Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
File: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft (raw, json)
Hash identifier: IfWa+W/BG4GjoVFy1Aw1kxQFXlEj5CK+czhOvwFJw5Q=
Subject key identifier: 67:43:BF:E4:20:ED:D4:4F:45:A4:70:AA:CF:47:F5:2C:81:DA:98:FA
Authority key identifier: C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
Certificate issuer: /CN=c8e50ca17134837a50d3063d43d443385abe6f49
Certificate serial: 019FA9E2DC2E8EFEFBD2FCC7FD1A08D1A082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
Manifest number: 1948
Signing time: Tue 28 Jul 2026 18:00:44 +0000
Manifest this update: Tue 28 Jul 2026 18:00:44 +0000
Manifest next update: Wed 29 Jul 2026 18:00:44 +0000
Files and hashes: 1: KruYfdwnUNYxfXkcEK0pRrgHkqg.roa (hash: UrG6tcE8plAV8A8NaRxXB6Nz6rhzF4jRdCMcfNiMj5Q=)
2: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl (hash: ikXcXLj0fb7PgNyl27/TYR/WQQCy3pbXAhDoXeYZQ0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:dc:2e:8e:fe:fb:d2:fc:c7:fd:1a:08:d1:a0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e50ca17134837a50d3063d43d443385abe6f49
Validity
Not Before: Jul 28 18:00:44 2026 GMT
Not After : Jul 29 18:00:44 2026 GMT
Subject: CN=6743bfe420edd44f45a470aacf47f52c81da98fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9e:d9:38:74:c0:0a:56:9f:e7:fe:ed:12:09:
5e:c0:c8:79:6c:3b:b7:bb:41:82:76:7a:30:cb:fa:
c4:bc:fa:3e:07:90:3d:7c:78:de:c6:33:5b:52:ff:
6b:f9:73:06:7e:ba:97:31:48:6b:1f:78:7d:22:93:
39:e0:1d:77:09:c0:c3:68:73:16:23:8a:61:91:14:
34:3c:9a:a0:4a:15:a1:7d:8b:80:7f:55:70:44:32:
23:23:56:04:22:a9:e6:2b:21:3a:70:b4:64:06:25:
06:b6:4a:49:8d:b4:81:b9:74:04:ea:94:24:3b:94:
4a:53:13:53:6d:f8:20:20:a5:15:9c:98:e0:96:0f:
3e:7b:12:44:ec:e7:09:b5:9f:52:de:e8:f1:da:02:
a2:54:cb:9b:c7:1f:ff:61:4b:40:41:23:60:07:97:
25:e3:5f:f9:94:ba:22:7c:fc:70:2f:5d:0f:33:6b:
17:35:47:c4:42:e3:24:a0:a2:09:5d:98:a1:92:5b:
2b:31:20:9b:7d:e0:6e:1b:2b:6c:bb:eb:be:bf:8c:
50:41:dd:01:bf:7e:e4:c4:81:23:f1:2b:bc:6f:65:
c6:0a:0e:22:68:02:f4:6d:5f:13:94:92:85:8f:29:
a2:f4:10:ce:25:a9:52:06:4e:50:ae:34:c9:ca:d3:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:43:BF:E4:20:ED:D4:4F:45:A4:70:AA:CF:47:F5:2C:81:DA:98:FA
X509v3 Authority Key Identifier:
keyid:C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9f:a2:2e:10:ad:7c:6a:d1:99:33:f8:2e:2a:76:56:3c:b3:
b1:5d:07:f0:21:a3:f9:59:1d:48:a1:8e:55:15:b9:a4:6d:96:
2e:85:6d:4c:e4:a7:b3:c3:46:be:c5:f4:37:ba:b8:3c:ee:7d:
32:6c:03:57:5b:c8:e6:83:41:a3:7f:01:7b:2b:3c:82:b4:a5:
2d:e9:8f:3f:c2:06:ee:8f:e4:4a:0f:b0:26:84:28:34:f2:99:
67:b4:f2:a2:2a:de:77:b8:ed:f9:c9:de:62:f6:89:32:21:f4:
af:95:74:6e:3d:2f:ad:5b:8d:85:63:9e:54:0a:87:91:c5:2a:
b4:1e:c9:52:e6:11:9e:be:2e:07:6e:75:6a:f6:b6:86:9e:8c:
99:c2:9d:e9:24:1d:8d:ec:9c:c3:b5:c9:8f:27:a6:7a:85:34:
a6:a0:c5:6e:93:06:40:f3:3d:6e:47:f2:97:a8:0a:5e:c1:90:
33:6c:62:07:cc:f7:8d:2b:d4:82:50:7a:e3:77:f4:37:7d:10:
7e:aa:c0:37:8c:f4:ff:62:c8:fc:a4:ac:c8:31:c2:9b:ab:86:
a9:e2:fb:32:99:8e:28:96:34:dc:b7:de:9e:3e:bf:41:b9:80:
a1:b4:05:98:28:0c:5c:5e:a6:7a:7c:88:99:9c:6e:af:63:e3:
be:e7:ad:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:20:43 2026 by rpki-client