Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File: YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier: bGbVgmWfBXZ7iggjC1l60oEHU9zMkOwEQUH4++UqEO4=
Subject key identifier: 3F:F8:9F:0C:39:D8:09:7D:32:15:28:86:6D:16:36:28:92:D6:62:69
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer: /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial: 019FA899AC77D253C037A795B18A6AB0B049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number: 12FA
Signing time: Tue 28 Jul 2026 12:01:10 +0000
Manifest this update: Tue 28 Jul 2026 12:01:10 +0000
Manifest next update: Wed 29 Jul 2026 12:01:10 +0000
Files and hashes: 1: TNfS4qjFMyp6FRl_4ldjm_Y_i3Q.roa (hash: V9e1y2xxqghsyNge3bSzEeJvbCQltZtzBhjXNsBZP/k=)
2: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: OVclj6pWMO2+s10fFqRRA5uU1WFizNaP1+8S3C6EhKg=)
3: aL2Fa93Pq0uyo59pgUgspQyUPKc.roa (hash: Bga4XDZkfRChSZnLWZqmel++JYpGqGLT7JPEKTaVvO0=)
4: rxVxvq80s018HousURd0ic36W10.roa (hash: 4vWzh852MFR+K32Ov40708je2OYVViB9fVjK6c0oRMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:ac:77:d2:53:c0:37:a7:95:b1:8a:6a:b0:b0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Validity
Not Before: Jul 28 12:01:10 2026 GMT
Not After : Jul 29 12:01:10 2026 GMT
Subject: CN=3ff89f0c39d8097d321528866d16362892d66269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:87:5d:d7:28:76:b7:c1:ad:85:bd:0a:25:74:
30:ff:d8:68:56:0c:14:49:32:68:30:4f:17:8c:2f:
81:41:6c:79:4c:d6:2b:29:e5:cc:3f:83:9a:ec:40:
23:03:75:29:7c:12:23:d4:76:45:6b:5a:45:3d:f6:
36:7c:5b:73:47:90:76:28:5a:8e:6c:12:89:31:ee:
79:74:7a:12:cb:1c:6b:d0:96:23:41:e3:43:a4:80:
e0:46:d4:1a:bb:a2:16:d3:e2:2a:be:20:cf:2d:c9:
e5:3e:4e:7f:10:e0:42:00:9b:5b:36:69:29:8d:c4:
95:b7:91:af:83:bb:03:f0:3d:8f:5f:59:ea:a1:f2:
cb:63:9d:16:d3:aa:de:5e:fc:3f:67:aa:7c:7f:fe:
a0:2d:88:63:4e:f7:d9:da:d4:cc:c8:c2:49:39:c4:
58:a4:3b:04:df:c9:4e:0c:51:d7:6c:36:74:70:47:
ff:5e:c1:41:4d:5b:f8:c9:8d:4b:6f:91:40:5b:3e:
b0:d9:7e:27:5b:49:de:84:9d:b8:4a:28:ef:53:16:
6a:70:cc:b9:26:77:03:de:da:de:86:a0:df:10:b1:
d1:cc:ba:bc:e2:91:5b:1e:fa:7b:2c:ea:ed:f9:60:
f8:89:cc:ff:10:e1:43:b4:7f:a6:ff:c7:dd:d6:30:
16:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F8:9F:0C:39:D8:09:7D:32:15:28:86:6D:16:36:28:92:D6:62:69
X509v3 Authority Key Identifier:
keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3b:1a:2a:7b:83:e3:21:df:cd:e6:0f:9a:f6:bb:4d:0b:dc:
84:55:70:36:a1:96:70:1b:ba:8d:e4:5a:a4:f2:d1:c1:e7:b6:
9c:d0:17:ee:e0:c5:1d:37:d7:71:37:0d:ac:e4:fe:10:88:8c:
0e:c2:e1:5c:bd:e4:31:1c:8e:dc:f0:69:6d:36:0a:2e:72:c8:
9d:d3:50:a4:84:67:3c:9b:ab:fc:1c:ee:cb:9c:a7:14:b6:a8:
69:9e:a7:7f:26:9f:76:b2:fb:80:06:12:69:f0:ec:99:af:ce:
64:64:d0:1c:74:e6:c9:c5:ee:79:15:31:66:01:1a:79:0b:60:
78:ea:1f:c8:57:0e:24:d3:72:78:84:e7:a0:61:01:07:73:55:
5e:9e:11:9e:83:32:3b:38:17:03:68:7f:2c:0d:6c:e5:d7:26:
d4:cc:eb:b4:f7:f6:dd:0b:ef:00:2f:2f:b5:64:b3:4f:42:98:
02:d7:4b:4e:f2:c5:88:43:f6:29:4c:06:d0:25:09:6e:13:96:
4c:d5:36:e1:6c:f6:75:ba:47:9c:10:60:15:0c:58:d3:2e:da:
f1:ca:1a:b6:49:1e:45:e2:ce:a3:d2:60:ad:6c:39:62:07:b8:
cb:01:90:49:43:4e:44:81:0c:cb:22:01:89:1e:65:6f:7b:b6:
1f:29:fa:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:59:18 2026 by rpki-client