Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
File: ypAPHhHi0l0LIxatbgEmhIOayB4.mft (raw, json)
Hash identifier: 9bQpc9q8HFsW4c1SZ2sCaiVSC5ur4LitNFPAroJJw+g=
Subject key identifier: F3:C8:CE:19:C6:C6:1C:FB:CC:CE:2B:94:1F:A8:1C:B7:3A:FC:9E:97
Authority key identifier: CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
Certificate issuer: /CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Certificate serial: 019FAC3EE1D33A0CAD52887AD0A2B51ABD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 05:00:29 +0000
Manifest this update: Wed 29 Jul 2026 05:00:29 +0000
Manifest next update: Thu 30 Jul 2026 05:00:29 +0000
Files and hashes: 1: K2muBRhSzEeWwEOKyiaVJYw5K3c.roa (hash: 9FMIKD8yGkaykJTy68XJ8mxhdE87R0V7qtYcMc3oayY=)
2: ypAPHhHi0l0LIxatbgEmhIOayB4.crl (hash: vKMpCqG4n1PDArPRcrCMjJFamDmmQxSxuNDJim1xARw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:e1:d3:3a:0c:ad:52:88:7a:d0:a2:b5:1a:bd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Validity
Not Before: Jul 29 05:00:29 2026 GMT
Not After : Jul 30 05:00:29 2026 GMT
Subject: CN=f3c8ce19c6c61cfbccce2b941fa81cb73afc9e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:fb:b7:e9:bb:ed:1a:74:de:05:e3:81:38:
80:fe:19:6d:9b:c0:dc:6c:c7:09:3f:d2:62:ad:c6:
4a:01:25:95:87:74:92:64:04:d3:89:70:7e:ef:2f:
97:05:fc:de:ac:d2:01:48:e3:22:09:d7:5a:24:ac:
e3:9d:0a:a7:6b:7f:b1:eb:5f:48:3f:1d:82:02:b1:
1c:5c:55:5f:51:5b:10:d5:8c:f2:56:cd:c0:b4:31:
1e:57:0c:2d:ef:f6:24:6e:3f:17:6a:1a:1e:2c:06:
a1:a4:15:e3:94:bb:1e:00:ae:cf:4e:b7:be:f9:52:
67:63:e3:60:9b:13:ad:1e:20:66:f1:c4:1d:bd:c4:
18:ef:19:92:0e:87:fb:b9:ba:a9:03:ba:c6:f4:42:
5d:58:0b:a8:b2:86:9f:8d:37:d9:b5:61:2e:c9:67:
a4:29:dd:18:52:6b:a3:a9:89:81:c6:46:35:41:17:
c8:e5:e2:96:c2:87:bc:39:93:f5:36:1d:1b:60:1f:
2a:37:47:b4:a0:39:25:11:e6:16:87:11:82:7f:91:
31:ff:5a:42:5e:90:99:2d:50:37:18:13:d3:1c:06:
c5:a7:4b:97:5b:4b:01:fd:bf:16:d3:e9:4a:f3:43:
12:89:d4:c1:6b:25:90:d7:56:c1:e6:39:58:42:62:
51:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C8:CE:19:C6:C6:1C:FB:CC:CE:2B:94:1F:A8:1C:B7:3A:FC:9E:97
X509v3 Authority Key Identifier:
keyid:CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ed:33:3c:53:17:e8:28:79:bc:61:4f:19:a8:ba:97:b4:3a:
60:73:10:8f:e3:29:38:e0:cf:83:90:64:ca:00:bf:c5:5c:3b:
de:6d:16:92:7e:25:cd:14:92:81:d8:b6:72:7d:46:bb:e6:49:
91:12:ab:70:0f:60:02:73:31:98:43:6b:30:67:78:6c:7e:6f:
31:0d:2a:51:ac:be:4f:cd:39:c0:a7:1b:57:9c:e2:a0:2b:cd:
4b:48:2e:06:f6:00:cd:39:91:9a:42:79:21:98:3d:2c:57:1e:
9a:d7:9c:ae:34:44:ba:f1:b9:2f:e4:09:69:9b:5e:5f:0a:91:
82:0c:03:96:09:ca:4e:fd:7a:84:36:1e:dc:a4:62:bc:38:6d:
a0:05:c1:a9:1a:8c:71:05:58:ec:bf:35:ca:70:25:05:81:e5:
43:9d:b3:7d:7e:02:20:e3:a0:2b:4e:08:64:af:47:90:b3:fa:
96:4e:6f:ad:4b:16:72:21:0e:6c:ef:98:66:2c:53:28:41:65:
37:ab:f0:7f:df:39:65:e7:04:b6:2f:0d:18:a1:67:28:93:3d:
2e:59:40:2d:f8:71:01:18:97:64:a7:c7:66:37:8c:22:9e:5e:
6f:fc:34:96:04:da:d3:c2:a2:3b:7d:d1:da:01:1d:d5:b0:ba:
9a:75:aa:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:10:52 2026 by rpki-client