a9:62:d2:5a:38:7c:f3:48:94:ad:57:02:bc:74:
d0:ca:ae:36:4b:bd:ad:e5:21:26:a3:f7:35:7d:42:
25:42:54:fd:a0:c2:fc:af:20:11:95:44:ea:d4:d2:
86:6c:44:4e:72:1b:90:44:7c:b7:1b:ed:85:fd:f9:
41:25:73:42:7c:7f:87:3f:47:44:d3:7b:54:e9:67:
31:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CA:1B:2F:0B:3B:1C:69:0C:76:AE:B8:FB:4E:41:3B:19:23:1A:15
X509v3 Authority Key Identifier:
keyid:C8:CA:F4:A7:81:7D:9A:C5:96:1D:42:A4:C7:E5:AE:1A:B1:D1:83:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMr0p4F9msWWHUKkx-WuGrHRg_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:87:e2:2e:69:af:d1:71:81:4b:64:87:13:eb:9b:2b:a0:21:
e8:91:46:52:18:64:fc:74:90:54:1c:b5:d1:4f:48:d0:e4:4c:
95:85:7c:17:83:ed:a8:0d:c6:09:56:67:e6:55:6b:d8:44:5f:
ca:90:1f:b2:72:7a:72:12:8b:74:73:3c:b6:a6:23:30:aa:4f:
ae:d4:3e:8c:ed:54:01:5a:c4:a2:06:3c:05:33:16:7f:28:93:
f1:6a:50:38:24:81:e7:3c:ac:9d:f3:0c:06:6c:87:5b:47:bb:
31:30:8e:b4:c9:da:34:b6:f7:ce:ce:3f:f8:66:89:54:72:9f:
d1:93:ff:d8:53:cd:1f:fc:48:54:4d:35:cd:1d:2f:b2:69:72:
8c:67:e5:89:83:ac:ad:53:e0:77:e9:26:bf:60:98:7c:20:49:
d4:66:62:39:22:b9:33:58:56:25:85:c4:66:93:f5:9d:b7:56:
1d:ac:47:d2:e6:d4:5f:e3:f6:3b:1f:6e:fc:59:ce:02:a3:3f:
2b:b1:c1:1c:d1:4e:96:de:30:33:c4:6c:82:d2:bb:47:22:0c:
92:91:71:95:61:da:ee:d1:6d:9f:45:f6:11:b9:7c:96:67:a5:
02:9b:89:ef:f2:dc:41:46:9d:62:7d:bb:cc:99:99:c1:df:c5:
34:ff:89:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:00:56 2026 by rpki-client