Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
File: ylF4miMTWsImjCKihWAKX5sFN3A.mft (raw, json)
Hash identifier: AJT+u13ZYdLO/5W/pRVxr7tt4AhyZNkVcJywlusAwas=
Subject key identifier: 91:5F:2D:3E:B8:54:EB:D7:87:E8:B7:30:3E:B0:9D:FC:79:63:30:4E
Authority key identifier: CA:51:78:9A:23:13:5A:C2:26:8C:22:A2:85:60:0A:5F:9B:05:37:70
Certificate issuer: /CN=ca51789a23135ac2268c22a285600a5f9b053770
Certificate serial: 019F90FEF8FFC06C6179E9EF53362E2B1C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
Manifest number: 152E
Signing time: Thu 23 Jul 2026 22:00:56 +0000
Manifest this update: Thu 23 Jul 2026 22:00:56 +0000
Manifest next update: Fri 24 Jul 2026 22:00:56 +0000
Files and hashes: 1: sr2F0zsExdSQr-zgnrk17i9FhUg.roa (hash: hKUfnAYzGISD3itupUfCkChJsvs636FejLl9Oqr8aQA=)
2: ylF4miMTWsImjCKihWAKX5sFN3A.crl (hash: tiYFmdgnxgi0vYUiZfCzSkN0akYv9Y5/1WeDqnr/Omk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:f8:ff:c0:6c:61:79:e9:ef:53:36:2e:2b:1c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca51789a23135ac2268c22a285600a5f9b053770
Validity
Not Before: Jul 23 22:00:56 2026 GMT
Not After : Jul 24 22:00:56 2026 GMT
Subject: CN=915f2d3eb854ebd787e8b7303eb09dfc7963304e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:cb:0d:16:be:0d:2c:32:26:2d:95:31:78:
88:c8:b7:21:01:1e:5d:06:6e:c4:5a:ce:3f:b1:b7:
ce:1e:9c:2b:03:c8:40:83:33:a2:41:d6:37:a8:35:
c5:d4:b8:5d:ce:23:ff:41:70:1d:5b:64:99:fd:7a:
25:c7:4f:aa:02:6c:2c:df:59:41:f2:92:6b:78:00:
cd:30:33:38:00:d7:89:e9:fd:35:24:d4:1f:d4:e4:
a0:71:21:0e:a6:01:f6:7e:99:a1:7b:7c:3b:cf:0f:
f3:c0:51:bd:62:07:b1:7e:33:1d:fe:5a:89:4c:55:
04:30:d8:ec:da:e3:db:23:06:94:1e:90:0d:1e:ad:
09:76:c2:18:67:43:d1:72:fb:b0:90:7b:c9:c9:88:
22:e2:47:43:13:32:6c:4e:fd:e8:0b:75:9b:de:47:
13:fc:62:2e:55:ea:67:c2:1e:6b:4d:65:ca:ac:20:
46:9a:b3:0c:67:1a:7c:d6:62:44:8d:0f:e0:e8:90:
b3:eb:65:37:6b:97:a9:05:87:f5:46:47:c0:a4:8e:
af:23:18:3f:57:58:80:0e:de:40:2f:6e:4f:ee:54:
95:38:d1:14:be:17:88:2f:b5:d1:40:ac:76:e8:9c:
b1:da:8d:e7:f0:c7:0a:0f:d1:d7:c4:12:ce:7f:f8:
f6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5F:2D:3E:B8:54:EB:D7:87:E8:B7:30:3E:B0:9D:FC:79:63:30:4E
X509v3 Authority Key Identifier:
keyid:CA:51:78:9A:23:13:5A:C2:26:8C:22:A2:85:60:0A:5F:9B:05:37:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f7:7a:ed:ac:c3:12:12:41:59:4f:2c:6b:e8:a2:6b:9e:32:
86:bf:34:a3:16:66:65:0a:4d:98:f6:70:a1:cf:f2:cb:04:1a:
06:91:4e:37:fa:4d:85:39:da:63:6d:64:98:76:67:62:46:7f:
e1:ee:4d:3f:31:86:e4:76:c6:a6:a6:19:99:4e:94:1c:25:81:
19:6a:02:00:81:df:62:de:30:48:d5:16:6c:00:4a:f5:17:00:
0e:47:57:ec:94:7a:ef:73:7a:35:26:7c:26:5b:20:a3:d4:f5:
d8:b6:56:24:74:fa:3b:1c:27:a9:89:85:4a:e1:cc:a8:8d:85:
f4:c3:1b:d1:b0:fa:e2:4a:ce:38:d6:21:d7:3a:d3:59:c9:d0:
ea:b3:46:4d:02:96:30:6f:a3:fd:40:56:7d:6d:d4:47:39:0f:
13:a7:95:a0:54:59:fe:6e:8f:42:bd:7f:a6:c9:d4:90:0e:69:
9c:9a:46:38:96:bd:3c:f6:42:46:cb:04:83:62:0c:8e:78:42:
5e:13:bb:32:37:9a:21:1c:f7:f3:32:f2:a8:25:02:96:d3:42:
b3:76:60:13:8c:26:85:9e:32:d8:6f:32:86:96:85:a3:db:22:
73:5a:d7:3f:97:22:26:ac:c7:73:b1:c6:0d:f1:c1:9c:59:bc:
30:e5:1c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:22:26 2026 by rpki-client