Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
File: Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft (raw, json)
Hash identifier: Qo+qUL2bSiTbhV9uf2w3ZV8CUrZjL6JnwfCKx58xPKk=
Subject key identifier: FD:74:B5:46:A6:66:FC:61:D1:E9:DC:95:5D:EF:87:F9:81:5B:64:07
Authority key identifier: 62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
Certificate issuer: /CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Certificate serial: 019F91A4341FA54FA26CD0F054BDF36BD5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
Manifest number: 1587
Signing time: Fri 24 Jul 2026 01:01:25 +0000
Manifest this update: Fri 24 Jul 2026 01:01:25 +0000
Manifest next update: Sat 25 Jul 2026 01:01:25 +0000
Files and hashes: 1: 3Kmog7cWFs6s3S45GoXvhR3Efno.roa (hash: Iqqkv/IBYj5OUDfgj+1rxohlVAnDwSEOY17mdlZvfIw=)
2: JVvCSDu8rrifYpO5MIC8vy1zrds.roa (hash: okxALFImBayqCq+MjZ+88HtUfnizSp2j3P1VuBRZTtY=)
3: Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl (hash: Nog7+TV0MCelgtczFA8itERgQRbaZezHeL7dUAkfcpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:34:1f:a5:4f:a2:6c:d0:f0:54:bd:f3:6b:d5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Validity
Not Before: Jul 24 01:01:25 2026 GMT
Not After : Jul 25 01:01:25 2026 GMT
Subject: CN=fd74b546a666fc61d1e9dc955def87f9815b6407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:b1:23:96:89:3a:30:32:3b:b0:c7:73:7a:
4d:07:a2:49:05:13:a3:aa:7a:a2:f5:e5:8e:9b:7f:
92:e4:7c:ff:7e:2c:a9:96:d8:ab:5b:16:b5:ad:7d:
d3:d2:dd:64:f6:0f:b4:fe:2f:d6:a7:77:9e:d2:72:
92:71:dd:b2:55:9c:87:9e:21:0e:86:6a:d1:5d:56:
db:23:55:fa:3f:73:aa:68:e1:5e:41:40:47:fa:6f:
cc:78:82:c7:ef:d7:3b:98:63:c3:31:2a:01:33:f0:
65:58:91:23:59:e1:70:90:0d:45:78:eb:10:05:c7:
4e:0a:d8:65:b9:63:c6:83:c7:81:7a:ad:b7:a7:c1:
f4:d5:59:c9:74:5e:a1:b9:27:99:a0:be:a0:c2:e5:
2f:d4:15:d6:4a:cf:11:f4:09:ec:10:3a:a9:a7:68:
db:1b:cf:3f:b7:38:d7:60:35:d7:33:98:94:68:79:
01:47:63:fc:06:a2:5e:3b:9c:44:6c:c3:3c:26:4a:
5b:b2:e9:59:fa:ff:a2:59:28:85:ed:b9:99:4f:45:
dd:3d:90:d7:9e:74:35:1c:af:58:b5:34:b9:4c:7b:
99:05:a7:d4:23:16:c0:f3:ad:fe:be:08:45:91:53:
64:37:d2:2d:d3:3c:2d:07:5b:98:ab:3a:31:b4:b6:
7c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:74:B5:46:A6:66:FC:61:D1:E9:DC:95:5D:EF:87:F9:81:5B:64:07
X509v3 Authority Key Identifier:
keyid:62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:74:d9:da:be:54:fc:99:6c:c1:ab:4c:04:10:46:49:60:8f:
ed:8f:37:ff:d7:9f:e5:f1:97:d5:78:a0:52:82:8f:fe:76:27:
dd:c0:0b:6d:19:00:d7:16:54:6c:e1:11:5e:16:0f:b9:36:ce:
07:12:28:0b:89:49:ab:ae:d4:8b:ac:9c:8d:87:a7:33:56:36:
7b:39:00:16:cc:3c:5c:e1:2c:f6:f8:7c:2b:58:88:f1:6f:27:
a6:ed:49:70:55:ff:16:e8:08:d8:87:bf:9f:2c:3a:00:34:7c:
88:34:69:56:d5:cb:e8:17:79:c1:1a:89:99:0c:98:82:2f:ae:
f4:29:38:8a:ab:e1:ea:2c:0f:6e:5b:4c:71:e3:4d:6b:e5:56:
69:f2:12:82:cf:af:df:62:b0:4f:a0:d4:8c:91:fe:12:f8:90:
f7:95:da:ad:35:3a:ce:e0:9d:a5:ab:c6:78:17:c8:1a:f8:fa:
f1:03:37:35:98:62:a2:bb:aa:7f:61:e9:83:24:64:88:76:59:
2b:f8:5b:3b:65:c0:62:47:96:c0:31:86:8d:53:e2:ad:e0:8b:
c8:c5:96:6e:3e:9c:c2:71:a5:cd:d6:2f:5d:a9:e3:9b:23:0f:
a9:ce:f4:3e:c7:8f:3d:e5:dc:24:29:36:96:e3:e4:65:67:d2:
70:e2:dc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:28:17 2026 by rpki-client