Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File: YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier: FcyAQLVTjzF1XpgmiFbdZEYhSru2CRuDYrFxhHN/BW8=
Subject key identifier: 8A:00:6D:BB:C0:60:3C:5F:C1:66:3F:BE:40:C2:1A:E6:BB:7A:42:39
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial: 019F92B64206AA5903C7AF557CCD4670655B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 06:00:45 +0000
Manifest this update: Fri 24 Jul 2026 06:00:45 +0000
Manifest next update: Sat 25 Jul 2026 06:00:45 +0000
Files and hashes: 1: 1iPsYqvE-ccnXaUSDoZeDrNAomM.roa (hash: rvJ3z6CrzCzgXCYWONhujj1iC92V3sl9Uzqlk+xTEEI=)
2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: SVkA3SnrQfGyhQl1gb4ANZ6j915UOnbSHz8Kz1c31cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:42:06:aa:59:03:c7:af:55:7c:cd:46:70:65:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Validity
Not Before: Jul 24 06:00:45 2026 GMT
Not After : Jul 25 06:00:45 2026 GMT
Subject: CN=8a006dbbc0603c5fc1663fbe40c21ae6bb7a4239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4f:dc:2e:51:76:0d:48:f9:94:38:0c:42:89:
be:88:02:fd:68:bc:13:d6:95:0a:bf:4b:e0:5e:92:
0f:79:61:9c:dd:17:48:e8:01:1b:73:5b:88:53:ad:
7d:d2:57:7e:0d:a7:6c:45:d6:f9:86:a4:a7:06:f9:
8d:33:81:7a:ac:9d:51:ec:bd:aa:08:41:51:0c:ae:
4a:c3:c7:33:52:5c:bb:ea:60:61:42:94:ee:ec:c9:
18:03:1b:be:3f:18:63:a4:c5:ad:cc:38:f5:a6:39:
62:18:fd:09:56:0a:28:4f:59:88:00:01:79:78:e3:
7b:e7:1a:56:6a:29:c1:77:8d:cd:f3:56:e2:ff:ce:
ff:97:5a:90:81:72:93:23:d3:f1:8a:32:d0:1c:38:
22:98:b4:40:b5:0d:e7:44:0a:f9:55:cc:25:46:e3:
fe:80:01:21:9a:b4:62:4c:3d:d7:a9:2e:e4:61:5f:
27:ee:6e:c9:d0:93:53:d1:94:56:c6:8e:96:83:19:
47:df:a4:cd:e2:c6:be:a9:d9:13:15:87:c4:85:fb:
25:be:3e:c7:9b:e5:eb:04:76:d8:1d:56:b4:f2:3b:
38:3f:5c:ac:6c:07:60:5a:70:77:7c:04:17:c7:12:
d9:99:b6:db:7f:9d:f8:f5:ca:f4:1c:2e:40:e4:e2:
3f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:00:6D:BB:C0:60:3C:5F:C1:66:3F:BE:40:C2:1A:E6:BB:7A:42:39
X509v3 Authority Key Identifier:
keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7f:8f:08:6c:e6:b5:e9:fb:31:0e:97:01:43:64:38:00:fb:
77:81:0c:d1:9c:08:5d:86:fb:cd:c8:ca:9d:64:d8:90:33:b9:
6c:f2:17:f7:70:8a:75:47:a3:54:38:58:79:b3:ab:5c:95:52:
eb:03:79:51:3d:2b:4c:d0:84:91:72:a8:85:71:ba:6f:54:99:
05:b9:6c:b8:ab:bf:90:7e:c4:4f:1b:a5:f3:cd:c6:09:c8:02:
df:11:78:82:ce:57:f8:7b:27:e5:46:ae:66:f6:5d:ec:ac:d7:
9b:f4:5a:98:ab:fd:47:60:a6:0d:17:3f:1c:ae:08:fc:5b:ae:
01:a3:0d:a6:41:b8:34:42:a6:6f:aa:98:05:f8:81:61:0a:2a:
52:90:c1:cc:fb:37:c2:87:a1:63:1a:ff:6a:df:1d:93:9a:c7:
65:01:4f:da:f9:d6:ae:59:0a:f0:55:bd:eb:4f:4a:6c:78:62:
2a:dc:e6:f9:50:22:1a:f1:1c:e4:24:7b:a0:d4:d0:bc:f0:a8:
36:b1:6f:17:af:8a:62:a1:95:8e:16:80:b1:78:0c:75:13:98:
8d:e9:e3:d9:0f:6d:b3:44:dc:d1:10:b9:9f:39:6f:73:49:7e:
7f:0b:6d:cc:ee:97:e9:79:b8:36:0a:69:d1:5f:78:04:a8:ec:
3f:d7:38:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:48 2026 by rpki-client