Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
File: _YGNk-aFcflcRevCgVmMfJjzJXc.mft (raw, json)
Hash identifier: nKWAQwyszqpRay/YMIehj1qu/ZVCj8Lyy2GCITUpnaE=
Subject key identifier: 69:6D:DA:1A:7B:B2:EB:E9:96:85:BB:81:0E:6F:3A:19:93:F9:E9:85
Authority key identifier: FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
Certificate issuer: /CN=fd818d93e68571f95c45ebc281598c7c98f32577
Certificate serial: 019F9059C6FA0869165D7128BD3882B56C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
Manifest number: 0DFE
Signing time: Thu 23 Jul 2026 19:00:30 +0000
Manifest this update: Thu 23 Jul 2026 19:00:30 +0000
Manifest next update: Fri 24 Jul 2026 19:00:30 +0000
Files and hashes: 1: _YGNk-aFcflcRevCgVmMfJjzJXc.crl (hash: RyrYY247r5XYkdJg8zdyXmB6NRwOdp3RwgMteyq1loc=)
2: loy4dq4keQGVVjd_GZNqzZEFuGk.roa (hash: xIPUz5Sh2e4Af6AHs7cOizEtdk/KROc6aaXyJduVd/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:c6:fa:08:69:16:5d:71:28:bd:38:82:b5:6c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd818d93e68571f95c45ebc281598c7c98f32577
Validity
Not Before: Jul 23 19:00:30 2026 GMT
Not After : Jul 24 19:00:30 2026 GMT
Subject: CN=696dda1a7bb2ebe99685bb810e6f3a1993f9e985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ae:0b:70:b2:cc:81:4d:43:76:3a:37:ef:56:
08:55:a3:c7:ac:79:da:7c:50:6d:dc:0a:12:e3:16:
35:02:46:b1:01:b2:e3:e8:cb:2b:22:d5:b9:94:13:
25:22:cf:39:c5:eb:fa:f6:c3:03:70:80:33:b2:0c:
79:43:81:2b:9c:9e:1c:e0:54:10:84:9c:b7:c9:e4:
3c:19:7d:f4:7a:b7:86:8e:5e:29:61:d5:0d:51:fd:
96:ea:86:0a:8c:b6:d0:3e:54:ee:db:a1:3a:72:df:
95:e2:de:be:79:2b:7a:63:27:3a:81:50:04:e4:b2:
4d:21:c3:c9:eb:a5:a5:08:93:97:e6:36:24:2d:a8:
e8:04:5c:9a:62:42:f5:31:25:19:9f:87:cc:a8:63:
8c:07:04:6c:d2:32:3e:8f:fe:63:72:2e:fe:cf:87:
be:d1:c2:b5:4b:56:eb:10:05:f9:56:e5:3e:07:87:
fa:3d:1b:f1:c5:da:98:9b:1c:6a:dd:85:11:21:f3:
5e:83:48:3c:0b:99:34:b7:f9:f6:2c:9a:a4:4f:1b:
2e:ee:1d:8c:73:5e:63:a8:ad:06:97:43:22:36:18:
f6:ad:32:0e:ab:59:fc:d7:b8:7a:99:4a:30:0a:38:
f9:7d:05:e6:ea:e3:88:43:2d:36:bf:3d:8c:c8:73:
04:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6D:DA:1A:7B:B2:EB:E9:96:85:BB:81:0E:6F:3A:19:93:F9:E9:85
X509v3 Authority Key Identifier:
keyid:FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:62:3d:30:00:da:94:05:4b:ed:7e:25:dc:cd:d5:37:10:be:
33:be:24:d2:23:fa:14:ca:e6:72:93:5c:bf:68:75:ba:dd:83:
18:b7:c1:2d:e4:7c:90:f1:b3:c6:ea:d5:23:f2:df:f6:76:f5:
af:b1:9d:9e:ee:37:92:eb:41:77:51:f9:8c:28:c9:ea:85:02:
0c:53:c5:7d:b0:6d:cc:e4:8e:3c:b5:98:51:ea:83:f0:cb:65:
4f:16:62:39:bf:a6:36:32:5d:b4:cc:43:37:4b:90:62:b7:e2:
40:83:0e:c6:89:6e:ee:7a:b0:6a:9f:93:c2:92:5f:08:23:28:
27:28:4f:fc:62:ee:33:bf:41:e4:51:5d:a5:fd:dc:49:77:4b:
fa:f5:a2:05:30:eb:30:b1:6e:3b:f7:8d:fc:6b:17:57:58:77:
6e:b8:88:57:eb:62:c2:df:67:f3:8a:b6:6f:4d:54:be:d8:cd:
85:23:6d:93:31:55:7f:cd:2d:85:ed:08:4b:b9:32:17:b0:c5:
85:36:9c:cd:83:5b:e6:23:be:77:6f:35:b1:66:0f:b6:7c:ca:
dd:ee:9f:f9:6b:b7:36:cd:d6:5a:99:0d:0f:de:32:21:71:37:
c3:dd:17:f9:0e:cd:2b:40:90:d3:fe:5b:c0:f2:bc:9a:a1:90:
91:46:c2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:46:19 2026 by rpki-client