Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json)
Hash identifier: Plz4wOWfCL95kGzHYBf2qWJKxxCu4Bqa7LpmEYtZmVE=
Subject key identifier: 2C:4E:FF:FE:82:72:9E:BD:93:BC:6A:BD:5D:D1:CE:4F:F8:D9:CD:1C
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 019F91A3CC232D917A6DCB22DC298653157E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
Manifest number: 091A
Signing time: Fri 24 Jul 2026 01:00:58 +0000
Manifest this update: Fri 24 Jul 2026 01:00:58 +0000
Manifest next update: Sat 25 Jul 2026 01:00:58 +0000
Files and hashes: 1: Ewfu9z930MhyPX8313muaLXe2oM.roa (hash: xaNiT68XuLXKua+vW1yOiyZ2EeD/WOwvk5iab3yyEqE=)
2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: 8mjbPEqZYBvdVfeQTcQFa2aMVMXSsg1hoXx1yC9LLek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:cc:23:2d:91:7a:6d:cb:22:dc:29:86:53:15:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Jul 24 01:00:58 2026 GMT
Not After : Jul 25 01:00:58 2026 GMT
Subject: CN=2c4efffe82729ebd93bc6abd5dd1ce4ff8d9cd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4f:d3:48:a8:de:78:09:09:ff:76:13:8e:44:
07:11:22:e1:4b:34:a5:7f:96:e5:f8:38:1c:34:f0:
f8:9e:30:96:a6:16:45:77:0f:4f:8e:59:1b:94:63:
f1:a9:4d:57:6a:7a:68:c2:55:11:fe:bc:15:c3:c7:
35:8d:3f:f4:c7:91:c2:7a:3e:99:d9:9a:b1:40:ba:
87:24:0e:39:5b:92:7a:d1:02:27:93:96:74:0d:48:
3e:d3:4c:6b:ce:53:58:a4:ba:60:40:ab:13:d7:01:
16:b4:7c:06:95:96:aa:b1:89:70:62:e1:6c:71:99:
18:82:39:e5:47:e3:a0:70:0e:76:81:82:de:47:1c:
a2:59:d1:17:55:82:bd:9d:ee:b0:95:65:8f:db:b9:
98:1c:bb:3a:e8:d7:ba:20:fb:09:06:6f:71:bb:44:
6a:79:ef:ad:b5:3d:c2:35:81:96:6c:df:af:83:07:
7c:9d:c7:9e:33:8f:67:56:e2:a2:e4:85:25:1d:68:
15:93:6c:e6:5d:85:b1:09:2d:ff:a7:43:98:d6:34:
cc:15:2d:f4:99:45:56:24:74:8a:b1:8b:ce:08:8c:
8a:c5:77:d8:8c:e0:af:5b:50:f8:a4:61:b3:6e:c1:
e4:ba:ea:e5:e8:de:0c:c6:2e:d4:2c:f8:a5:d8:87:
61:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4E:FF:FE:82:72:9E:BD:93:BC:6A:BD:5D:D1:CE:4F:F8:D9:CD:1C
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4c:7b:f4:ad:09:58:11:4a:54:08:63:bc:a8:7d:56:26:ec:
bc:7a:93:24:09:73:7f:ab:78:3d:66:2b:d5:99:5d:19:ff:09:
f2:ef:f8:05:61:58:84:9e:44:0a:18:14:62:57:cd:ab:5b:dd:
d1:0a:ab:a9:9c:9f:a6:ab:35:2e:ca:08:58:8a:14:b8:1d:2d:
29:ee:7f:27:24:5e:8b:20:36:8a:85:59:01:52:13:e7:1e:30:
12:a8:9a:b5:76:fd:ec:0e:0f:a5:a9:71:0d:1b:97:59:db:14:
91:9e:1e:a9:fc:25:59:92:5d:69:0e:8e:84:df:32:37:83:c6:
d4:1a:cf:d1:48:72:46:c9:74:bd:ca:9d:45:17:b6:4b:d2:c8:
36:99:51:e3:26:7e:ba:05:86:ff:55:de:5c:6c:f5:7a:bd:04:
cb:24:1c:81:48:37:27:2e:f6:32:8a:6d:f7:cc:3e:79:f8:62:
69:05:96:9d:06:b8:2c:a1:e1:8f:5c:7e:fe:f6:4f:1c:13:a1:
db:09:3d:5e:3f:52:1a:dc:51:68:78:4e:f5:2c:f9:84:da:58:
21:85:81:dd:ed:07:88:4b:1c:95:18:d7:1f:92:9c:67:f0:d0:
8f:28:b6:22:25:1f:75:4a:25:f3:de:3f:2c:07:ca:f0:13:bb:
9a:e1:bd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:29:51 2026 by rpki-client