Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.mft
File: YKlx2lflTkw-UwoPekkv3uo4mgg.mft (raw, json)
Hash identifier: vVRV54yN6asPdToZv/b2cHe+CVTdzvQspiMGDKY2PZo=
Subject key identifier: F2:A2:A3:8A:E8:1A:47:61:5D:DA:07:3D:57:60:3A:C4:46:16:3A:24
Authority key identifier: 60:A9:71:DA:57:E5:4E:4C:3E:53:0A:0F:7A:49:2F:DE:EA:38:9A:08
Certificate issuer: /CN=60a971da57e54e4c3e530a0f7a492fdeea389a08
Certificate serial: 019F935C42A447824853BB54326052A8CF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKlx2lflTkw-UwoPekkv3uo4mgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:02:04 +0000
Manifest this update: Fri 24 Jul 2026 09:02:04 +0000
Manifest next update: Sat 25 Jul 2026 09:02:04 +0000
Files and hashes: 1: 1mT64JfFKq9j8Kx613urXRMaNJo.roa (hash: Q/tOEoTc3quAKEYckZ1+BaTLL9Gk8uPvjXmM1gSrPTU=)
2: YKlx2lflTkw-UwoPekkv3uo4mgg.crl (hash: bEgH9dBd/eFiqNdNf5lrKbs9VtXRUTpvaVxtunXBdhI=)
3: dHFk08gJmB0tFkgpJNYQpeItYJE.roa (hash: T5a0svL8hEV805qPD4BMTFrTEgZKRlATlMErknBPEjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKlx2lflTkw-UwoPekkv3uo4mgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:42:a4:47:82:48:53:bb:54:32:60:52:a8:cf:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a971da57e54e4c3e530a0f7a492fdeea389a08
Validity
Not Before: Jul 24 09:02:04 2026 GMT
Not After : Jul 25 09:02:04 2026 GMT
Subject: CN=f2a2a38ae81a47615dda073d57603ac446163a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:49:fd:7c:fa:2c:04:a6:89:db:c2:97:44:
32:a4:de:11:0e:27:97:0a:68:a0:ee:1d:5a:87:10:
49:f6:56:9b:6e:f9:8d:5c:cb:7b:a4:55:14:16:0a:
79:0b:1f:97:fa:fb:9c:ac:4c:9a:ab:83:ab:22:d8:
31:21:39:0a:30:bf:c3:ac:a7:a3:00:28:e8:6c:7c:
61:5b:88:47:f9:f0:b1:a0:a6:5a:8d:48:d8:9a:9e:
8e:1c:80:93:00:63:29:73:5b:97:f9:7e:82:af:e1:
8f:ea:e6:88:85:5c:9b:c3:ea:ff:02:a8:09:cc:ea:
29:a6:6e:d1:0d:0c:59:03:de:8d:28:c9:7a:bf:6a:
25:eb:c0:69:88:5e:93:98:78:e8:23:37:57:06:39:
cb:65:22:7a:f1:ef:6f:7b:66:f2:bf:d0:ce:53:7b:
15:e5:18:b3:ca:fb:07:f7:3d:21:53:81:92:1a:6c:
92:0a:b3:ce:3a:32:6f:cd:64:ed:7c:3a:af:dc:3c:
6c:60:c7:11:72:35:15:8c:87:b8:84:45:98:a8:26:
e1:48:4a:13:4a:e6:5b:0b:52:2f:4f:93:72:10:5a:
05:c5:3b:d4:a9:20:47:06:cd:41:68:0e:57:9e:51:
19:e4:10:51:b8:f8:16:59:06:8c:06:c5:5e:13:40:
ab:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A2:A3:8A:E8:1A:47:61:5D:DA:07:3D:57:60:3A:C4:46:16:3A:24
X509v3 Authority Key Identifier:
keyid:60:A9:71:DA:57:E5:4E:4C:3E:53:0A:0F:7A:49:2F:DE:EA:38:9A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKlx2lflTkw-UwoPekkv3uo4mgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5f:eb:e8:5d:52:61:06:80:85:6f:26:7c:3a:d2:6e:20:07:
68:d2:ea:aa:b1:c0:dc:9e:0a:cb:80:2f:bc:5a:62:81:a1:23:
8b:3e:82:72:d4:71:1f:bb:09:df:c7:85:35:eb:31:55:92:68:
d7:6f:30:be:1a:a4:40:af:70:e3:04:a9:8a:5f:87:cc:85:62:
9e:c6:ec:78:6c:cb:8b:22:6d:e7:56:41:eb:37:23:b4:d9:2d:
98:ef:4d:fe:29:2d:e5:76:75:19:3e:6c:41:92:fe:84:f4:7a:
3c:46:26:dd:6a:8f:45:b8:8c:cc:f0:b4:1b:97:97:61:ee:e6:
3b:9a:a7:9f:2e:b9:df:80:13:b9:dc:5f:12:55:0f:46:ab:2b:
f9:e9:93:a4:c6:a2:5c:5c:1c:5d:7f:f3:a6:5e:51:32:fa:77:
a9:40:19:f2:b4:b5:e1:46:de:9a:23:21:ac:b9:68:19:b7:06:
39:65:5e:ce:67:04:50:42:ac:a8:d9:ae:1c:51:72:e2:a6:66:
38:07:89:fc:ce:58:8a:f5:69:ff:4b:b1:ed:ad:c8:18:85:a6:
41:ce:ee:52:43:38:0f:77:e7:f1:bc:ca:f2:c7:b4:8b:5d:36:
c3:23:c8:8b:24:ac:ea:9f:b2:61:d3:7b:79:54:2d:79:46:1c:
5f:f9:6b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:28:27 2026 by rpki-client