Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
File: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft (raw, json)
Hash identifier: Zt+YXsPBHRi39NOzvaNv5HFcUKHmlkNSXqMOGWCK3tk=
Subject key identifier: 06:80:BC:7D:7A:DD:32:F6:BE:E8:C0:14:18:93:17:5C:7A:0E:99:20
Authority key identifier: 61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
Certificate issuer: /CN=61041121ccc6e65d933961fd572d59e261f21a31
Certificate serial: 019F9248CB909138741175A7B4348D911528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 04:01:11 +0000
Manifest this update: Fri 24 Jul 2026 04:01:11 +0000
Manifest next update: Sat 25 Jul 2026 04:01:11 +0000
Files and hashes: 1: 8x9EixpS_cTo1YUsFO5RBhE9yQg.roa (hash: H+557dvreWM3Tp/NNdorNLcHs2h/JJEHvmmY5yieUec=)
2: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl (hash: VRoyudFsNg7MP8dBfXJ02+o9YfFeO29kqQzvTDY3uCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:cb:90:91:38:74:11:75:a7:b4:34:8d:91:15:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61041121ccc6e65d933961fd572d59e261f21a31
Validity
Not Before: Jul 24 04:01:11 2026 GMT
Not After : Jul 25 04:01:11 2026 GMT
Subject: CN=0680bc7d7add32f6bee8c0141893175c7a0e9920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:3f:a5:3e:9f:cf:74:81:a2:08:b4:a0:4c:
a5:f1:b1:7d:77:99:fd:c4:dd:68:9e:08:44:9a:d8:
31:c5:5d:36:e1:bd:f2:85:30:2d:0e:ac:fe:3b:89:
7b:2a:b1:97:ad:13:dc:30:14:0b:36:95:22:f6:a6:
6c:95:50:9e:9e:e9:50:99:f0:db:81:30:a8:1f:cf:
0b:c9:30:68:47:a0:17:1b:ec:19:ac:e3:6e:ee:e5:
b9:0c:25:bb:5e:23:7d:97:ff:a5:14:c7:14:87:a5:
bb:b5:9a:e2:91:cb:de:22:1d:7c:93:fb:75:d1:44:
7e:c3:6a:42:ba:b0:96:9e:5f:ec:70:dc:9c:01:91:
8e:17:e7:8f:db:7b:84:73:af:81:8e:8b:1a:7d:ea:
2b:e9:86:81:7c:81:fb:1e:c4:53:0b:1c:17:d4:af:
de:e1:6c:a6:8c:ac:fa:f6:d0:26:ae:ce:0b:71:76:
37:94:a6:18:1d:1d:98:20:b7:d5:4b:64:6e:68:6a:
48:3e:0f:58:ad:ff:7f:93:7d:a0:6e:7d:70:d2:06:
d4:4d:5b:50:98:b9:d2:66:94:e4:59:fb:88:e6:81:
6d:9d:f2:4a:7d:71:2d:e7:4d:d6:f7:21:36:41:ad:
a8:de:18:5e:23:50:d6:5e:0a:d7:59:8c:5d:4d:7e:
26:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:80:BC:7D:7A:DD:32:F6:BE:E8:C0:14:18:93:17:5C:7A:0E:99:20
X509v3 Authority Key Identifier:
keyid:61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:4f:cb:a6:88:c7:83:8e:a8:9d:29:10:9d:17:a0:10:30:b2:
49:47:45:6a:f1:b9:b8:43:75:fa:76:e4:7f:2e:33:af:be:70:
69:21:0b:95:11:ef:7b:df:7c:5b:aa:e1:d5:26:dd:31:d6:e6:
37:41:be:bc:60:79:66:d0:6c:bb:71:d7:8a:90:f3:31:47:af:
72:b7:91:bf:90:6d:50:f8:32:7b:fc:5a:e6:9d:02:16:d2:cb:
ce:17:7e:81:07:e2:34:12:83:fe:51:76:05:27:12:28:a9:77:
c1:9b:1a:bc:71:d6:30:3d:4a:18:58:0f:9e:b1:27:09:41:7c:
6b:9e:48:c6:c9:82:76:8b:fe:da:ff:c6:40:b7:1d:ce:dd:98:
f7:d1:91:31:b0:57:ae:29:02:3e:a9:be:78:c8:df:35:1d:82:
3d:19:a5:8c:67:e5:2a:89:da:07:66:4f:6c:ef:56:7e:ba:4c:
f8:4a:58:4f:6d:10:31:7b:48:c3:00:86:3d:af:44:40:9e:a9:
1b:fa:3c:e4:6d:fe:cc:e7:bd:bd:bd:21:43:1e:cc:39:40:98:
f3:eb:63:d7:c7:7b:20:33:8b:54:ed:67:ad:9f:62:76:8d:81:
57:9f:00:c4:e4:0d:35:9e:a7:cb:c0:5a:0f:1e:e3:38:1c:4b:
08:62:a9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:05 2026 by rpki-client