Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/YzGUhnMC7ZcHf8E_K62PwcI83Y4.mft
File: YzGUhnMC7ZcHf8E_K62PwcI83Y4.mft (raw, json)
Hash identifier: RbyFAwpnKZfa1pUCywxeS/EF9+PHAxPqwz4s2feozeA=
Subject key identifier: 2E:8B:8A:80:89:12:5F:0A:5A:7A:22:91:94:46:94:94:1F:6B:D2:BC
Authority key identifier: 63:31:94:86:73:02:ED:97:07:7F:C1:3F:2B:AD:8F:C1:C2:3C:DD:8E
Certificate issuer: /CN=633194867302ed97077fc13f2bad8fc1c23cdd8e
Certificate serial: 019F95496785D84F6D08FA9AE7C65E798050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzGUhnMC7ZcHf8E_K62PwcI83Y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/YzGUhnMC7ZcHf8E_K62PwcI83Y4.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:43 +0000
Manifest this update: Fri 24 Jul 2026 18:00:43 +0000
Manifest next update: Sat 25 Jul 2026 18:00:43 +0000
Files and hashes: 1: HuwT9iGWIgJRyUCZSSk1R7OqZEs.roa (hash: gHtemcwtFR9eD7jL8T2vPWRH/SZxxrNlKmGIkUXMU7A=)
2: YzGUhnMC7ZcHf8E_K62PwcI83Y4.crl (hash: gs4KN5KFMZWJvPlqtm4ZVfW5fXLszZmpgivrIzrPBHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/YzGUhnMC7ZcHf8E_K62PwcI83Y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/YzGUhnMC7ZcHf8E_K62PwcI83Y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzGUhnMC7ZcHf8E_K62PwcI83Y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:67:85:d8:4f:6d:08:fa:9a:e7:c6:5e:79:80:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633194867302ed97077fc13f2bad8fc1c23cdd8e
Validity
Not Before: Jul 24 18:00:43 2026 GMT
Not After : Jul 25 18:00:43 2026 GMT
Subject: CN=2e8b8a8089125f0a5a7a2291944694941f6bd2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:58:e7:0e:40:47:be:12:bc:cf:a1:3e:c0:70:
b8:80:3a:6d:ae:e6:cd:be:f0:c0:cf:3b:6e:cc:cf:
ed:79:bd:a7:81:5c:6e:03:a7:a3:6b:73:8b:6f:0c:
34:a6:94:e3:ee:c2:64:2f:82:50:64:5b:2b:03:a4:
8e:42:d4:70:f4:8f:ba:c5:46:72:1d:ce:1d:90:b8:
e6:f8:18:51:e1:bb:f3:66:df:1b:a6:4e:a8:f1:3c:
a1:6d:17:9a:96:ab:48:06:a0:1e:27:56:2c:f1:d7:
60:9b:c6:3c:84:ae:e6:8c:ea:e0:8f:16:58:83:c2:
d3:a5:33:b1:f0:3c:a9:97:47:6f:f2:f5:82:cc:3b:
ea:07:68:34:ac:14:2c:c1:ed:90:72:8c:25:d5:10:
af:b8:5f:65:73:d3:bd:38:ad:82:09:d3:5c:92:27:
5d:25:aa:19:27:e4:1f:c5:8e:dc:35:b9:ba:0e:ee:
55:20:93:ea:05:67:ce:10:b5:2f:50:b9:6a:f6:f0:
26:70:4d:d1:75:20:b2:cd:62:a5:5f:6d:8b:35:42:
e2:8e:60:71:be:b0:c6:99:63:16:ac:28:38:82:4b:
ff:84:66:12:ac:7c:3a:59:ef:d6:dd:29:ea:4c:75:
86:ee:d1:9b:ce:ed:2b:0a:5c:5f:bc:2e:a4:e9:df:
f0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8B:8A:80:89:12:5F:0A:5A:7A:22:91:94:46:94:94:1F:6B:D2:BC
X509v3 Authority Key Identifier:
keyid:63:31:94:86:73:02:ED:97:07:7F:C1:3F:2B:AD:8F:C1:C2:3C:DD:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzGUhnMC7ZcHf8E_K62PwcI83Y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/YzGUhnMC7ZcHf8E_K62PwcI83Y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/YzGUhnMC7ZcHf8E_K62PwcI83Y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:09:7c:9a:4d:dc:ff:aa:15:09:29:3c:5b:f8:34:9b:e0:51:
9d:75:5f:6c:f5:23:68:35:84:42:99:c9:bf:41:0a:c4:2f:15:
88:53:e4:72:9a:f4:33:cf:65:2d:e3:24:5b:5b:b1:b8:55:09:
94:2a:db:44:fc:2d:e2:68:80:a6:c2:38:f5:5b:1b:17:ac:9e:
18:be:1f:2f:2e:76:7f:e9:d0:9f:73:7c:fd:d7:b7:2f:38:ba:
9b:55:71:88:31:26:e0:0a:65:84:08:4f:de:4d:83:75:83:05:
20:b3:fd:ec:b7:01:b6:2d:81:89:03:91:5e:61:0a:03:9e:a4:
b1:c4:8b:ee:ea:9e:8d:ab:7b:52:9c:e8:65:be:c7:7d:09:56:
d6:b4:64:87:0c:02:0f:46:5d:be:f0:cb:99:6c:57:25:4a:fe:
9c:1b:ef:0e:60:df:a1:24:dc:02:36:74:da:be:38:cc:7b:65:
65:f8:32:f3:6f:3f:5a:81:05:70:ac:63:94:a8:c3:ba:6e:2d:
65:57:6f:da:b8:0e:9e:1e:4c:aa:5e:37:03:6a:97:8d:fa:48:
a0:20:9c:40:17:de:33:ff:0a:9d:eb:76:b6:2d:f4:27:8c:b5:
ea:59:77:ea:f3:c8:ff:54:1e:3f:5a:5f:b2:a4:8d:f5:c3:5b:
54:1f:a2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:06:48 2026 by rpki-client