Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
File: YblVGO1PVYKi9sEZVXQChLwIgTQ.mft (raw, json)
Hash identifier: xRKknCbVtEugy0YG2HkspLy0Q9b3muQirtquTu7zcXA=
Subject key identifier: E0:E3:2F:48:E2:03:0F:2F:1B:5A:40:14:FB:EF:6F:A6:20:93:83:04
Authority key identifier: 61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
Certificate issuer: /CN=61b95518ed4f5582a2f6c11955740284bc088134
Certificate serial: 019F93245D0FAAE6001D59E6A9F48DC16AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
Manifest number: 0A47
Signing time: Fri 24 Jul 2026 08:01:01 +0000
Manifest this update: Fri 24 Jul 2026 08:01:01 +0000
Manifest next update: Sat 25 Jul 2026 08:01:01 +0000
Files and hashes: 1: 4415GxEj-TYr3AidYcdJ8bhsDy8.roa (hash: cE5GPiOmnznkFTHE5XfxrOsWeoTa87SB/CFxhnlAtck=)
2: YblVGO1PVYKi9sEZVXQChLwIgTQ.crl (hash: 0cNP1/55HgXzV8V4nmMHpfqetD0eOXiKG4QntR1b5xw=)
3: srScoHZHreZzDWYRIo7iP-u_x8Y.roa (hash: syyRqwaOL9wW0OZYlgbcE8bN1oO5RyfUQlIa0YfUs5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:5d:0f:aa:e6:00:1d:59:e6:a9:f4:8d:c1:6a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b95518ed4f5582a2f6c11955740284bc088134
Validity
Not Before: Jul 24 08:01:01 2026 GMT
Not After : Jul 25 08:01:01 2026 GMT
Subject: CN=e0e32f48e2030f2f1b5a4014fbef6fa620938304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d0:fc:c7:bf:43:95:19:48:70:40:66:15:33:
fb:07:f5:da:52:af:c1:90:60:8f:09:a0:21:db:84:
90:0f:67:18:fb:9d:46:1e:95:42:19:02:40:07:0f:
86:e7:18:ea:be:01:ad:50:17:2e:92:0e:f6:85:4b:
2c:46:80:d1:e6:2e:33:1c:38:43:ac:4b:ce:05:4f:
cc:42:98:cc:ea:92:59:70:37:07:c2:be:b7:73:85:
59:a4:84:e1:b3:31:ea:cb:c1:66:98:3b:7c:e0:9d:
b7:51:cb:d4:5c:98:2c:ba:cb:8b:c4:1c:0b:80:bd:
26:fd:45:bc:33:fe:be:18:c5:f3:13:39:56:ea:ea:
4e:99:d4:f4:ff:93:76:f9:76:d3:8d:4c:70:cd:d8:
0f:e6:a6:e2:8a:5c:2f:17:a7:44:2b:39:b5:2c:7e:
88:2d:55:8c:c5:f6:0f:24:7f:77:33:d9:6f:92:9b:
d2:37:82:a4:c9:7a:17:e4:5c:85:a9:54:81:43:d9:
99:1e:5d:9f:49:17:63:63:cb:12:57:91:37:3f:75:
65:f7:af:9f:cd:57:0c:5d:b3:11:1b:cf:e6:f6:fb:
93:5c:f2:69:92:7b:87:9e:d8:2d:81:91:8d:b1:21:
f4:74:cb:a2:7e:2a:77:64:4a:63:5c:6c:03:1e:94:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E3:2F:48:E2:03:0F:2F:1B:5A:40:14:FB:EF:6F:A6:20:93:83:04
X509v3 Authority Key Identifier:
keyid:61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2a:1e:33:e7:46:2f:ea:62:60:4d:b9:e5:e5:66:9b:06:8d:
3b:04:cb:d0:2e:8e:37:5b:1f:13:dd:19:71:dc:f6:fb:c8:e0:
59:3d:12:9a:c3:59:3e:b7:46:09:b4:26:a6:b3:16:f4:2e:13:
4b:36:e7:b0:2f:ca:39:05:01:91:65:e2:64:77:85:d4:17:53:
c8:7e:45:5d:63:9c:e9:4f:99:1d:2b:c8:15:2d:3f:f2:cf:46:
1c:05:41:0f:44:e4:ba:f7:e5:eb:ab:d6:35:eb:d8:da:82:77:
69:70:7a:9e:71:4b:e0:32:50:c4:37:7a:2f:64:b3:ab:93:12:
67:a4:19:89:f1:ce:de:62:2e:e9:ff:56:2c:d1:5c:54:96:68:
f4:da:42:23:b4:0c:0c:35:72:0f:8b:fd:40:f4:1c:6a:e5:80:
9a:b3:d7:11:02:7f:9a:4c:87:1e:57:d3:f6:df:14:63:5d:0c:
d9:2e:4b:21:28:53:55:8d:83:3d:9e:9b:64:86:2b:f2:7a:e4:
5b:19:49:c8:bb:5b:00:4d:de:3d:73:6c:9f:29:f4:a2:d2:be:
6a:d2:9e:8a:fb:ef:dd:22:2a:3d:2c:95:78:e1:ae:98:5d:dc:
7d:0e:90:f9:e6:dd:7f:c5:af:cf:12:54:7b:25:c1:b9:78:bf:
b7:86:6a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:08 2026 by rpki-client