Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
File: yxyjwd2KVS42ekmgIZkGlyKUpnw.mft (raw, json)
Hash identifier: 2eCjYZB4sV44zt4ovRz0CmZr7tCltW/AsHUIR75O6QQ=
Subject key identifier: 79:58:19:AE:66:47:DE:C2:B6:4F:F5:AA:E4:65:94:D8:E6:9B:74:74
Authority key identifier: CB:1C:A3:C1:DD:8A:55:2E:36:7A:49:A0:21:99:06:97:22:94:A6:7C
Certificate issuer: /CN=cb1ca3c1dd8a552e367a49a0219906972294a67c
Certificate serial: 019F935B8569DE2F47746B9FDB9B1927A985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:16 +0000
Manifest this update: Fri 24 Jul 2026 09:01:16 +0000
Manifest next update: Sat 25 Jul 2026 09:01:16 +0000
Files and hashes: 1: QiN9rG_Ysuf7jDr6rlJvaZKS1SY.roa (hash: CVle1wefvKSXiK7/zejKSn/++K6IZllecq4TO7iTCZg=)
2: U2-pyUEFz_jV5xze95sKqmITK9E.roa (hash: qFKlY0WTggQuoTIdTFaI1jSEY0M+4i8LehCtLGlHHT0=)
3: yxyjwd2KVS42ekmgIZkGlyKUpnw.crl (hash: w09NmaKFK9sFmxLydLX3mi3vC5mGABJh7GrGPkKwbUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:85:69:de:2f:47:74:6b:9f:db:9b:19:27:a9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1ca3c1dd8a552e367a49a0219906972294a67c
Validity
Not Before: Jul 24 09:01:16 2026 GMT
Not After : Jul 25 09:01:16 2026 GMT
Subject: CN=795819ae6647dec2b64ff5aae46594d8e69b7474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:99:c8:3f:63:19:6d:75:ea:55:78:46:87:35:
e6:dd:a9:73:74:75:e2:36:6c:1c:d7:fa:2b:91:ee:
90:1f:da:9e:1c:a3:55:9c:a8:c7:df:b2:4c:10:f7:
4b:ba:29:a9:ae:6d:39:f6:f2:3a:57:75:bc:8d:f3:
e8:4e:2e:9f:37:89:6e:0e:af:bc:c5:43:0b:3e:47:
20:79:df:d6:7d:ca:f4:5d:e9:6a:b6:49:98:3b:d5:
c7:4c:02:d8:a1:65:67:3b:42:4c:43:5b:c9:89:a0:
0c:c0:c2:f5:04:db:27:d5:f1:7b:3a:ac:cc:72:5a:
97:63:ea:0e:5a:1a:6e:eb:25:de:25:a4:5d:37:33:
3e:4c:5d:72:c5:b4:b9:c5:f6:f1:b3:af:cc:84:88:
7d:70:3a:a5:cc:85:ba:6f:18:76:5b:45:32:83:ee:
b5:59:65:f4:b9:29:45:e9:56:9d:84:e6:3a:a3:a3:
51:99:bf:63:d2:59:56:b6:cd:69:2c:dd:64:a5:f8:
eb:21:c7:ab:1c:31:6b:3f:94:e6:38:4a:05:af:a2:
3f:c7:44:8c:4b:b2:24:3b:5c:6b:6d:3e:b5:12:fb:
7a:0a:59:c9:a2:62:54:8a:52:d6:c2:4d:b8:06:27:
1a:7a:1c:de:ab:ab:a5:5c:ea:18:17:c8:32:1a:7c:
47:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:58:19:AE:66:47:DE:C2:B6:4F:F5:AA:E4:65:94:D8:E6:9B:74:74
X509v3 Authority Key Identifier:
keyid:CB:1C:A3:C1:DD:8A:55:2E:36:7A:49:A0:21:99:06:97:22:94:A6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7d:c6:ed:fd:8a:8c:0d:7e:ca:b8:d0:59:8b:70:38:c8:e6:
b6:fd:07:9c:73:c8:32:c6:ff:ac:2d:18:90:49:45:e8:c9:0c:
6d:c8:79:7f:e0:2b:e2:71:62:5a:a0:ea:b9:0e:fd:1a:30:02:
77:4c:3d:2f:58:60:a2:53:ed:02:3f:3c:1f:a6:9a:64:07:0e:
00:96:f0:1d:35:a2:07:6a:fe:54:b8:d6:7f:97:4a:ef:e6:5c:
e4:9e:83:da:bd:56:2e:b3:72:3f:21:8f:ca:82:c9:81:33:47:
c8:a9:2e:65:cc:6c:89:1e:00:4c:cf:21:e2:49:8c:90:c8:18:
7c:6f:0a:d2:68:22:88:1e:a2:2a:7a:b3:18:66:8a:1a:0a:e3:
16:c8:01:60:80:d6:ac:b3:c4:a1:04:4a:fc:70:26:f6:cc:3b:
d9:ff:cd:17:9f:36:e0:9a:b1:27:2b:c8:ca:1a:bd:28:04:19:
cb:77:b7:87:d0:5e:7d:dd:c3:19:fd:fe:50:2b:ae:f1:37:43:
ef:37:a6:bf:d3:03:80:df:49:b9:82:02:4e:f3:4b:10:0c:b5:
99:66:aa:a1:4f:1d:c9:f1:9e:ea:17:44:fb:1a:97:53:e2:5e:
0e:16:d4:89:37:eb:ce:e9:e4:e7:f2:94:81:bc:97:c8:ac:2b:
b2:79:0b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:09:22 2026 by rpki-client