Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: 5+F4xcJU3aaAuXZOxOlM5gJGbAMef1sEyFFJEihPczM=
Subject key identifier: A6:B8:E9:E4:8E:40:28:95:4A:33:A3:0F:AC:68:CC:1A:7B:A4:C6:74
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 019F905A5C35CDCBAECC56DEBA9F65D65246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 0CA5
Signing time: Thu 23 Jul 2026 19:01:08 +0000
Manifest this update: Thu 23 Jul 2026 19:01:08 +0000
Manifest next update: Fri 24 Jul 2026 19:01:08 +0000
Files and hashes: 1: gLMBJkPbwcb-wlbRSTpyVXmPT60.roa (hash: /0bw3wAUn3OHzY+Itn4sRpP0s819h7VmmcBki8z1uGs=)
2: ivQFZHRMsvejyMfxqalTl6eZyTU.roa (hash: WA+GjW1Muidb5011AIHmuW7RcHYLCIXNLZLjL3+5V3I=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: uH6jr41ViAbSZYGNjBg9+NJZylt5ntmOYjOe9SvbKsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:5c:35:cd:cb:ae:cc:56:de:ba:9f:65:d6:52:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: Jul 23 19:01:08 2026 GMT
Not After : Jul 24 19:01:08 2026 GMT
Subject: CN=a6b8e9e48e4028954a33a30fac68cc1a7ba4c674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d7:a8:5d:9e:44:bb:61:61:9a:9c:d9:49:7f:
f5:f3:1e:f1:54:32:85:e8:98:f6:dc:ae:18:b9:26:
25:00:46:86:1d:e3:83:6b:2b:23:24:2c:a4:ab:75:
86:1b:5e:06:a5:90:fb:6f:d0:b4:27:91:28:2b:bd:
89:47:10:d5:eb:11:28:c9:d2:48:2c:30:0c:d8:68:
0f:05:89:ff:97:e3:86:c4:15:38:51:65:49:2c:36:
34:d5:62:59:2e:9c:b9:cb:97:81:4f:ec:00:73:a9:
34:a7:cf:ef:03:8b:34:aa:59:bc:72:ae:08:b1:34:
61:ff:f1:f3:8f:83:03:09:a5:84:7f:0a:ae:9f:ee:
7b:fa:98:dd:f0:2d:22:ba:7d:9d:40:a2:20:24:f6:
b5:cc:21:15:93:2f:85:fa:8e:99:92:62:3c:c6:e4:
4c:3b:ab:7e:03:3d:49:46:6c:63:e7:52:54:73:20:
06:53:4f:d5:76:bc:95:bc:34:af:be:ad:f1:6c:98:
28:29:09:39:67:01:b7:bc:31:18:bb:37:52:0f:2b:
a8:66:2f:d7:c8:b7:a8:64:98:a8:4f:99:de:f0:c0:
bc:26:f4:6e:cc:2e:ec:a5:f5:7c:65:0c:12:ca:3a:
12:3a:e8:ca:76:08:1d:df:1b:36:ab:2e:2a:d3:1f:
38:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B8:E9:E4:8E:40:28:95:4A:33:A3:0F:AC:68:CC:1A:7B:A4:C6:74
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:74:79:45:4a:f9:06:42:77:97:e8:3c:b5:bc:70:ff:5a:93:
c2:43:95:50:ad:55:86:46:1d:d7:71:5c:e2:a6:fb:5d:c8:18:
35:14:f8:da:20:44:d9:4a:eb:87:5e:14:b2:22:2b:4e:7c:f8:
bf:d3:80:8b:98:94:6d:2f:75:47:2a:98:37:75:f2:66:6e:db:
38:6b:63:2c:2c:fa:7e:a3:4c:46:2e:6d:b0:a7:e7:3a:c9:53:
ec:a1:be:c9:86:ac:10:19:ff:6e:71:e1:76:13:6b:ab:90:1f:
5b:fd:b4:95:3c:76:ff:ce:f1:5f:cc:10:22:97:9b:bd:e3:70:
f4:20:40:92:af:f3:07:f5:a6:72:01:84:ab:c1:ac:97:b9:cc:
bf:cb:7b:48:ee:c0:22:e5:93:f8:df:3d:40:95:5c:be:5f:e6:
da:a7:28:21:03:82:f5:d4:a9:88:76:87:13:33:72:eb:d2:81:
62:95:95:f1:81:14:d2:d7:20:32:dc:38:8f:95:7a:8e:85:80:
97:fd:1f:bf:14:71:43:37:0d:59:86:5d:f3:88:82:1e:1d:f5:
56:6f:60:78:e4:b1:59:bc:e6:05:91:c9:94:b8:49:2a:dc:46:
1f:48:65:d5:e4:9d:83:aa:67:f6:ca:7f:80:4a:5d:1e:ac:26:
14:ab:1b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:04 2026 by rpki-client