Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: EHkDF9uLKK+3EFnYUTwtVH+9R8/lg9C9JVAkYnq7VtI=
Subject key identifier: 16:3C:AA:05:28:E6:51:B0:1A:40:CD:56:88:E8:DD:62:0D:23:C0:3C
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 019F93918851639E3CE48DD8260A2F78F531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 10:00:15 +0000
Manifest this update: Fri 24 Jul 2026 10:00:15 +0000
Manifest next update: Sat 25 Jul 2026 10:00:15 +0000
Files and hashes: 1: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: A8Dlytayc12uw7y5oFrvER8yNC5v1BrwC84524BZhRA=)
2: aEsbh_haMhsqIB5wCxd9t5IabFM.roa (hash: Ne5BDRQ7SBRIMJmF2NPdjnl9j7TlWo9N5JJSWBtw7bI=)
3: yrgQph9zHMA3wU0ZObxjZhTJQrM.roa (hash: XV/X6CYSDEZtr00aa1x8ls6ykfziXhFe1fHOXXDEkhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:88:51:63:9e:3c:e4:8d:d8:26:0a:2f:78:f5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Jul 24 10:00:15 2026 GMT
Not After : Jul 25 10:00:15 2026 GMT
Subject: CN=163caa0528e651b01a40cd5688e8dd620d23c03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:4d:63:c0:88:4f:29:bf:a5:37:de:19:92:
e5:bc:bb:14:81:b7:64:ff:fe:ef:1a:2d:7c:ad:86:
80:bb:38:fd:c8:58:40:01:57:94:48:79:2a:43:be:
e3:ed:e7:92:18:92:5e:b9:e6:a7:03:a7:56:59:f5:
10:a0:7b:63:dc:16:de:a9:f9:fd:0b:aa:98:36:a3:
89:a9:d9:05:ef:28:32:6f:77:5f:a8:55:24:c7:8d:
38:9d:e4:d0:56:a3:52:e9:ef:80:20:a3:80:58:39:
f5:c6:ea:e8:39:6f:9d:ec:fa:b2:74:f6:25:c3:6d:
da:ff:57:b6:43:b9:e0:d9:1a:7f:48:65:5e:e1:e7:
ee:74:6d:12:de:13:a8:e7:af:6e:80:80:f3:0d:18:
fb:23:c5:be:6c:21:c4:1d:c4:7a:de:fb:85:2d:82:
60:c7:70:4c:d3:66:87:d9:cd:ea:9b:6e:34:23:7d:
b4:9b:22:c0:d2:03:fb:8b:40:da:aa:40:ed:d1:a1:
3d:12:7a:15:ba:17:e8:ff:1e:d2:e7:da:91:ab:48:
80:79:37:4c:52:cd:3c:b5:fe:6e:58:ee:ec:f0:22:
7c:9d:54:49:cc:cf:d4:81:7a:53:15:8b:74:94:a0:
18:3b:12:7a:f2:27:ed:68:c8:85:17:b6:30:ef:a2:
7f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3C:AA:05:28:E6:51:B0:1A:40:CD:56:88:E8:DD:62:0D:23:C0:3C
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fb:b1:4b:f1:ff:19:f4:09:d6:eb:ab:39:b7:67:27:0c:b1:
d0:6b:cc:d9:10:7b:27:53:7c:7f:10:69:2d:9b:f5:cc:3f:f6:
87:1e:3b:f2:ec:07:de:e4:03:25:bc:93:86:a5:7c:7b:8f:ed:
57:c2:53:c4:d9:50:1a:66:c0:3f:1e:a6:22:cb:f4:45:12:9e:
4e:c8:a5:4f:de:47:dd:07:6d:d3:10:38:3d:95:e6:19:7e:4b:
89:63:0f:32:d3:2c:d3:34:f3:05:a8:f4:e0:54:cb:25:ee:1b:
a9:b8:ee:eb:1b:c6:59:d0:b6:d0:42:a7:fd:8f:06:4f:68:ed:
6d:6e:23:f9:b6:ae:7e:b9:8d:e8:ce:fe:ad:c2:6c:80:1c:ff:
b8:71:9c:f3:9d:a2:44:a3:e0:46:13:2d:7d:a4:83:e3:93:51:
2f:c8:e2:88:d9:33:14:82:df:79:d2:9f:c2:b0:8e:6c:a8:25:
86:d1:b0:ba:81:3c:cd:ed:be:15:4a:ee:41:20:9e:9d:6a:9f:
35:6a:79:27:e6:29:66:4b:f5:8e:68:ff:38:bd:08:9e:ef:f6:
85:2e:66:c4:bb:2e:39:76:29:b9:d6:41:cc:bf:70:0b:f0:73:
73:f8:94:19:ac:09:2d:31:7e:34:c0:21:bc:a1:ae:0e:50:ac:
bd:34:d1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:17:13 2026 by rpki-client