Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.mft
File: yFKOFLm6mFBWKUjNeshNKytqNx0.mft (raw, json)
Hash identifier: ZraEBmSxn+N/+Ek2yGDeLpB3zQG+XXtEVPMD0Fs107k=
Subject key identifier: 0D:5A:94:CE:87:1E:94:A0:A0:07:FF:87:DE:DE:F5:E8:15:F5:75:0F
Authority key identifier: C8:52:8E:14:B9:BA:98:50:56:29:48:CD:7A:C8:4D:2B:2B:6A:37:1D
Certificate issuer: /CN=c8528e14b9ba9850562948cd7ac84d2b2b6a371d
Certificate serial: 019FAC75AEABF0CC819B99E500F6B639A799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:21 +0000
Manifest this update: Wed 29 Jul 2026 06:00:21 +0000
Manifest next update: Thu 30 Jul 2026 06:00:21 +0000
Files and hashes: 1: AdgSMzHPUmuKzAlrtS53QR76t1s.roa (hash: nKsP5GbM2QK6ia47o/bGf3bfq0W9Ls05zVJw81d/vE0=)
2: S3l9n0dTP3FXhNcpLdf8YCRxkuo.roa (hash: bOQ4f+wL3ADi6V1m/4nIBmXdvzaUBsd7Lu728OmlsTo=)
3: yFKOFLm6mFBWKUjNeshNKytqNx0.crl (hash: mdW5Qrar0D6rfeoejXvnOXydsssiTzLVmofiS5EeKLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:ae:ab:f0:cc:81:9b:99:e5:00:f6:b6:39:a7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8528e14b9ba9850562948cd7ac84d2b2b6a371d
Validity
Not Before: Jul 29 06:00:21 2026 GMT
Not After : Jul 30 06:00:21 2026 GMT
Subject: CN=0d5a94ce871e94a0a007ff87dedef5e815f5750f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2d:e4:7a:63:39:8d:5b:54:53:8b:16:ec:3c:
7d:4d:a4:0a:14:46:9a:46:2c:0b:25:99:7a:8a:24:
12:17:29:f9:aa:90:65:ce:0c:3b:e7:af:2d:d5:43:
ca:84:4d:e5:b4:d1:57:80:4a:7c:f0:68:4b:d4:33:
69:9f:59:ee:b5:bd:2e:b8:43:10:16:88:b1:98:9c:
86:db:c3:6a:8c:bb:65:2b:f3:90:ae:6a:ba:ab:1d:
23:b6:ce:c4:69:52:83:8a:97:27:09:d5:8a:d4:0c:
ab:76:74:1c:61:41:0b:5e:df:66:97:07:d3:ad:82:
8b:39:a9:cb:4c:1b:32:31:61:69:3a:7a:6a:40:89:
c6:66:27:fa:a6:fc:a0:a6:39:8d:0a:0e:83:a7:99:
b4:a4:7c:bf:de:29:49:d8:85:34:b3:9b:a9:c7:81:
8d:26:95:0b:4a:81:36:6c:ce:71:ef:3d:7a:e2:4d:
f7:8b:83:30:2f:46:e5:72:df:56:4a:4b:8f:85:ce:
47:f0:71:c9:ea:b1:e8:89:93:5c:74:4c:a7:7b:7a:
83:4c:df:93:35:4c:d4:32:c4:6d:8e:b8:9c:9a:40:
19:6a:3b:3e:0f:7c:35:c7:10:18:05:5c:08:c3:96:
c9:46:02:22:8a:61:fd:17:bc:e5:9a:b6:d4:a0:fe:
df:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5A:94:CE:87:1E:94:A0:A0:07:FF:87:DE:DE:F5:E8:15:F5:75:0F
X509v3 Authority Key Identifier:
keyid:C8:52:8E:14:B9:BA:98:50:56:29:48:CD:7A:C8:4D:2B:2B:6A:37:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:34:d0:aa:fc:88:95:9e:d1:88:d1:9e:21:f0:11:07:ab:1e:
f7:2d:c7:ed:6c:3f:4c:c1:82:16:f4:a5:ff:47:92:b7:30:cb:
78:fb:78:b1:ad:bd:78:5f:c4:76:67:ba:82:99:4c:11:e1:65:
16:dd:c0:58:7f:3d:d6:31:38:f9:4d:dc:27:a1:f6:3f:25:5e:
b4:1a:42:cd:b4:75:5a:b0:80:e0:7e:13:92:75:cd:cf:24:1d:
32:c1:f6:6a:ef:e5:a2:2e:1a:ef:32:4f:bf:4c:91:7f:dc:63:
bf:e6:1a:98:8b:f8:22:fb:84:b9:ba:a3:24:32:32:ed:56:7d:
dc:52:9d:24:9c:5d:32:19:4b:23:50:ce:d8:0c:ad:58:4b:85:
24:c9:3f:ea:f1:62:f0:cc:a9:85:8b:9b:db:a5:dd:a3:b1:6f:
be:3b:e9:05:ef:fb:e5:5b:a3:a2:de:b2:45:92:68:bf:cf:9c:
f8:33:84:34:83:0b:13:8c:e0:b0:a5:3c:86:13:ed:9f:2e:1c:
70:77:1b:50:d6:b7:45:6e:b3:16:86:67:ff:06:ec:2a:e8:23:
0d:fb:04:40:42:12:6f:0b:de:79:e9:88:44:42:ee:27:1e:0d:
2d:6c:70:1f:dc:23:82:e0:26:d7:5a:68:81:93:65:32:b1:ab:
e5:15:fc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:59:19 2026 by rpki-client