Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
File: yGjKghR-0id7S8xppShbrnNfLkQ.mft (raw, json)
Hash identifier: DvE/XIg2L6GQByQzX1NOid7uK6HQAkaB8cnWYvUiy2g=
Subject key identifier: 69:D7:79:9F:4C:08:38:D0:59:B2:99:98:9B:1B:93:D0:FE:F3:E8:71
Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
Certificate issuer: /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Certificate serial: 019F91DAECC82B1339DE1FB27392CC43C314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
Manifest number: 19E7
Signing time: Fri 24 Jul 2026 02:01:11 +0000
Manifest this update: Fri 24 Jul 2026 02:01:11 +0000
Manifest next update: Sat 25 Jul 2026 02:01:11 +0000
Files and hashes: 1: CpcMl2eeE4kivr7Y_KcbhMBQkho.roa (hash: 3J5pbfw99fV9VldJRwXaEGP1Raiiwe48ExCYD8L4uko=)
2: gECFr_lCurPKmYUZbnBME6fDRJI.roa (hash: zPv5BFtY7ZttrJvpLgH3TkAwwjvJ39/Ya/LcQ77bi7A=)
3: yGjKghR-0id7S8xppShbrnNfLkQ.crl (hash: 9OagwtVhGy2sPAZNtavzaWDCaC436pScJgVsVvgS2MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:ec:c8:2b:13:39:de:1f:b2:73:92:cc:43:c3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Validity
Not Before: Jul 24 02:01:11 2026 GMT
Not After : Jul 25 02:01:11 2026 GMT
Subject: CN=69d7799f4c0838d059b299989b1b93d0fef3e871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:bc:6c:c2:c4:3c:2a:90:cb:3b:4e:9e:20:
ce:86:4f:f8:52:b6:c0:9e:a6:77:e9:5a:a1:1d:16:
28:cf:c7:2f:6a:46:bb:0e:16:b6:83:dd:75:ec:8a:
32:e6:e7:36:26:cc:fd:ca:40:cc:31:c0:85:6a:b2:
da:c2:da:74:f3:93:07:2e:dc:e4:a2:38:33:e1:f9:
75:d8:a6:6a:90:35:45:24:c2:bb:c6:29:38:3f:c2:
83:5f:4c:2e:ed:fb:2f:9e:f0:68:d3:b5:7c:5d:b8:
13:2a:c5:d7:6d:b0:0a:d9:5c:60:1d:e8:d1:c4:af:
d3:c6:b7:b8:e7:74:83:c2:95:f6:f8:66:69:6c:98:
1d:68:1d:ae:b7:38:de:3b:f0:9b:be:5e:df:8a:52:
1c:97:61:9f:0f:3d:e8:79:05:d3:47:71:c8:47:e4:
27:32:b0:f7:c4:3f:50:5e:10:0a:b5:30:45:2e:24:
08:f5:69:cc:29:80:bc:c4:72:49:2b:3f:12:52:62:
80:fa:92:57:e2:df:36:7d:70:88:1a:e7:8a:b0:ca:
b0:6d:c8:6a:0b:84:68:c6:ee:39:45:2c:36:7c:87:
a8:e2:c9:58:f4:14:cb:04:c0:1c:b8:9e:15:cd:1a:
7d:82:a4:70:e1:be:66:06:de:61:04:d1:76:be:1e:
38:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D7:79:9F:4C:08:38:D0:59:B2:99:98:9B:1B:93:D0:FE:F3:E8:71
X509v3 Authority Key Identifier:
keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:06:55:7f:a3:d6:cf:07:30:1e:da:aa:2d:62:0d:b1:dc:83:
4f:e0:1b:35:ca:f0:2b:2a:9f:37:8a:b2:d5:bd:c5:83:d6:82:
3c:e1:77:f0:ed:3e:e7:e0:ab:95:3e:5e:77:4f:12:a1:22:06:
fc:33:a2:2a:ce:84:81:df:06:9e:e0:87:ab:69:34:04:19:3b:
d2:18:7a:03:3d:70:27:5d:ff:18:7a:bd:07:cc:b3:25:c3:d6:
ee:94:34:e9:a8:bd:60:ff:d0:ff:e5:1a:8b:7b:54:cb:19:dd:
16:b8:2a:4e:70:e5:a6:d7:3e:5c:09:3a:24:b8:5c:ae:c2:78:
2b:bb:60:45:92:4a:8e:25:a7:27:04:dc:c6:78:8e:fa:aa:62:
6b:1b:10:47:57:85:12:f4:72:a8:5a:22:7c:10:fe:9a:a3:77:
4d:dd:93:ec:0c:25:90:27:d6:2f:37:bf:0a:30:6e:8c:e1:db:
19:d5:a3:a0:9e:5e:77:a3:0b:08:cd:74:fd:d5:2b:cc:26:a9:
f3:82:a9:96:a5:a9:77:e1:3e:cd:40:0f:2d:7d:aa:14:c4:1a:
21:b4:3c:e7:d5:8d:54:00:ca:b4:a8:87:e1:a2:60:c7:95:4e:
86:5f:db:30:cc:2f:2e:e8:b2:4b:e2:6b:e1:5b:dc:4e:e0:e5:
55:74:95:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:08:42 2026 by rpki-client