Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json)
Hash identifier: qvNAfX9d81n4qQQ7WwbNeO6DQtinXeWlmFb/XcRTJR0=
Subject key identifier: CD:3E:3C:B5:71:F8:65:D7:BB:18:EC:DC:DA:8B:E8:48:33:B6:9D:A6
Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018
Certificate serial: 019F9248B22519079069010054095FB6FEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
Manifest number: 0A44
Signing time: Fri 24 Jul 2026 04:01:05 +0000
Manifest this update: Fri 24 Jul 2026 04:01:05 +0000
Manifest next update: Sat 25 Jul 2026 04:01:05 +0000
Files and hashes: 1: XQZYtmJX7BpNzPu03srU_4VYUsc.roa (hash: Bjg0iayeOq8sVWJ1lC2MT+jpchRq5ORWkMqvwpb8VDY=)
2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: kErDiYw6flk4k8OpJvRWdV+KJt93RP6eDrwSTeZ2pOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:b2:25:19:07:90:69:01:00:54:09:5f:b6:fe:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca334850daf371220520199229ebde90ef28b018
Validity
Not Before: Jul 24 04:01:05 2026 GMT
Not After : Jul 25 04:01:05 2026 GMT
Subject: CN=cd3e3cb571f865d7bb18ecdcda8be84833b69da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:c2:38:b0:49:de:26:3f:46:44:50:01:28:
87:cc:0d:f5:51:af:28:5a:e7:29:17:12:f6:12:2e:
91:fd:7d:0c:7a:e8:6d:e2:1a:75:9a:e4:d4:a1:8e:
49:69:82:e2:2b:12:89:78:f9:93:f3:a1:60:e5:8e:
8a:1a:4c:a0:16:79:54:e5:60:d9:0d:52:bd:c9:9b:
1d:cb:73:77:1c:fb:36:72:ce:99:a4:8a:07:df:65:
e7:ad:6e:8a:6e:b9:43:8d:80:b5:5a:06:b1:6a:51:
9e:31:11:90:6f:ad:70:2d:cd:35:ca:02:c9:78:76:
e9:7d:54:48:70:72:a2:26:78:24:2c:25:6b:09:f5:
be:72:41:13:2c:2c:47:04:93:60:26:49:a9:b9:88:
fd:9b:ba:4a:69:e8:5e:8f:a3:a2:05:1b:42:e4:4d:
c1:15:be:ba:57:e5:a8:56:a4:1a:80:3b:00:d4:21:
9a:56:6d:68:b9:0a:9f:8d:55:c8:46:18:2c:b9:41:
9a:9a:98:2a:2f:31:38:9d:2c:4e:6d:05:cc:d6:68:
60:cc:bd:a8:93:ce:e7:b1:e8:8b:df:bc:e2:b6:b9:
72:5d:a0:dc:c3:14:c0:3f:27:8a:36:48:83:06:aa:
8d:c2:8e:f4:41:8b:61:ab:f7:59:37:0d:1b:39:85:
5d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3E:3C:B5:71:F8:65:D7:BB:18:EC:DC:DA:8B:E8:48:33:B6:9D:A6
X509v3 Authority Key Identifier:
keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:da:d7:43:23:8c:5c:a5:67:5c:02:5c:7c:94:cd:f2:fc:a0:
31:1c:b0:6f:6c:4e:96:6a:9c:1f:ca:c4:ef:39:cf:9c:90:9f:
ba:f9:1b:6b:b4:62:d7:f6:a0:ca:40:a0:c3:d3:11:45:f9:31:
ad:01:ba:db:3a:aa:8d:03:8a:36:a8:e1:05:d5:ce:1b:fb:96:
06:2f:8b:b3:62:f7:f2:b2:2c:da:2d:e9:22:56:26:97:a0:d3:
fc:a4:31:48:3a:de:9f:71:cc:70:03:07:94:1d:6d:81:54:49:
a2:b7:3a:ae:3c:6b:57:a5:f3:8c:e5:db:6b:64:39:b4:11:59:
db:a6:32:04:b6:af:1e:8e:e6:1a:94:f8:cd:8f:2d:80:5a:f1:
39:36:65:59:3f:4d:1a:0b:86:6e:6e:4f:12:06:10:77:40:20:
4b:39:95:35:50:75:13:e8:ce:a4:01:f6:bd:36:99:d7:53:d1:
6e:2c:a1:e7:8e:84:79:ac:2a:a8:d1:b3:f7:cd:00:c8:b9:4a:
bd:5d:ca:f6:4f:c7:87:7a:db:ca:3b:78:04:62:43:86:4e:44:
93:cb:0b:f7:b9:41:cb:0a:95:6f:b7:ab:e8:cc:86:6d:c8:37:
2f:ea:fc:7d:12:e0:dd:5e:0c:d5:e5:e2:46:c2:58:bc:13:8a:
ea:e4:6d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:16 2026 by rpki-client