Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
File: YAJlJf1EpPx1siRPgNAiY09fdjU.mft (raw, json)
Hash identifier: cI5x43rfklZzfjwTelAkZXGLGBfvL2586HQJozTLFN8=
Subject key identifier: 16:4C:31:43:5E:63:CA:28:9E:A8:F2:3A:A5:58:9E:6F:69:F9:16:FA
Authority key identifier: 60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35
Certificate issuer: /CN=60026525fd44a4fc75b2244f80d022634f5f7635
Certificate serial: 019FAB2C50DA0CA4E29988F0C218CBB84EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
Manifest number: 03CC
Signing time: Wed 29 Jul 2026 00:00:35 +0000
Manifest this update: Wed 29 Jul 2026 00:00:35 +0000
Manifest next update: Thu 30 Jul 2026 00:00:35 +0000
Files and hashes: 1: 1sBpsAgGmSmkI2DNNDGh5oQcGy8.roa (hash: hMp3WaNL7UAirQa4ZKu/uxZXkQM56eznsw/jc56uSx4=)
2: YAJlJf1EpPx1siRPgNAiY09fdjU.crl (hash: 3YqK8Ao1+JSkdy9rVpVvcfWG9pRwppan8ASJTWwYSh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:50:da:0c:a4:e2:99:88:f0:c2:18:cb:b8:4e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60026525fd44a4fc75b2244f80d022634f5f7635
Validity
Not Before: Jul 29 00:00:35 2026 GMT
Not After : Jul 30 00:00:35 2026 GMT
Subject: CN=164c31435e63ca289ea8f23aa5589e6f69f916fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:81:ce:17:2c:c0:05:73:c9:60:4b:e6:ff:c5:
1c:18:f4:97:fc:93:f0:ae:a7:60:6e:bd:3c:72:46:
46:6e:2f:fa:66:cb:b7:e6:71:de:63:ad:87:c5:64:
97:02:5f:53:37:33:74:d9:dd:cf:4d:ce:82:75:b2:
19:fd:8d:42:c7:64:96:80:35:43:68:c2:16:20:75:
9c:65:ce:c9:0c:22:c3:62:43:29:c1:e7:68:d6:57:
3d:cb:f6:75:c8:b5:c3:00:e7:a6:5a:40:52:08:53:
a0:04:03:53:77:99:91:6d:78:ee:fd:2c:e3:e9:ac:
24:90:fc:eb:d7:84:ab:93:ac:f9:93:a4:62:3b:da:
a2:24:e3:cf:08:93:d5:f7:11:29:c9:a3:bc:fe:00:
01:e6:ce:bf:36:27:20:6d:c4:eb:01:20:f2:8d:44:
51:51:e3:36:99:82:64:8d:be:4d:b4:9e:1f:eb:be:
46:0b:b0:42:be:2b:07:e8:c8:6e:28:bf:da:62:80:
f2:38:7f:bd:a4:4d:d3:96:23:b2:05:f7:40:01:eb:
11:42:c0:e5:6d:df:a2:fa:eb:d6:52:cf:ef:9a:c5:
9f:a8:d9:94:3b:9e:6b:56:ba:05:e4:c3:5d:be:76:
67:32:27:30:d4:5d:6a:2e:fc:09:62:51:17:06:3e:
f1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4C:31:43:5E:63:CA:28:9E:A8:F2:3A:A5:58:9E:6F:69:F9:16:FA
X509v3 Authority Key Identifier:
keyid:60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1a:f8:17:e5:1e:6d:31:13:e6:0d:4b:be:f2:ac:bc:37:e7:
28:2c:45:1a:2d:af:d0:ae:95:53:13:cb:cc:ec:c1:f1:fa:00:
dc:55:0e:da:f7:fb:a4:9a:c5:41:b2:1b:7f:81:61:9c:74:e2:
50:c9:19:4f:a2:f7:ff:aa:24:c3:83:26:00:f4:e5:47:43:f8:
d7:f2:d3:b4:38:c4:c1:80:ea:54:0c:8b:10:6d:57:30:c4:c5:
74:d1:c6:a1:5e:2e:bd:4e:30:80:ee:59:71:db:99:47:c9:12:
55:64:6d:b2:91:b7:d8:4a:98:90:ef:96:00:f7:ac:28:3d:44:
21:d8:ee:2a:7d:bf:8c:27:a2:cc:ec:36:9c:75:d5:fa:78:16:
f1:5f:dc:ea:08:be:6d:3b:de:06:53:25:db:37:12:30:d4:3b:
02:40:7e:9a:76:f7:c6:42:e5:e6:68:da:65:39:80:e6:97:72:
4d:3d:d6:e3:ab:0e:7b:3a:d6:be:79:88:24:40:4f:b7:f4:50:
19:7d:40:3e:eb:74:2e:19:7d:7e:6a:e9:f6:d0:ce:0b:af:d0:
f2:20:2f:2e:15:9e:70:d9:6f:39:0f:be:fc:ac:24:00:d8:e8:
67:91:e1:79:2f:fe:19:c9:7a:e7:2e:c0:06:a6:db:d6:1c:47:
32:8e:4c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:40:58 2026 by rpki-client