Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
File: YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft (raw, json)
Hash identifier: 3AScDc+cfkQ3Zb3P8dDqrNeuChnPPCqgo98IZOCiOLc=
Subject key identifier: 4C:D0:B6:4F:17:89:80:76:DE:95:B5:AF:FB:9B:B9:C7:28:A2:75:93
Authority key identifier: 62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
Certificate issuer: /CN=62719c6d8b9950378a7489315fb078111a18ad55
Certificate serial: 019F91DA51657B5FA0B85267B003B919B12D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
Manifest number: 02E1
Signing time: Fri 24 Jul 2026 02:00:31 +0000
Manifest this update: Fri 24 Jul 2026 02:00:31 +0000
Manifest next update: Sat 25 Jul 2026 02:00:31 +0000
Files and hashes: 1: 2iC8kbXKFjWmx_dbdVyppAM0-6Y.roa (hash: tmWp7mxjB9vdgjX2gtWUKioc5qEfAmveNcok4dIUQAo=)
2: GRea9lk1vceom4TFm3UHffkyQH8.roa (hash: 7sx9fKJ6zSwa6txM9tmVfdAR/9hActQM7paLbf+Thbw=)
3: YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl (hash: Yk5ATQav2Kb0gRhpqpWgoCp5EV77pizeUJ4GnnVu+N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:51:65:7b:5f:a0:b8:52:67:b0:03:b9:19:b1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62719c6d8b9950378a7489315fb078111a18ad55
Validity
Not Before: Jul 24 02:00:31 2026 GMT
Not After : Jul 25 02:00:31 2026 GMT
Subject: CN=4cd0b64f17898076de95b5affb9bb9c728a27593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:e3:60:4a:1c:d2:64:63:bd:4b:03:99:ec:
6f:ec:2e:bc:14:16:ac:f5:9a:d3:40:58:41:76:87:
83:5c:07:98:ec:4c:3e:7b:c6:7d:0b:b0:1d:51:a7:
76:3d:9f:e6:55:16:9f:ae:af:c7:69:7b:1e:b5:16:
21:8e:71:70:c4:32:9d:f0:0d:12:dc:d7:54:81:a1:
c9:bb:d9:9e:79:7e:64:92:da:af:63:7f:07:e8:4f:
22:92:bd:34:5c:fa:7f:88:ba:d8:fb:84:8c:b5:6e:
9d:fd:19:f8:f7:50:88:90:bc:38:9a:9c:1b:94:e1:
db:31:38:f4:95:77:44:f8:35:92:4c:2e:c2:b4:23:
70:ef:fa:d2:5a:2a:2a:0d:82:63:77:9b:86:01:6e:
10:28:50:3a:77:29:5c:cb:02:2a:8d:5d:06:e8:59:
bd:de:c1:9e:61:5a:67:98:be:82:25:d0:a9:a8:20:
b1:10:a0:2c:c9:5b:14:63:ac:a8:43:38:2b:29:a0:
fc:e5:90:24:8b:ba:e9:84:98:e6:23:d7:63:01:4e:
73:8f:05:26:c8:cc:0f:50:2a:62:56:24:bd:68:97:
08:58:26:70:1f:d5:fd:d3:78:8e:6c:b9:9e:4b:3d:
6b:a1:a6:25:ea:61:86:a1:96:62:f8:34:f8:7a:be:
d7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D0:B6:4F:17:89:80:76:DE:95:B5:AF:FB:9B:B9:C7:28:A2:75:93
X509v3 Authority Key Identifier:
keyid:62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:ac:ee:07:83:35:74:70:f1:cb:d0:9c:fb:7e:47:19:c6:7e:
72:e7:1a:85:87:8f:cd:f2:a5:19:19:55:b7:17:9a:6a:f3:2d:
df:02:14:73:74:ef:7d:64:e9:3b:b9:eb:36:c5:09:70:14:67:
17:50:9f:71:65:f1:bd:5f:cf:48:04:7a:47:4f:c4:a5:e0:2b:
fe:cd:7a:31:fd:46:7c:2f:cc:ed:95:d8:4a:67:f5:1b:5c:2c:
ed:51:e2:8c:84:91:db:1f:5a:56:3d:16:1c:cd:f2:b6:58:a7:
64:62:cf:10:99:45:7c:86:a9:64:fb:e8:8c:12:3e:64:83:66:
6b:7e:0f:23:eb:1a:c5:78:43:11:df:b5:f2:48:d0:e7:47:6f:
41:f9:e1:47:e7:f7:c5:46:18:9d:45:b8:d7:4c:1f:45:3c:4c:
6f:1b:c7:a6:0f:2d:6f:60:c0:94:d4:60:dd:80:bb:0f:64:cf:
f0:5d:bd:26:3b:18:7c:1c:b9:43:3c:54:a1:e5:98:b1:22:d1:
46:80:de:c3:75:1a:ff:04:aa:86:af:88:fc:7b:fe:97:ad:42:
e9:11:88:36:86:dd:f0:45:51:dc:da:3d:8d:61:5f:f2:32:50:
ef:66:41:26:a0:21:dd:d1:a9:f5:a0:3f:f4:fb:fe:5c:08:0c:
a1:c6:cb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:40:45 2026 by rpki-client