Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
File: YTXB97cUDIcufz_zRitO3GMddnQ.mft (raw, json)
Hash identifier: 8YF+SUAWemBiRLxo3jINHfiJVqKvUpbM6V/Lzij3Ho0=
Subject key identifier: 02:CB:89:BF:64:7F:E3:F0:7E:12:4B:80:01:6B:61:4E:BA:03:16:8B
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 019F91DA26540B215F46B309F58CDFFCB2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
Manifest number: 1593
Signing time: Fri 24 Jul 2026 02:00:20 +0000
Manifest this update: Fri 24 Jul 2026 02:00:20 +0000
Manifest next update: Sat 25 Jul 2026 02:00:20 +0000
Files and hashes: 1: CkAhU5a7YSBIG-o6BpREPmYhCGg.roa (hash: h2hbUWL0eiPGTV6yTSDgvXarG/Jxpy57N3mDxnUKoJA=)
2: YTXB97cUDIcufz_zRitO3GMddnQ.crl (hash: AwrFTWk6SnH4bTw07kVRYw8iM5uCB/BFT7xEzRlbyVs=)
3: d0sqjC0DnA7TPG86TXH_6VUnLrw.roa (hash: dAXlo04GPkYNTgbHXlkPxOYRVbw/cGshX84MajMnTIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:26:54:0b:21:5f:46:b3:09:f5:8c:df:fc:b2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: Jul 24 02:00:20 2026 GMT
Not After : Jul 25 02:00:20 2026 GMT
Subject: CN=02cb89bf647fe3f07e124b80016b614eba03168b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:7d:ca:fe:70:49:5e:93:e8:b5:52:ce:d8:
a0:e8:0b:c0:04:64:ec:0d:e8:cd:9d:22:ff:28:5d:
ee:cf:ef:3d:54:8c:16:f5:c9:86:e7:97:b9:72:9b:
5b:3b:66:84:d8:65:84:6d:01:17:36:4d:ac:46:1e:
74:7e:38:44:36:cd:00:d2:54:33:20:fc:ff:da:19:
79:a8:38:e0:c1:8e:3f:3b:a8:a6:c2:e8:b1:b3:58:
d8:a5:39:21:05:bc:eb:34:4e:bf:f2:bb:da:15:f4:
41:bc:a7:13:93:ce:52:44:3a:aa:fd:50:33:cd:b7:
e9:3a:e6:55:9b:dd:19:c9:9c:d2:cb:cf:c5:0e:b3:
30:eb:7d:77:0d:18:8e:3d:f7:4d:4c:68:aa:83:01:
e3:28:2b:8b:21:d5:92:68:03:e5:63:a8:44:b7:1c:
bb:c5:d2:d4:60:75:10:a8:85:c2:74:b6:d8:79:fc:
8c:a8:1b:9b:55:07:cb:de:af:c6:2f:60:03:e9:de:
04:72:e2:97:71:58:dc:50:b8:b3:d8:b7:26:25:c1:
46:c5:f6:1f:b8:5a:5e:2c:e5:5e:1c:2b:ed:44:b2:
e3:43:77:1c:05:54:d1:ba:c9:e8:89:b1:32:24:76:
73:07:b3:2b:fb:94:87:93:e6:f8:94:fa:fd:10:97:
78:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CB:89:BF:64:7F:E3:F0:7E:12:4B:80:01:6B:61:4E:BA:03:16:8B
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:64:80:e4:db:00:e2:1d:03:ce:b1:dc:a6:07:9a:5c:46:b2:
a9:87:e0:76:b5:ad:da:7f:08:23:2d:ff:90:24:76:a2:bc:b9:
1c:88:90:a4:8d:82:9d:c5:79:3d:7a:9e:74:35:39:41:97:04:
7a:97:88:d5:cc:60:55:55:4e:23:55:37:77:b8:f8:df:54:42:
8d:f9:74:ff:fc:1a:f8:4f:5e:74:7c:a3:58:48:3a:e2:44:46:
fe:42:65:11:c9:8c:50:d5:21:2c:34:ab:87:b0:4f:3b:b7:ae:
59:93:f7:4d:ea:39:26:74:61:b2:60:8b:2f:27:78:09:3d:c0:
2b:7d:75:be:d6:a1:a4:ba:85:70:d7:6a:39:83:86:18:c6:83:
74:07:6f:bc:cd:06:a3:77:33:e4:5c:6f:43:2b:2c:a8:65:73:
97:b7:bb:3c:77:82:a7:f9:85:90:15:39:c1:33:81:85:be:7e:
63:e6:13:62:43:f0:20:dc:2b:bf:d5:e7:22:1b:91:bd:61:02:
22:e9:f7:77:06:55:30:e7:7d:e9:8f:71:e0:fc:a4:cb:fe:65:
cc:e3:a9:a7:11:68:03:5d:11:72:d1:21:89:fe:50:35:15:44:
93:f2:88:a0:16:77:3d:09:48:8c:c0:6b:14:31:d0:4e:26:05:
57:7b:34:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:37 2026 by rpki-client