Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
File: ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft (raw, json)
Hash identifier: 4ng6lnmfMkJbAQ4+cMpGDvUEW6hEoKL4tepYXzejur0=
Subject key identifier: 29:04:FE:74:7C:5C:2E:37:54:BE:96:21:0D:7C:72:B6:C5:83:77:69
Authority key identifier: CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61
Certificate issuer: /CN=ca5154158905d1d44c4588dfd25802f324a93d61
Certificate serial: 019FA9AC39BC5E8B35796C3AAF63A7CF1DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
Manifest number: 082C
Signing time: Tue 28 Jul 2026 17:01:04 +0000
Manifest this update: Tue 28 Jul 2026 17:01:04 +0000
Manifest next update: Wed 29 Jul 2026 17:01:04 +0000
Files and hashes: 1: 21j5g4eFqeXt9UiELcluAASkdJE.asa (hash: ewsE7s7l/JEATVoXs5NZK7cBLbOm114kUjZghA3hzjo=)
2: 4okKBfXSNKomjqjfKSyXyfQW8mg.roa (hash: c/G+cvhNW3akdlAhAKvUtf/mU2MrPEwZm3MMXGbYwZo=)
3: ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl (hash: U4pSYSxZPGeWgX8sPbVnG+sgZ5y0PWXfgZQ9i3DKw14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:39:bc:5e:8b:35:79:6c:3a:af:63:a7:cf:1d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5154158905d1d44c4588dfd25802f324a93d61
Validity
Not Before: Jul 28 17:01:04 2026 GMT
Not After : Jul 29 17:01:04 2026 GMT
Subject: CN=2904fe747c5c2e3754be96210d7c72b6c5837769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ca:d2:23:58:d3:19:a6:ab:09:bb:5e:6c:dc:
3d:ef:94:e7:c7:41:91:ae:f1:1b:37:a0:50:8f:c5:
2f:0a:9f:68:68:b1:e1:21:ed:51:14:60:e5:ff:dc:
8a:b2:f2:a7:b6:e2:46:6c:8b:0d:e3:54:1b:3d:28:
77:56:22:eb:09:e0:60:1b:66:a5:f1:6e:c4:2c:e8:
00:ef:e5:4c:d1:b3:ad:97:c8:f4:80:1b:15:cd:4f:
05:80:30:7c:36:09:0f:3b:2e:88:cb:f5:97:8f:bb:
6a:73:c9:ba:43:3b:b7:6b:53:a4:d2:6a:90:4e:fc:
38:16:86:36:d8:03:8f:5d:40:43:76:0f:ec:b8:31:
6e:25:60:ed:f2:49:e2:6b:bf:86:39:3e:73:6c:dc:
2d:9b:8c:e5:1d:23:cb:a7:c2:a4:0c:3d:23:03:53:
59:63:6f:b0:99:b4:32:c8:32:07:bb:84:03:6b:a5:
9c:8d:ea:ee:23:99:e0:8f:37:8b:3e:eb:d4:47:c3:
87:6f:20:e3:dc:49:08:70:3a:9f:04:3d:82:a9:b6:
ae:e1:16:df:ed:04:b0:43:28:ec:ef:db:cb:9a:c6:
f3:f2:13:36:79:b6:34:3c:90:5a:ed:d2:10:a9:1d:
55:e5:e2:12:9b:28:e6:1c:65:82:a8:d5:fb:d8:f9:
be:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:04:FE:74:7C:5C:2E:37:54:BE:96:21:0D:7C:72:B6:C5:83:77:69
X509v3 Authority Key Identifier:
keyid:CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0b:c1:7d:0a:1f:d6:d0:02:9b:48:ca:15:fb:f9:a1:aa:fe:
0c:cc:08:21:a2:ec:16:b2:78:50:e5:fb:89:70:de:47:64:ea:
d4:cf:6e:ed:76:bb:d9:9f:ff:5b:32:ab:4a:de:cc:dd:f9:12:
76:e6:93:4f:84:f1:16:13:67:97:2a:17:a0:41:b1:9f:84:ab:
59:4f:ff:fa:99:62:14:f5:62:37:eb:79:19:95:8c:88:a4:54:
77:13:b0:a6:95:b3:6d:69:ad:b5:d3:24:eb:71:88:42:6d:7a:
f0:0c:81:a4:f2:02:fd:13:77:15:9b:0f:99:34:57:25:85:6b:
e1:6d:5b:78:56:90:38:84:30:e3:b6:ae:6c:45:05:32:76:29:
28:a7:45:2c:d7:e6:89:02:b7:23:87:ba:cd:51:a8:b6:b2:96:
8a:49:93:62:60:a0:fe:b2:91:d3:3b:15:6b:c7:bd:a6:1e:da:
f4:7b:8e:54:4d:ff:1e:d4:09:27:b4:ec:c6:5b:da:f7:52:5f:
1f:f0:4e:9a:9d:42:f7:47:1d:6c:51:1e:80:f7:6a:42:4d:d4:
00:6a:b8:a1:63:9a:b7:a0:2e:6d:d1:be:25:df:5f:3b:61:fb:
05:78:1b:5a:13:c3:7c:13:9d:12:15:e8:99:37:bb:34:0c:47:
f6:40:b7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:50:40 2026 by rpki-client