
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
File: YRs47qO8cHP29KpNIe1BNmXXyic.mft (raw, json)
Hash identifier: vfkGE6kXfdxv86pAGCgxHzQWf+gTlpm/uQISbQw0aEY=
Subject key identifier: DF:DD:C2:05:92:26:D1:77:6C:F3:C6:B0:77:8B:85:59:72:F3:AB:4F
Authority key identifier: 61:1B:38:EE:A3:BC:70:73:F6:F4:AA:4D:21:ED:41:36:65:D7:CA:27
Certificate issuer: /CN=611b38eea3bc7073f6f4aa4d21ed413665d7ca27
Certificate serial: 019F8F7F81E5CE7CA604BA4481A7DB05A304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
Manifest number: 30
Signing time: Thu 23 Jul 2026 15:02:05 +0000
Manifest this update: Thu 23 Jul 2026 15:02:05 +0000
Manifest next update: Fri 24 Jul 2026 15:02:05 +0000
Files and hashes: 1: TcaCPZlW9b7nUjd0B-e1yd0zAE8.asa (hash: Oy2UJlXOZ8xOLUsWDNeaDlW0wd+hjDN8NHEzf1/ZIt0=)
2: YRs47qO8cHP29KpNIe1BNmXXyic.crl (hash: IilrCJ2a3jD9ChmAwXtNr6qcI3auCuTPaUiYyC1nZZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:81:e5:ce:7c:a6:04:ba:44:81:a7:db:05:a3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611b38eea3bc7073f6f4aa4d21ed413665d7ca27
Validity
Not Before: Jul 23 15:02:05 2026 GMT
Not After : Jul 24 15:02:05 2026 GMT
Subject: CN=dfddc2059226d1776cf3c6b0778b855972f3ab4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ca:9f:54:12:44:eb:8c:1a:f3:1d:3e:b4:03:
fe:5f:f6:0f:e3:2b:9c:05:5e:54:bd:76:39:37:24:
83:51:d9:bb:72:ed:54:55:13:81:1d:81:32:4c:a9:
ab:b2:1d:36:b1:b5:5e:e4:bf:d6:e0:93:f6:07:ad:
fd:08:dc:85:12:85:46:dd:20:af:30:9c:74:45:35:
92:bb:50:d7:10:a4:c4:60:d8:59:59:1f:ea:14:a6:
5f:f1:4b:fd:b8:90:2c:17:04:86:4c:5e:a8:e8:36:
dd:49:81:c1:03:e6:82:dc:fd:b4:51:2a:34:16:9c:
58:fb:97:e7:d5:e8:38:1a:a5:f1:15:bd:4a:ec:64:
c2:ea:53:1f:f0:da:8d:f0:2e:35:ba:0b:c2:0a:35:
67:11:f1:08:d0:77:ef:3e:ce:2a:fa:51:06:0e:1f:
81:df:4f:4c:d0:6a:e3:e1:eb:83:d0:98:f0:59:d4:
fe:e6:2c:a3:37:1f:55:5f:a5:ff:3f:b5:7e:e3:f3:
2f:20:29:1c:69:5b:c6:85:20:7c:3e:4a:a5:2d:1a:
02:62:28:27:da:d2:1c:ea:10:d3:2b:a9:6b:53:b9:
0a:a0:c6:7e:9e:20:c3:eb:ae:b9:86:ec:c4:55:85:
26:eb:bc:fd:54:c0:cc:a3:d4:7d:05:44:8b:0d:e5:
43:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DD:C2:05:92:26:D1:77:6C:F3:C6:B0:77:8B:85:59:72:F3:AB:4F
X509v3 Authority Key Identifier:
keyid:61:1B:38:EE:A3:BC:70:73:F6:F4:AA:4D:21:ED:41:36:65:D7:CA:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:cc:05:ba:10:2a:dc:39:43:21:aa:bd:7d:87:ce:cd:3d:c8:
cd:99:28:36:64:95:a9:bb:3c:3a:f5:ff:72:bf:91:d8:53:a9:
41:02:d1:e8:9e:1b:a8:94:54:df:4e:6e:b1:dd:50:33:a2:6b:
14:ec:74:52:12:20:cb:df:5b:7d:cf:f3:70:b3:af:37:9e:27:
af:30:20:11:19:08:c9:44:06:5f:74:f6:70:b6:4f:6f:48:63:
2e:e1:ef:e0:7c:9a:0a:b1:af:10:e9:e0:fe:cb:21:dd:f5:a3:
84:47:0d:67:b1:a9:08:cd:de:91:ae:10:9e:65:fe:a9:82:f4:
49:0a:1b:cb:b7:29:10:9d:01:be:3f:20:ac:71:6c:89:39:64:
21:16:b8:1b:c7:0a:01:01:ef:a2:fe:4c:0b:06:7e:8d:09:69:
f8:95:14:f5:94:63:04:ec:2b:cb:e1:92:d7:54:1f:31:cb:b5:
10:16:86:83:1f:55:46:19:3e:8a:01:9f:c4:91:bf:90:a9:b1:
54:c7:41:1e:5e:24:ee:06:c9:99:ff:f3:c7:d8:78:ed:85:1e:
75:ca:f5:ae:bc:22:f4:1f:22:e7:ac:1a:5e:0d:26:ab:51:b4:
36:2b:00:96:03:11:e1:9b:89:ed:1d:b3:1a:70:30:bb:5e:b2:
23:8e:de:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:06:52 2026 by rpki-client