Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
File: YhuOSG7srmEk3hBJT9OROe1KN8s.mft (raw, json)
Hash identifier: YvTznaK/69VvAh0TUtnOR86E2DVJC2NZQTc2TUrqcV8=
Subject key identifier: BB:96:45:3B:77:19:CF:A1:26:2D:CF:AE:FD:B1:27:59:C2:E0:E0:80
Authority key identifier: 62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB
Certificate issuer: /CN=621b8e486eecae6124de10494fd39139ed4a37cb
Certificate serial: 019F93FFECEB7CB8BD8E0753B95721FDD238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 12:00:50 +0000
Manifest this update: Fri 24 Jul 2026 12:00:50 +0000
Manifest next update: Sat 25 Jul 2026 12:00:50 +0000
Files and hashes: 1: BwYYOmhJLJqapgE9lvV3d7BEWAU.roa (hash: ME1eFTl4ynavuH8tL0n87NqGZ4of85as6TbMREzi3Ig=)
2: YhuOSG7srmEk3hBJT9OROe1KN8s.crl (hash: MbN0nbFrC4wP2g0wzmMZyn2cjAWb4Sr7sGNTPYAjaxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:ec:eb:7c:b8:bd:8e:07:53:b9:57:21:fd:d2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621b8e486eecae6124de10494fd39139ed4a37cb
Validity
Not Before: Jul 24 12:00:50 2026 GMT
Not After : Jul 25 12:00:50 2026 GMT
Subject: CN=bb96453b7719cfa1262dcfaefdb12759c2e0e080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:40:77:af:ef:21:c1:b0:31:30:0e:dc:cd:9d:
af:19:eb:ab:81:26:45:53:13:07:9f:12:62:0a:d2:
ac:ce:21:cf:1e:c5:03:93:9a:37:43:82:56:94:e1:
96:29:e7:94:b3:a5:84:6d:92:52:77:74:e8:74:6f:
84:48:d7:c6:52:a3:f8:88:43:98:07:c2:a9:04:79:
25:78:53:40:23:a9:a4:54:d7:64:8f:27:7d:53:0b:
d4:20:c5:8f:64:71:99:08:ee:46:4e:a5:fd:81:b2:
3a:04:ea:ca:23:1f:ce:c6:84:59:0c:08:ab:d6:f1:
a7:5a:1c:ce:12:28:40:f3:6e:c6:2f:b1:da:6d:98:
cc:7f:ee:3e:3e:a4:b7:c5:e8:1d:ec:35:1b:2a:35:
b1:6b:8f:da:9f:e3:6e:de:96:4f:6a:17:af:b9:e2:
a7:02:e9:2d:84:7d:01:08:e8:6f:20:df:4d:a5:ab:
2f:73:d6:27:0e:40:5e:86:74:98:f2:cb:b1:54:3d:
af:f2:9e:bc:05:da:b7:76:f1:b4:c0:d5:fa:b2:ca:
d3:6e:47:d1:ae:a2:2e:97:4a:89:60:19:c2:e9:2a:
59:44:96:67:52:6c:bd:41:52:f4:1c:aa:88:ae:87:
a0:b3:15:22:a2:b8:1d:b5:f4:97:8a:ed:e8:a9:41:
3a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:96:45:3B:77:19:CF:A1:26:2D:CF:AE:FD:B1:27:59:C2:E0:E0:80
X509v3 Authority Key Identifier:
keyid:62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ea:1e:60:44:95:50:43:fc:e8:05:7d:a1:6b:19:af:f0:e7:
ef:af:b1:30:60:47:2e:b2:ff:53:9f:57:e9:1a:59:da:21:3c:
3f:d4:05:39:f1:19:da:c5:2d:a3:89:15:6e:85:24:00:ca:9d:
72:5b:bd:4f:09:cb:45:53:c7:b4:36:d1:ff:d7:4f:88:fb:45:
0d:9a:4f:7a:21:e9:d6:32:d2:ff:34:7b:a3:b7:8e:15:94:46:
d4:20:d5:cb:92:c2:d8:16:5b:8f:4a:f3:1a:88:b2:b5:be:ce:
38:01:04:d5:68:f8:c2:91:52:89:46:fe:70:f3:89:9d:e5:77:
21:3b:f4:65:e4:f9:e1:85:d9:c0:79:af:e9:90:b0:81:18:ef:
71:56:f5:cf:43:c3:5b:ea:a2:0c:20:e5:9e:cf:a9:f5:5a:db:
16:8b:7f:c2:a2:61:3a:33:b4:ba:94:a1:e9:a6:9f:a4:7f:9d:
59:d2:7b:94:1d:82:ac:c6:6f:61:69:df:1d:34:f9:1e:8f:7a:
84:25:86:52:26:9b:59:ad:8e:e3:24:1a:eb:c9:3d:44:a8:d0:
38:b5:5e:51:04:2b:bd:57:1a:d9:69:2a:c8:3c:31:ba:33:90:
95:33:18:a3:8a:27:21:b8:d5:25:88:06:0c:de:14:01:78:c7:
7d:8c:5c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:48:49 2026 by rpki-client