Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
File: YTdPxOqwDUHB7uR_37ABB4x0-oU.mft (raw, json)
Hash identifier: vds5G0MtMhgWfA+MFq31Vy/Afd5mHNooLHdl0lWlsMU=
Subject key identifier: 45:9B:C6:0E:03:FC:AB:57:A2:EC:61:54:83:B9:C3:7C:49:FA:04:7B
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Certificate issuer: /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial: 019FAC3F2C7FC89D5995A45EA26FC9CF98CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
Manifest number: 0923
Signing time: Wed 29 Jul 2026 05:00:49 +0000
Manifest this update: Wed 29 Jul 2026 05:00:49 +0000
Manifest next update: Thu 30 Jul 2026 05:00:49 +0000
Files and hashes: 1: 7eP7TwNaRBKXgHVXQPj9yKJaIEQ.roa (hash: ilu1OaDtcIPxYeaNVeuS9YaTFPbuPd9sYiHNRmOaCMs=)
2: YTdPxOqwDUHB7uR_37ABB4x0-oU.crl (hash: 5esI2bdb3BFN7tu986TJY+gZq9/1RLp2PorD95fqHvE=)
3: t6QTeO_UUKyvQ6rnuFTVQVtV-d8.roa (hash: lkQHddLK92kTmS7mRA5Mrvzd/PdOAJ8/DAOJGdqwGqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:2c:7f:c8:9d:59:95:a4:5e:a2:6f:c9:cf:98:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Validity
Not Before: Jul 29 05:00:49 2026 GMT
Not After : Jul 30 05:00:49 2026 GMT
Subject: CN=459bc60e03fcab57a2ec615483b9c37c49fa047b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ed:1f:3d:1f:cf:e9:12:1a:31:9a:2b:dd:11:
91:49:25:0a:fd:90:44:43:79:6a:72:02:f0:4f:55:
38:18:89:d0:ca:77:26:d9:1c:4c:84:1b:2f:9f:ac:
b7:c6:25:ed:70:ce:b8:71:8a:9d:b6:91:e6:81:7a:
2e:e6:04:f4:bd:d0:65:96:f3:e1:61:4b:3d:8e:58:
83:4a:8f:12:c1:a4:63:90:4a:cd:fe:b0:15:19:2d:
61:ba:46:7a:36:af:32:f1:92:f0:97:d2:40:c5:79:
2a:2f:b8:48:28:b3:89:85:d2:97:9c:d8:07:76:63:
da:a8:d9:f8:ed:cd:2b:36:3b:95:ef:e4:f7:cd:c4:
7a:e8:75:9f:8d:82:ed:30:a4:00:05:f7:49:df:d4:
62:67:ad:da:5b:8a:5c:7b:9f:6f:bc:3b:3f:58:3c:
d0:82:c8:63:fe:3d:1c:bf:eb:72:ea:c6:09:e1:eb:
b9:4a:15:87:8e:d7:2e:63:80:be:b8:d9:d4:1c:36:
e9:06:7a:da:92:5d:4f:78:2e:99:9e:84:6f:31:7c:
a2:40:2a:13:42:88:f5:45:fa:78:2f:9c:69:6c:75:
ae:ee:0b:52:5b:60:c0:bc:95:17:c5:12:ca:45:63:
ea:0f:ca:de:60:8b:17:4e:e3:29:35:8b:db:26:4a:
94:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9B:C6:0E:03:FC:AB:57:A2:EC:61:54:83:B9:C3:7C:49:FA:04:7B
X509v3 Authority Key Identifier:
keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:60:de:81:c0:4d:94:66:8d:fb:f7:2a:13:69:49:95:da:34:
2b:6d:46:95:93:38:fb:d1:7a:80:08:54:51:e9:24:52:3a:66:
b2:3d:cc:bd:63:ad:37:61:96:e6:3a:c3:27:47:d0:eb:b8:94:
c9:cd:29:74:40:68:77:63:0b:ff:d6:36:7b:ec:14:6f:88:b7:
30:4a:56:33:14:63:65:1f:95:e9:91:c1:7f:b1:a2:3d:7a:fd:
4f:80:06:ab:e7:95:20:bd:47:25:ee:03:5a:0d:23:c0:37:31:
22:f3:0e:fe:2d:42:44:f7:6d:b7:84:a5:36:33:b3:72:fe:1c:
3a:fa:2a:e9:8b:1b:e4:75:6d:af:f8:35:f5:c9:d6:86:4c:d9:
f7:51:0f:b6:d9:62:5b:2a:92:d3:fd:27:00:6e:44:f7:30:ce:
ae:dd:5a:9d:72:4c:7a:2e:f1:9c:97:f8:b4:23:14:68:c3:38:
e8:ff:c7:7a:69:de:53:1e:15:73:03:f9:4f:dc:34:9c:ac:b5:
39:49:fa:d8:43:93:a2:dd:85:ce:76:ec:d5:f3:d9:85:07:b1:
05:c3:17:60:98:84:ff:4b:9b:03:55:5d:b5:2e:65:0f:be:25:
c6:a7:e7:27:88:90:3c:c5:06:de:d3:14:43:cb:43:53:3e:cc:
55:76:3a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:10 2026 by rpki-client