Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
File: YDJcIdL6_nQzmNweVXRDMoARBGk.mft (raw, json)
Hash identifier: qXIdnROaDR8tsSPtP/07OJwTW4utCU+kikanrIttkhU=
Subject key identifier: 95:B3:ED:CC:D7:53:60:65:4E:3D:B7:AC:B8:9C:B6:38:57:86:72:24
Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
Certificate issuer: /CN=60325c21d2fafe743398dc1e5574433280110469
Certificate serial: 019F92ECB927FE1897085CA5EAABDAD50B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
Manifest number: 1879
Signing time: Fri 24 Jul 2026 07:00:14 +0000
Manifest this update: Fri 24 Jul 2026 07:00:14 +0000
Manifest next update: Sat 25 Jul 2026 07:00:14 +0000
Files and hashes: 1: YDJcIdL6_nQzmNweVXRDMoARBGk.crl (hash: Q65YkeO51werGPB0IY6O0vVhFef4neqWVpJJy/a2kB4=)
2: ZGMDMaaeutNnkXyJL58734MtHlg.roa (hash: Zs6W0mlBy5j5neBEaMNbSPEex6wUKIOiG0C8/ZE4ktw=)
3: b5JaXMr4GIBvT4KCIP7BI-wUSZI.roa (hash: vRg65JmrVs2QhtYFXLwraN6iw4o7UcfzdNjLDeVLhok=)
4: jKshf8wnc15011tXTFSj3TTXJFA.roa (hash: K6mzJUE9dYVEi81Gnv2fYao7OX/tyLrwWkjFdI+z8Z0=)
5: qPyrPHOcj4AsJ76uDNoQbJBu-3A.roa (hash: icQiWI2POs5a9KmLU/wFkbzLvsrXEhv8Owk5IzrA7+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:b9:27:fe:18:97:08:5c:a5:ea:ab:da:d5:0b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60325c21d2fafe743398dc1e5574433280110469
Validity
Not Before: Jul 24 07:00:14 2026 GMT
Not After : Jul 25 07:00:14 2026 GMT
Subject: CN=95b3edccd75360654e3db7acb89cb63857867224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c5:33:34:ca:7e:58:ce:c0:4e:58:c4:84:94:
96:db:f9:5c:3d:9e:9f:8c:a0:a3:19:69:91:8b:d5:
7b:75:95:93:4f:cd:b2:68:ad:66:23:ea:a1:65:f7:
e0:da:8d:f9:05:f6:b6:e9:5e:22:db:5e:51:79:ed:
ac:83:b0:d1:4d:cf:ca:ff:09:45:9f:b8:e1:0b:3a:
1a:0c:ed:71:63:c2:9b:37:d2:98:36:4a:e0:28:42:
ef:80:0e:0d:d7:da:47:f7:c0:1d:9f:fd:b9:9d:5d:
36:94:6a:c5:ab:fa:b0:31:f1:0b:b6:a4:ad:1f:e2:
fe:4c:ed:00:33:39:6b:ad:e9:fc:46:ef:65:c1:0b:
58:9c:0e:15:2e:e2:2e:5d:53:83:7c:ba:50:2a:3d:
c0:d9:b9:e4:ce:88:93:c5:eb:ac:f6:df:4c:14:19:
ce:f9:b8:45:81:46:b6:9a:1c:3b:f0:3c:57:ba:26:
36:26:5c:d9:7e:ee:cd:0c:6f:62:fc:c3:e9:df:ec:
c1:1d:b0:70:22:72:69:64:b7:c9:e2:5e:16:eb:be:
2e:17:18:b5:b9:b2:50:3c:ca:2c:7a:c6:bd:a3:31:
43:a7:e2:9f:a5:30:b6:0d:1e:57:3b:86:30:f5:30:
3e:99:33:9d:cd:ba:3d:bc:94:63:ef:0a:a9:75:9c:
76:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B3:ED:CC:D7:53:60:65:4E:3D:B7:AC:B8:9C:B6:38:57:86:72:24
X509v3 Authority Key Identifier:
keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:d6:ed:db:04:36:51:8f:42:d0:d6:92:fa:d1:36:12:40:33:
38:ad:9b:a4:cd:82:bf:9b:01:56:23:1b:03:ec:62:97:df:e1:
70:49:15:c8:78:39:3c:f2:22:f1:39:d0:d9:24:f9:25:c5:a5:
97:e9:dd:3a:c3:74:38:8c:40:be:3b:c1:ef:2b:73:f8:64:ea:
ab:b8:d2:6a:c0:39:8a:4e:dd:bc:80:b9:12:9b:ca:15:6d:f7:
19:92:9e:77:51:86:37:1b:cf:5e:f7:c3:57:48:5a:93:e4:2d:
22:ce:93:26:a9:ab:f0:2e:1f:64:05:40:20:bc:3f:1c:9c:e1:
52:c1:83:e9:f0:81:1d:e3:47:4d:54:46:6c:07:5a:8e:ab:1b:
6e:06:89:a1:eb:d0:f6:fe:9c:b3:84:30:89:bd:dd:28:d7:c2:
ba:0b:84:e5:4b:8a:f5:ae:5f:66:68:fa:60:24:d7:80:f9:de:
55:ef:1c:3b:2f:cb:9b:4b:45:a1:ea:6f:59:9c:b8:96:fd:51:
35:11:31:5e:ca:0d:a2:77:ce:74:a0:28:f0:c7:a4:71:d5:93:
fb:d3:7a:bd:f8:bb:dc:f7:e8:0f:2d:76:3f:4c:0c:c8:dc:a0:
89:3d:93:0d:dd:36:eb:56:4a:8f:38:a7:87:a2:3f:27:1d:14:
fb:c6:98:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:39:13 2026 by rpki-client