Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
File: YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft (raw, json)
Hash identifier: FEQrkvjzIK7qoPkJK28b+oOBv3flkHxHzpgpn/H7qvc=
Subject key identifier: BF:29:C4:F1:FF:45:1D:66:35:B9:E3:C0:9E:28:75:5E:EE:A8:19:FC
Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Certificate issuer: /CN=6050099e335409db03ac1133d164f02a0d5dc66f
Certificate serial: 019F9813D867CF8BC840BF098BA9ACF5917C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
Manifest number: 0E73
Signing time: Sat 25 Jul 2026 07:01:05 +0000
Manifest this update: Sat 25 Jul 2026 07:01:05 +0000
Manifest next update: Sun 26 Jul 2026 07:01:05 +0000
Files and hashes: 1: YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl (hash: jgvghe9wPc28da5rX5BMitrHFrCHH++h/xB6ScaaHUg=)
2: e2fLwwNnC7_gQ85Q33UfXuK3PBc.roa (hash: GaXv8AkKDgccbaFAmhisldDeR5nblYKbBIpd1n6r6Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:98:13:d8:67:cf:8b:c8:40:bf:09:8b:a9:ac:f5:91:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f
Validity
Not Before: Jul 25 07:01:05 2026 GMT
Not After : Jul 26 07:01:05 2026 GMT
Subject: CN=bf29c4f1ff451d6635b9e3c09e28755eeea819fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:64:be:eb:73:40:6e:67:ca:4e:c2:01:4d:
80:31:b4:f5:4d:dc:0e:52:d5:03:59:cd:97:f4:a7:
cb:a8:90:39:eb:01:23:94:9c:3f:a3:3b:6b:00:bc:
6f:ba:b5:33:d2:77:bb:15:d1:66:84:10:3f:6c:cc:
19:51:28:71:25:29:87:c6:0b:d7:63:ea:6f:50:48:
63:ab:e7:99:f0:9a:50:5a:6d:e5:d7:53:f9:2c:fd:
96:9c:d7:49:53:3c:ed:e9:aa:3e:5b:cd:53:2f:8c:
42:2a:7f:e9:1a:a0:e9:83:ea:a8:05:67:9f:dd:6e:
e6:3b:20:7a:16:5f:67:5b:5e:4d:b5:97:d9:57:82:
32:b1:b7:cb:6e:0e:bc:af:50:89:02:73:74:f5:c4:
f7:49:c4:87:65:af:fc:38:4b:b3:a1:87:7a:b3:13:
33:34:74:32:67:39:a2:1e:fd:26:18:b9:d4:37:84:
17:e1:cf:56:40:8e:33:4d:60:33:77:96:51:8b:97:
cf:60:f2:6d:bb:5f:c3:bd:85:16:f1:43:15:38:a1:
cb:6b:f8:d0:bc:52:31:12:fa:f1:66:93:19:3e:02:
1d:57:4b:86:96:7c:4f:cb:64:fe:c0:88:f8:b4:52:
bf:f8:cc:b3:0a:04:15:c5:40:b5:fd:e0:c6:f0:be:
2a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:29:C4:F1:FF:45:1D:66:35:B9:E3:C0:9E:28:75:5E:EE:A8:19:FC
X509v3 Authority Key Identifier:
keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:82:2a:de:07:27:3a:ea:f1:95:6a:6b:75:fc:9b:b9:9c:b6:
fe:83:74:01:c0:d8:5f:96:68:4b:b7:60:d6:21:4e:4b:33:83:
13:91:df:64:65:a0:d9:0a:74:59:47:60:ad:54:46:78:97:dd:
3e:7f:3e:02:a2:58:9e:4f:6d:4e:b5:3f:85:13:7b:30:d1:78:
15:96:05:b5:47:2f:de:09:a4:99:96:5e:25:37:06:56:ef:da:
c0:bb:31:f1:c9:a3:ee:4f:c2:01:06:d1:4f:f4:46:29:ed:58:
93:d3:19:33:6f:9c:f0:73:f7:ce:64:d7:02:95:f2:3e:a3:5d:
41:d3:26:bd:fe:77:de:27:f9:5e:c9:69:3f:e3:5a:52:52:34:
9a:aa:cb:9c:f6:02:c2:a2:18:ef:2e:fe:dc:50:26:f4:17:9b:
f5:6f:91:9d:e3:0c:5a:5a:af:35:58:41:c8:0a:67:a9:98:96:
99:5e:90:82:12:3e:56:92:f1:61:57:3f:cd:e4:23:6d:d7:7d:
10:8b:57:47:17:d8:75:42:88:18:0a:2a:05:a8:06:2d:a7:1d:
04:b7:90:76:30:ca:1c:d8:bb:96:a2:bf:bc:56:33:22:3f:35:
1f:89:a1:83:a6:32:df:ea:07:c2:9d:c0:a5:54:31:6a:90:1f:
3b:a4:2f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 09:14:16 2026 by rpki-client