Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
File: YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft (raw, json)
Hash identifier: zRlRsJQegi9GzqozKaHWIsR8Owyk211aMyNnDYEWPeE=
Subject key identifier: 70:37:56:E8:DF:BF:E5:9B:AE:9B:3D:38:E4:05:43:2C:45:AF:6E:73
Authority key identifier: 62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
Certificate issuer: /CN=62719c6d8b9950378a7489315fb078111a18ad55
Certificate serial: 019E1F119BBE33355CCDB51378A38C8C28FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
Manifest number: 0221
Signing time: Wed 13 May 2026 02:01:48 +0000
Manifest this update: Wed 13 May 2026 02:01:48 +0000
Manifest next update: Thu 14 May 2026 02:01:48 +0000
Files and hashes: 1: 2iC8kbXKFjWmx_dbdVyppAM0-6Y.roa (hash: tmWp7mxjB9vdgjX2gtWUKioc5qEfAmveNcok4dIUQAo=)
2: GRea9lk1vceom4TFm3UHffkyQH8.roa (hash: 7sx9fKJ6zSwa6txM9tmVfdAR/9hActQM7paLbf+Thbw=)
3: YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl (hash: 9wmh+uS4KMU8E/r6a4GCiF9d025tUFvyuQpiFk0ji7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:9b:be:33:35:5c:cd:b5:13:78:a3:8c:8c:28:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62719c6d8b9950378a7489315fb078111a18ad55
Validity
Not Before: May 13 02:01:48 2026 GMT
Not After : May 14 02:01:48 2026 GMT
Subject: CN=703756e8dfbfe59bae9b3d38e405432c45af6e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a3:b3:ca:5c:4e:3d:92:55:64:0d:97:c1:4e:
ed:26:a8:61:01:8b:56:4a:b1:4b:f4:4a:0a:fa:9c:
77:ad:b3:6b:63:05:ca:b6:e5:24:81:5a:e7:0b:70:
31:44:54:38:e5:97:c2:46:36:d1:fa:28:b6:f4:b2:
a7:8a:97:05:d9:82:ff:23:a8:b5:b9:d2:ba:21:c3:
fe:0f:d7:32:e3:86:e0:2f:40:e5:24:8f:7d:ea:a7:
55:83:61:0d:58:b9:71:62:c6:85:10:d7:87:ae:30:
64:38:cd:a0:bf:9f:06:ee:59:83:95:c6:da:3b:3f:
ae:51:e6:04:54:be:51:01:15:b6:4a:57:30:67:29:
8c:ff:16:6e:12:89:35:14:a1:75:9a:b6:22:22:65:
49:4a:a6:80:41:e7:9e:2a:91:ba:b4:cf:74:90:4a:
74:1e:1a:84:15:f0:2a:87:b0:40:b1:8b:aa:6d:0d:
52:c4:b8:cd:96:b7:32:0b:84:50:f3:82:99:ba:4f:
81:05:4f:cc:f3:b9:4d:34:1c:8a:5c:49:3b:4a:68:
31:3f:5c:12:e4:97:2a:0f:55:57:38:e4:6b:ef:80:
3c:c7:76:d0:13:dd:26:ed:34:a2:96:7f:c5:1d:52:
14:5a:25:0f:6b:b3:79:45:2f:8f:94:6d:8a:81:2a:
48:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:37:56:E8:DF:BF:E5:9B:AE:9B:3D:38:E4:05:43:2C:45:AF:6E:73
X509v3 Authority Key Identifier:
keyid:62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:29:6e:7a:20:49:8b:03:43:74:2b:3b:fe:43:28:39:5b:ae:
41:90:2e:bb:fe:0e:2d:e1:0b:66:6b:b9:48:d3:c5:68:f1:34:
2c:a6:36:7c:09:5f:34:4e:5a:8f:dc:70:37:c4:1b:b7:79:c7:
15:cd:65:b0:a5:52:68:05:7a:b2:51:40:94:4a:dd:93:c4:e0:
2c:d0:d5:75:6a:49:9f:e5:c9:cc:98:79:12:7b:ce:f5:b6:0d:
cb:4a:8a:65:0e:0a:b9:04:e3:10:90:62:31:7f:1e:b9:bb:f8:
41:93:d0:be:f3:31:25:3e:8a:9b:01:43:b5:79:b6:04:2c:68:
8c:6a:2c:73:20:98:df:b3:a1:6e:ce:b7:7d:6d:30:c2:14:07:
4b:08:96:ef:a4:56:a8:27:31:4f:f1:1d:19:97:97:a5:f8:d5:
2b:c6:fc:01:be:f6:31:14:ee:ba:16:a5:f9:85:49:14:f6:2a:
d3:a7:af:76:f8:6e:79:4a:de:5b:d7:48:83:81:fc:4f:f2:fd:
ce:90:80:87:d5:17:3f:bf:b2:67:ec:42:e2:6e:62:65:06:63:
a6:43:f0:a4:51:4b:73:a7:52:18:c5:10:24:87:25:38:88:d6:
fb:92:48:8a:04:8a:71:07:7b:a5:ec:13:f9:aa:28:06:2a:e8:
a5:60:fd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:32:12 2026 by rpki-client