Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
File: YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft (raw, json)
Hash identifier: aSEnM4AzZDBuvLwvx26ibfm/hYlf/SlboqCp2RJTdQQ=
Subject key identifier: C8:2B:80:00:F8:11:AA:3A:6A:7B:40:15:0E:2E:7A:D0:D7:70:D2:7C
Authority key identifier: 61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
Certificate issuer: /CN=611343a8ee92aec36510de97382dc6a420888efe
Certificate serial: 019F939229874F1F2C09E6E689109FBA91F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
Manifest number: 023D
Signing time: Fri 24 Jul 2026 10:00:57 +0000
Manifest this update: Fri 24 Jul 2026 10:00:57 +0000
Manifest next update: Sat 25 Jul 2026 10:00:57 +0000
Files and hashes: 1: 1WBi4O0mvLv4eBmlkjen331LEKc.roa (hash: na8Ngk5oUxgxLL20/k7/joU0dOOdxW3ksCrQTLpvfHc=)
2: YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl (hash: OO0jNr6iqJ/OsHhaPuIilbUcbydQd/Kx4Yo4xuyTDA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:29:87:4f:1f:2c:09:e6:e6:89:10:9f:ba:91:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611343a8ee92aec36510de97382dc6a420888efe
Validity
Not Before: Jul 24 10:00:57 2026 GMT
Not After : Jul 25 10:00:57 2026 GMT
Subject: CN=c82b8000f811aa3a6a7b40150e2e7ad0d770d27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2e:43:67:4b:0e:5d:41:a2:6d:cc:3a:4a:5f:
6a:58:a9:7b:93:78:69:4d:34:e1:59:13:24:70:99:
b7:00:46:14:84:06:b8:a3:1c:c3:62:63:01:e7:ce:
bd:36:46:d6:bc:0a:53:53:76:c6:0e:8f:c0:1b:dd:
58:51:02:a7:a4:c2:ac:75:64:06:a1:9d:fa:aa:58:
9b:54:f4:b3:41:a3:d7:a6:ee:5c:e5:0b:f2:6e:2e:
0d:db:f9:c5:db:8a:42:8d:41:f1:fa:aa:ee:e0:0f:
3c:b8:5c:9d:6c:35:4b:fa:7e:85:a6:63:18:3f:1d:
ec:56:1b:4f:88:23:b9:a3:77:56:8c:55:76:01:25:
ac:03:da:cf:10:06:48:42:02:5c:f7:50:81:38:2e:
3c:c8:f8:aa:b4:d9:bc:59:fa:f3:0c:1d:f3:f1:28:
da:ce:f9:54:69:03:8b:b6:1e:6c:0b:d2:e7:3e:86:
49:a4:0e:2e:5c:fc:17:64:98:dd:44:cf:a6:31:36:
5b:1a:b3:49:8a:9c:f6:54:23:c3:83:56:39:7b:83:
cb:82:82:40:91:ed:1c:c2:e5:a1:3d:27:5f:68:53:
bb:5a:7c:ae:59:db:f7:70:67:bf:d5:43:f0:cc:52:
e7:8d:7f:53:34:8b:c1:4a:c3:fe:39:f8:21:ce:c9:
2f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2B:80:00:F8:11:AA:3A:6A:7B:40:15:0E:2E:7A:D0:D7:70:D2:7C
X509v3 Authority Key Identifier:
keyid:61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e0:f4:0f:41:75:a5:ed:cb:9b:8d:94:7f:49:ab:6d:04:5a:
c9:e7:fc:4e:ee:9b:9e:82:ff:0e:2d:ca:0d:d4:03:6f:7a:15:
f4:70:73:1f:22:c3:7b:dd:d4:dd:1a:b1:06:fe:7c:1c:7f:00:
de:51:c0:68:2d:97:29:ec:dc:d7:19:62:a8:2d:54:c5:5e:e1:
22:3d:a0:3c:8d:e3:5a:89:87:1b:f1:52:c5:cf:d6:b8:9c:08:
dd:77:4d:7c:6e:a1:5c:5a:81:26:c3:65:05:be:53:0f:8f:aa:
3b:02:e0:8c:e3:59:23:44:9f:08:82:a2:37:f6:eb:1b:30:34:
b9:01:26:30:9f:87:0f:f3:bd:47:b9:15:ba:4a:bd:5c:ad:bb:
5b:7f:cd:21:5e:ba:60:33:22:63:63:3f:42:4a:c0:51:1c:ec:
7f:8e:55:61:7d:ca:eb:e7:4e:b3:cf:9e:34:fb:28:3c:dc:92:
c2:70:49:2e:7a:53:98:00:ce:da:df:bf:75:d8:4d:22:76:f9:
e7:2b:0a:c2:3d:54:5e:de:19:a9:e1:23:a4:71:46:86:6b:4c:
e0:aa:75:db:41:d3:ad:f5:e2:86:89:28:fa:3a:bb:03:db:99:
b2:6c:e5:5e:79:d5:09:50:75:1e:44:3e:f8:cd:fd:de:9d:1c:
6d:07:84:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:17:54 2026 by rpki-client