Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
File: 1-YoC0gxrfeNXEl84sXNcobkfh7M.mft (raw, json)
Hash identifier: +E1QblmvZX5VIwh9JlO+w8HiOFSIiJYHuzKlXrsj4X4=
Subject key identifier: 59:CD:52:29:1C:FE:09:2F:C0:82:AC:86:5C:06:9F:79:E7:49:41:A2
Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
Certificate issuer: /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Certificate serial: 019F90C772F610C29A3CC444951B3669E720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
Manifest number: 17AD
Signing time: Thu 23 Jul 2026 21:00:17 +0000
Manifest this update: Thu 23 Jul 2026 21:00:17 +0000
Manifest next update: Fri 24 Jul 2026 21:00:17 +0000
Files and hashes: 1: 1-YoC0gxrfeNXEl84sXNcobkfh7M.crl (hash: Pajg0ZV0ZWQeEOhzmTgDS39MjDtJ+ZOsPUeEBzFEv8U=)
2: RB5RbNlzRrb86Q06Ud7SSxD--CQ.roa (hash: QgnbMUj23g9e+onnvipNTDHyLiE4Irsi1X62S6yWUWU=)
3: RSVz78TcKbJ_MD2cXbiNpiqEht8.roa (hash: Kfj8dlgOkrkqzxLNOoYn0mrD7CiBslCwzAqLBRZZ8qg=)
4: VNWZz5w67dWdq-1tiXTZUwje9aI.roa (hash: CCl3JeV4fnIeVXFy/sDyCJUN2cZ+asTf5jw5AL/GHMo=)
5: lsF9aarhfVrWYAYvkAQqJ9HkY7E.roa (hash: FCxsh7JN5PbgfVu6BkJdT2PXO8vqzwg3TmeMEKVCTFw=)
6: o8qBYm0XB-DKW0l9z4LxLJjVMt8.roa (hash: 6+/jpm9f+1fc/q145oBtk8Pmiq4grW2fLOR+zKT6VOc=)
7: vwVgz0AlWqP316EcZY-4ylK0yIA.roa (hash: FuDRoo1XnKDsM6Yjjqt7YCB9VBp4VwF44kzWhYXP7o4=)
8: yxG_U6JQIIcrFpALA3Q0FlRxRRM.roa (hash: sCR0T+FP+eVmMckcKFXbsL8e1kdYc/sg61tKHkiV1Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:72:f6:10:c2:9a:3c:c4:44:95:1b:36:69:e7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Validity
Not Before: Jul 23 21:00:17 2026 GMT
Not After : Jul 24 21:00:17 2026 GMT
Subject: CN=59cd52291cfe092fc082ac865c069f79e74941a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0e:f6:b0:64:3a:d8:fb:33:c0:4e:ce:01:2c:
23:c8:4e:f0:ac:a9:d0:a2:88:96:1d:b9:02:77:df:
d1:95:1a:4b:d1:b6:de:0d:30:d9:29:f2:97:ca:78:
98:b6:00:f9:50:1c:f0:06:ee:74:ae:93:a7:f6:f2:
61:fa:78:c3:82:5d:32:df:ba:35:fc:d7:7f:8c:26:
4f:f0:25:b7:f8:18:f6:48:7e:f9:cb:b9:eb:0e:78:
18:28:7b:3e:57:d6:92:07:91:a5:0f:b8:fa:b2:f5:
18:98:4c:6b:a2:14:5b:66:62:6c:fb:8c:1b:13:31:
6b:97:b7:85:10:cb:97:4d:29:6c:17:ae:e5:2a:26:
38:89:c1:cd:fb:cf:c5:6c:bb:1f:53:77:99:c6:6d:
fc:76:1c:92:61:74:bc:30:7a:cf:78:33:7a:6f:38:
a3:18:b5:de:58:2a:78:72:3e:f8:ce:f7:bb:26:17:
57:92:29:48:a2:fe:0e:98:a6:8e:74:db:c9:56:91:
f7:34:54:29:fe:04:a7:ce:6e:8d:06:e0:3e:94:e1:
85:64:11:3b:35:35:74:47:00:53:b6:0e:d7:37:bf:
68:67:4e:61:90:22:d0:00:9b:f8:77:c1:7d:6e:a5:
da:f6:d0:b8:05:0e:66:da:c6:44:b3:58:6d:5b:5b:
91:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CD:52:29:1C:FE:09:2F:C0:82:AC:86:5C:06:9F:79:E7:49:41:A2
X509v3 Authority Key Identifier:
keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1b:ce:ae:d7:a5:9a:3a:c4:fb:68:7a:4f:e2:a1:41:d4:35:
39:64:eb:ab:c3:dd:35:6b:79:c2:88:b9:df:c9:81:6b:56:47:
ab:7f:f9:eb:f7:1f:4e:ab:fe:19:9a:94:58:50:02:b4:cd:92:
13:3c:ff:c8:f4:b1:4d:87:ff:3b:13:45:18:d8:dd:7a:2e:cb:
c1:3f:ec:1c:6d:82:11:55:6a:7f:d8:b2:a1:d7:2b:fa:d8:ff:
eb:84:20:d7:5d:0a:71:0a:bf:f3:66:d6:d6:e3:dd:5e:ba:08:
01:72:a2:f3:cb:77:cf:2e:02:2c:81:8c:b3:38:65:30:2e:f5:
c7:45:07:30:29:9d:15:cd:cd:43:31:c7:a6:f2:d5:c9:18:b2:
06:dd:c4:47:d8:9d:2d:42:20:72:51:fd:35:4a:cd:9e:c0:44:
3f:85:5c:ad:0e:ba:e9:ad:26:e2:0e:2a:2a:17:48:c8:05:59:
6e:cb:6d:15:93:5e:88:4d:81:4c:67:60:c6:12:f8:c5:4c:b7:
ae:ac:41:fa:11:b4:da:65:f5:20:c2:6b:29:66:20:bc:26:1d:
6c:62:df:14:f8:55:01:ae:52:ce:1f:b3:c8:47:1c:5f:5f:fd:
35:5a:58:b0:a4:ac:0f:16:3d:06:1f:68:1b:bd:3e:70:5f:79:
a9:ab:fd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:27 2026 by rpki-client