Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
File: YdrAqoYffXLG8l1lbwMdoWftqVU.mft (raw, json)
Hash identifier: cj9FLK/QIQaBNkZ0K36vnNLXWLtGYbHzlVEapKk7ddk=
Subject key identifier: 98:16:AB:47:08:AC:6B:31:4F:FE:41:00:E1:11:FD:F7:DE:5D:B4:5C
Authority key identifier: 61:DA:C0:AA:86:1F:7D:72:C6:F2:5D:65:6F:03:1D:A1:67:ED:A9:55
Certificate issuer: /CN=61dac0aa861f7d72c6f25d656f031da167eda955
Certificate serial: 019F8FB52278B15AD149A60C40CE0A479693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdrAqoYffXLG8l1lbwMdoWftqVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
Manifest number: BA
Signing time: Thu 23 Jul 2026 16:00:40 +0000
Manifest this update: Thu 23 Jul 2026 16:00:40 +0000
Manifest next update: Fri 24 Jul 2026 16:00:40 +0000
Files and hashes: 1: FlOjCt4LJfQ8IqN1peCaBvqAB2Q.roa (hash: RDwp0/0oDMXql1jT9ebav+hZj67VDM98AjOHB7oE64Y=)
2: YdrAqoYffXLG8l1lbwMdoWftqVU.crl (hash: SBeLnUhplqUyk8IFkFL2FcSotjo85oKksGkYwUsfL3w=)
3: dhtCDXQLsqqlrkZYhsNQj7BUfwE.asa (hash: EzJqcTfM145uC1wp3s4ktIqJ62O99szOvIfXe4xA3So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdrAqoYffXLG8l1lbwMdoWftqVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:22:78:b1:5a:d1:49:a6:0c:40:ce:0a:47:96:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61dac0aa861f7d72c6f25d656f031da167eda955
Validity
Not Before: Jul 23 16:00:40 2026 GMT
Not After : Jul 24 16:00:40 2026 GMT
Subject: CN=9816ab4708ac6b314ffe4100e111fdf7de5db45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1c:8b:39:5f:ac:90:03:9e:93:76:29:47:af:
3d:c4:48:97:50:68:64:ed:63:85:e7:c5:f1:a3:79:
49:f1:a5:62:ba:8e:5d:fb:3c:3f:1a:e0:1b:e7:7d:
fc:af:10:a5:1f:f3:5d:d3:aa:85:f6:45:27:61:3f:
60:8e:f0:5a:0b:91:9e:29:3c:1e:ed:27:b8:a5:e3:
ef:1b:a4:58:e3:e9:cc:39:85:88:ee:9d:81:da:e0:
ce:81:f4:31:e2:c7:66:88:fc:60:b8:14:0d:13:d3:
92:fb:8b:f1:5d:43:cf:f8:ee:66:48:cd:ac:3d:09:
a2:30:0a:26:3a:ca:04:38:a5:af:41:19:52:c4:4d:
cb:90:18:a3:3b:c1:50:c2:cf:9a:b7:d6:8e:b0:18:
83:8c:d5:17:d4:00:04:63:5a:81:58:f3:3c:13:12:
c9:86:0d:91:3a:9d:c1:af:75:dc:67:25:fc:7b:06:
ac:62:15:55:f8:15:84:ac:35:d7:89:d7:e0:11:bf:
43:2a:fb:34:93:f0:81:e7:05:df:f7:0e:ee:c1:c7:
c3:e9:bf:ba:58:9f:1a:52:3d:01:3a:b7:23:77:57:
fd:3a:45:87:a1:21:d0:81:81:88:68:3a:a7:0c:8b:
dc:29:b1:fb:e0:48:11:4c:1f:6a:be:8c:be:57:c4:
71:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:16:AB:47:08:AC:6B:31:4F:FE:41:00:E1:11:FD:F7:DE:5D:B4:5C
X509v3 Authority Key Identifier:
keyid:61:DA:C0:AA:86:1F:7D:72:C6:F2:5D:65:6F:03:1D:A1:67:ED:A9:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdrAqoYffXLG8l1lbwMdoWftqVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ba:f8:57:d1:44:5f:04:1d:a2:47:ad:dc:75:3c:a6:7e:d0:
90:dc:04:52:a5:2e:3c:da:91:cc:d3:1d:c4:79:75:a4:e5:88:
33:40:f7:89:84:aa:a7:35:f1:2f:9c:f3:08:e2:f6:2b:09:b8:
7b:b8:a4:e1:7c:cc:e1:22:7a:3d:b5:49:02:96:db:e4:7b:71:
4f:d6:1e:c7:9a:f2:1b:4d:6e:27:66:3b:d9:04:ec:17:0b:ed:
49:89:b7:57:c1:74:1e:b2:0e:3c:33:cb:a8:1c:c1:99:bf:f7:
e8:f5:52:40:40:28:54:ef:31:79:ef:ea:96:50:52:d2:c4:0b:
bb:fa:f9:f6:b5:22:ca:00:b2:bc:98:61:76:43:d2:09:cb:49:
08:8f:b6:6e:b6:32:a6:e3:e9:ea:d6:ae:43:e4:91:61:33:eb:
5a:15:3a:ab:26:f9:06:6e:43:a4:c7:e6:e4:5c:4a:4b:50:0a:
60:53:67:cc:41:d4:bb:8d:f9:00:07:43:17:97:49:66:e0:b5:
69:46:6e:bf:84:22:90:0d:d5:a4:c3:97:ee:62:57:de:16:2c:
a2:8b:3f:01:b9:8a:52:e6:bf:85:98:e6:ee:86:e3:99:cb:25:
8d:3a:04:7b:a3:b0:d4:e6:30:fa:f3:45:98:fe:70:ed:12:86:
2f:67:77:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:01:03 2026 by rpki-client