Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
File: yalITKcIq3cesduQuvyKEUwsPXk.mft (raw, json)
Hash identifier: OJXqvnHh2/DouPFM7sZlp6MN0vndkFGy8Q2h9PaN1us=
Subject key identifier: 1E:4C:9A:7A:07:CA:45:D2:CB:23:FC:59:15:AB:37:46:BD:7E:72:A0
Authority key identifier: C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
Certificate issuer: /CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Certificate serial: 019F9248FD388424C4AA0993C44A6391D71C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 04:01:24 +0000
Manifest this update: Fri 24 Jul 2026 04:01:24 +0000
Manifest next update: Sat 25 Jul 2026 04:01:24 +0000
Files and hashes: 1: 3eahbNs7sLSlMwMQAPIK4WlF5S0.roa (hash: iShcDJZ7gmNtw4FSGePEabrCqu38c4kHe0CrQJ2Q7ow=)
2: MuKPEjpSeKLvjqZfVopVa-G44-Y.roa (hash: gXY94gXYWU1Pqibv85vvI+18JY770F42380MRYt28Gc=)
3: yalITKcIq3cesduQuvyKEUwsPXk.crl (hash: 98RSEIbvI9vDvLQEQ+v3mlhtomo1QA4EZ6z+xVBAvas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:fd:38:84:24:c4:aa:09:93:c4:4a:63:91:d7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Validity
Not Before: Jul 24 04:01:24 2026 GMT
Not After : Jul 25 04:01:24 2026 GMT
Subject: CN=1e4c9a7a07ca45d2cb23fc5915ab3746bd7e72a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:47:06:47:c0:df:31:9b:9c:2f:ef:c2:e4:
05:bd:94:58:0f:e4:a0:51:90:af:ab:cf:d7:ad:40:
f3:e3:0b:2e:19:5e:3f:93:b9:78:bf:c5:14:02:37:
8b:81:3c:3e:0b:79:c1:e5:70:59:9b:d9:ad:e1:9d:
fe:b4:ca:a4:f7:af:39:b7:d8:14:57:bf:3e:0f:11:
f8:4d:6a:35:b8:b7:d2:12:f6:c3:05:eb:25:d7:24:
50:51:76:35:20:ad:6f:8d:68:d4:4a:32:20:7c:0c:
41:00:cc:88:a8:50:94:9a:52:cf:64:3f:bd:31:a3:
d1:05:94:89:9d:37:ae:66:b3:6e:15:2a:f8:f2:f0:
e5:11:fc:e0:6b:bd:67:21:9d:34:28:a0:95:aa:ed:
0b:7b:17:34:77:bb:30:6a:db:2b:e9:55:38:ea:a3:
70:31:36:af:91:9f:d3:1a:1e:0b:29:fc:ef:c6:71:
51:6b:8e:a5:40:96:e4:98:50:ba:61:4f:95:bf:8e:
23:a5:35:09:a4:91:51:58:f9:88:2d:a0:f2:2b:d3:
91:3e:12:72:f5:4b:93:ef:4e:98:83:bf:25:cc:7a:
33:ea:0e:07:61:1d:0f:37:39:2a:ea:a3:a7:7b:8d:
7b:38:6c:ae:59:66:c4:b4:7e:2c:1c:9e:30:a5:3e:
35:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4C:9A:7A:07:CA:45:D2:CB:23:FC:59:15:AB:37:46:BD:7E:72:A0
X509v3 Authority Key Identifier:
keyid:C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:21:a8:07:4b:b2:4c:20:06:ec:3d:f1:08:e3:51:25:d5:8d:
39:68:60:0e:ff:19:ff:88:a3:88:c0:49:f9:f7:ea:2d:99:30:
68:59:e1:bc:d2:e1:79:86:b8:62:39:e2:4d:f5:d1:4c:fe:a8:
0b:e2:1d:37:12:f3:a7:b8:21:8e:40:66:15:da:f9:fd:ef:fe:
0d:55:d9:c0:51:ba:c2:eb:27:e2:cf:59:dc:a6:a1:8c:3c:49:
ed:8a:e5:40:a5:33:6b:92:d9:90:6b:eb:e0:dc:5c:67:09:03:
8f:c1:02:06:2b:b9:2f:07:50:93:2f:a5:2f:f9:0d:bd:d8:c0:
b9:5f:3f:52:bf:8b:6e:d6:2d:2d:cc:d6:e2:67:0c:5c:4b:78:
11:b9:87:86:f2:58:e4:a9:01:f3:41:e8:e4:6a:10:e5:3a:c7:
98:5f:19:d5:dc:e7:50:01:91:82:42:31:25:9a:72:62:ee:9f:
a7:dc:59:4a:5f:04:e0:97:1f:0f:6f:1e:12:a3:c2:8f:08:8c:
5b:8c:51:18:4d:e0:08:26:84:e7:ee:dd:12:ae:4e:65:78:df:
17:46:e4:b4:11:1e:7a:cc:55:e4:21:c5:1b:b1:b8:59:54:bd:
fd:05:de:a3:64:55:f3:4f:37:a6:cb:2c:80:39:16:74:08:1b:
7e:9f:1d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:21:28 2026 by rpki-client