Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier: aZ++tW8IvFoxBpKAQEY++ZzJEQUtcEyFRo7YRW6h2tY=
Subject key identifier: 96:A2:E7:7C:62:F2:5D:0A:50:6A:37:31:FE:38:9D:15:47:A3:9D:83
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial: 019F927F2613C2310A6422CEFC5FCDA60F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 05:00:34 +0000
Manifest this update: Fri 24 Jul 2026 05:00:34 +0000
Manifest next update: Sat 25 Jul 2026 05:00:34 +0000
Files and hashes: 1: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: kMMRdgXgXJZBE0nLsVaCNKsYyrfFgWaQT75pJJV4geE=)
2: zk24Xibi_69XM4miradQH_-zfVo.roa (hash: 8vWhGhRcVD9hGye0zCP9w/L6uhcw5ZBizDAK5O4GtQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:26:13:c2:31:0a:64:22:ce:fc:5f:cd:a6:0f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
Validity
Not Before: Jul 24 05:00:34 2026 GMT
Not After : Jul 25 05:00:34 2026 GMT
Subject: CN=96a2e77c62f25d0a506a3731fe389d1547a39d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:b9:2f:cd:16:fa:dd:70:d9:24:e4:2b:c5:
9f:4e:8f:73:b6:ca:28:1a:dd:d6:f7:6c:6c:de:f2:
82:8b:dd:42:2f:7a:c2:b7:e5:32:ad:2f:24:7f:d8:
ac:6e:75:e8:af:20:51:16:aa:07:4d:20:27:a3:e3:
7d:e0:23:ab:f8:4b:72:b8:e9:54:e6:48:e5:45:f9:
79:84:e2:2d:fe:d9:9e:12:21:7f:94:d8:67:1b:44:
1d:81:db:0c:2e:5e:a2:e4:46:b9:19:a3:f0:11:45:
31:4a:59:f1:fe:fd:b0:67:3a:ba:4d:93:70:10:53:
37:04:67:65:e6:7d:b3:17:ca:a0:c0:d0:92:5c:1d:
a4:f9:fa:d3:26:6f:2f:96:35:19:90:4f:4c:e9:7f:
08:63:54:ed:2b:ed:f2:28:e7:0c:5e:56:7f:9d:3e:
97:1c:1b:19:c5:47:6b:6a:2f:f3:4b:49:60:40:19:
36:28:b3:29:84:cb:36:46:68:5b:5b:6f:b8:a4:e4:
18:e2:70:8e:86:9b:4c:28:c7:29:d0:c8:21:40:c0:
76:12:9f:4d:55:17:48:0c:15:14:92:c4:96:30:13:
98:b4:35:4a:af:72:66:30:cf:1b:06:c6:55:af:f0:
ff:5a:ef:0c:37:9c:5d:50:d6:9c:83:f0:92:30:1c:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A2:E7:7C:62:F2:5D:0A:50:6A:37:31:FE:38:9D:15:47:A3:9D:83
X509v3 Authority Key Identifier:
keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:cb:14:03:48:e7:d2:e7:8f:77:33:93:6e:6f:81:76:1b:fc:
d3:b2:33:ae:f2:80:00:ab:7f:49:87:b7:14:d4:b0:18:03:3c:
8e:d3:4e:90:11:c0:25:af:b9:38:36:cb:bf:49:f0:04:41:8c:
da:3a:0e:27:df:88:86:08:a7:ab:3a:56:97:96:bf:ee:d1:49:
d2:d5:f7:a2:66:2d:d4:3a:3a:22:46:f5:b0:12:84:3e:50:3a:
3f:d4:d2:63:ec:ca:6f:f7:c7:d2:9d:67:05:8d:02:a2:56:16:
49:6a:f6:b6:89:02:1c:66:30:71:44:6e:1b:e9:c2:5e:03:77:
f0:26:d1:e1:71:f1:3b:64:4c:84:b7:dc:96:4d:fa:95:f3:d4:
ba:c4:ce:17:e6:f5:b2:26:e1:1b:99:ac:2d:d3:87:cd:e6:3a:
2e:a7:ce:75:bf:a6:bd:a9:ad:86:26:fd:08:9a:77:41:1a:4d:
51:29:ed:d0:93:9b:7a:93:c6:3f:b8:30:d4:e5:bc:79:a8:e4:
34:b5:72:1f:32:9a:d5:42:40:f8:14:56:ed:bb:c5:de:1e:d7:
bb:ec:b0:6c:2c:7b:50:cc:26:21:de:28:1e:ad:09:20:ee:1d:
7b:3a:3d:e8:91:ec:8f:72:c5:e6:35:7f:28:35:99:bd:21:06:
35:77:90:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:03:36 2026 by rpki-client