Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: lc804d1f5Msj6uPqvANgsSyi2bb85Rf1svFG5Mc6YoA=
Subject key identifier: 36:7C:32:66:69:C8:04:4F:85:9C:8B:7F:EC:AE:48:46:8A:D0:17:07
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 019F939282612ED4DEC5896474ACA7FCC314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 0D84
Signing time: Fri 24 Jul 2026 10:01:20 +0000
Manifest this update: Fri 24 Jul 2026 10:01:20 +0000
Manifest next update: Sat 25 Jul 2026 10:01:20 +0000
Files and hashes: 1: 6PWOGz_KqRkb1zSJBPSYqwA3Obk.roa (hash: 2QNX7SpmW+cQkXWOHdllDN5APRnT1YGjOBVoLe9iX0U=)
2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: 2OmQ9XA+4c5hsZa/DRFO6xTqyMx+MdneqLqwFsyVW0w=)
3: prAX8QK9sJ83-_8sb5b9uyxyLB0.roa (hash: MGpYm8TiAMHtR6UX1RiE9OEkX3HH/xl2rU9chl3K2sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:82:61:2e:d4:de:c5:89:64:74:ac:a7:fc:c3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Jul 24 10:01:20 2026 GMT
Not After : Jul 25 10:01:20 2026 GMT
Subject: CN=367c326669c8044f859c8b7fecae48468ad01707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7e:26:20:f0:28:56:8f:a9:61:fc:c7:9f:c1:
f5:80:20:95:8d:32:83:66:0b:b0:d5:43:05:a7:32:
67:01:54:a7:a9:c7:b6:55:a9:5e:54:c4:a3:c1:a2:
de:3b:48:05:cc:d7:ac:b6:3a:e6:44:da:e6:65:6c:
f8:aa:90:25:b3:80:95:76:a4:7a:c4:7b:8e:3c:2f:
2e:6b:d2:17:3f:75:f6:6f:d2:62:0b:e0:a3:37:d4:
6d:37:83:f9:44:aa:51:c6:77:cf:b7:ca:75:b4:16:
cd:36:f7:11:63:5b:f3:d6:7f:67:69:33:6f:4f:a7:
2d:ee:7e:b4:d4:4e:f1:97:61:70:56:a3:5a:74:ab:
32:81:7e:c3:d0:4c:db:7e:30:36:31:43:02:ae:7c:
4f:62:2c:49:f4:1c:8e:9d:5f:99:bf:6f:9a:1e:fc:
06:a5:df:1a:a0:9f:cc:e2:9c:5b:70:7d:80:80:4e:
9d:e1:7d:70:cf:4e:8f:99:79:cb:c4:0e:17:10:6e:
0c:7c:63:00:7e:e4:3c:53:44:64:ba:55:9b:18:6a:
c3:54:09:46:b6:f9:9d:8c:ce:5e:4c:0f:4b:2c:57:
f4:11:d3:21:0f:4c:f2:2d:9b:0a:2a:41:b4:b3:10:
54:9a:3d:14:75:a6:97:7a:22:e5:44:8a:73:d6:19:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7C:32:66:69:C8:04:4F:85:9C:8B:7F:EC:AE:48:46:8A:D0:17:07
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:16:0e:d8:f9:3c:2a:38:04:6a:c1:f6:69:2c:a4:c5:13:34:
fd:dc:f6:de:f1:5d:55:25:48:f1:e7:e8:8b:6f:4f:8c:ea:0d:
1c:37:cc:87:bf:33:97:6e:b8:d3:d4:da:e9:d6:f1:59:5e:3a:
16:99:23:32:70:08:fb:d0:da:16:c6:e1:1b:3d:07:0d:26:5d:
aa:80:cd:15:13:82:1c:75:7d:7e:4c:7f:22:95:7c:da:35:cc:
a1:b4:d4:0c:55:d5:d3:76:90:98:fe:e3:e5:ff:cf:61:83:76:
8c:09:ee:37:87:e2:06:98:27:16:67:e7:54:7c:b0:cb:ec:86:
ee:c5:9b:c8:b1:42:46:4f:f4:58:35:fb:7e:9a:9a:ab:24:01:
28:ac:7a:d7:da:9a:36:5d:37:c2:85:85:90:88:b1:5a:b7:e0:
9a:c9:b0:d9:c4:e5:c2:72:2b:a5:2a:47:52:40:63:d4:70:5b:
84:d6:27:4f:58:63:f4:08:c7:fa:9d:b5:9e:50:a4:95:4e:ca:
f0:22:37:ef:35:21:33:b9:2b:ed:e0:41:b6:35:a6:3b:29:50:
49:da:88:f2:b1:50:75:94:3c:3d:15:3f:a8:6a:33:a0:cf:06:
80:46:59:e4:39:9d:c9:cc:ef:07:d5:84:9d:b8:ca:4b:86:35:
dd:ac:ea:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:11 2026 by rpki-client