Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
File: yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json)
Hash identifier: 6O7MpVAHaa1rNfaQNLbFhH/FJvQyj9MrgZ/r0mdGsvs=
Subject key identifier: 11:7A:33:27:42:06:E5:2D:F3:F9:9D:9E:3E:AD:6E:77:46:67:D0:8D
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial: 019F93C9572A17729FAA4900B18AD6BD1A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
Manifest number: 07FE
Signing time: Fri 24 Jul 2026 11:01:13 +0000
Manifest this update: Fri 24 Jul 2026 11:01:13 +0000
Manifest next update: Sat 25 Jul 2026 11:01:13 +0000
Files and hashes: 1: B_cUWMvkDrWwNevq-NhH06J8ywg.roa (hash: ki78ojsdQ+VGD7Du9CRQIEWSZOZHzzvnZ4p2T4RU1zU=)
2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: QasPsaG7zsBW5DuWA/OqfP5Q0OkzjA8EueZ21Im5yKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:57:2a:17:72:9f:aa:49:00:b1:8a:d6:bd:1a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Validity
Not Before: Jul 24 11:01:13 2026 GMT
Not After : Jul 25 11:01:13 2026 GMT
Subject: CN=117a33274206e52df3f99d9e3ead6e774667d08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:11:1d:a0:a9:6f:84:cc:71:ba:0a:2e:32:49:
b2:ad:17:0e:69:0b:70:02:eb:cc:c0:84:5c:07:f8:
66:46:8a:15:d1:77:0d:77:dc:a4:b7:08:f5:e2:71:
f2:9b:1d:26:43:a6:1b:9e:8a:c9:ef:f5:cb:2b:2a:
34:4d:74:54:0b:b8:8b:46:ad:8c:f2:51:ce:25:80:
f9:7e:3f:3e:bd:e6:79:25:d5:33:7d:a9:e5:f4:82:
e2:54:60:9b:0d:b3:78:60:6e:e9:65:28:a8:d0:5e:
42:64:0c:48:37:41:ea:a8:a4:56:df:9e:0a:d2:b9:
52:d7:da:a9:e6:08:f3:45:ff:f5:6b:3e:6c:4f:18:
c4:9e:0d:08:26:94:ac:37:24:d9:21:d2:e3:60:01:
f0:fc:b0:e3:38:f0:44:02:9f:86:46:cd:37:0f:80:
e9:b3:68:4e:62:26:a2:1b:d4:da:d8:4f:18:aa:7e:
90:13:a8:1c:d3:90:ac:7e:0d:19:e5:7b:df:fa:86:
de:6c:1c:c0:55:92:e8:b9:bf:c0:bd:66:1f:51:ea:
74:2f:bd:98:87:a9:5d:5e:ff:85:fc:bc:6e:ed:14:
0b:4c:7a:5e:65:53:70:dc:38:cb:c1:f1:a1:12:27:
03:aa:8c:d3:db:82:7e:92:e7:01:c8:7b:46:5a:45:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7A:33:27:42:06:E5:2D:F3:F9:9D:9E:3E:AD:6E:77:46:67:D0:8D
X509v3 Authority Key Identifier:
keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ca:9b:e5:01:97:17:a8:10:9d:5e:1b:df:bd:d5:1f:38:88:
39:6b:7d:9f:06:74:75:bc:08:aa:31:70:65:03:01:09:02:97:
40:f4:e9:a6:2e:dc:99:bb:d7:42:0f:3f:52:91:24:29:50:f9:
0c:ec:42:82:f8:a8:f6:c3:41:3f:6b:91:75:38:2b:93:ce:30:
83:64:da:ab:50:6b:e7:06:d2:03:ec:7f:cb:a5:af:f8:7f:65:
79:de:92:61:92:cd:c0:a5:32:7e:00:fe:f2:f5:4f:94:7d:93:
89:95:4e:66:82:1c:87:99:d6:63:63:d8:93:6d:73:3d:69:cb:
93:f7:e0:62:d8:79:c6:d7:91:2c:36:0c:56:bd:a2:5e:68:b4:
5a:5e:96:27:92:92:c0:a6:07:1b:ed:2c:93:44:94:2a:19:7b:
78:56:99:f7:11:aa:5e:82:39:91:2c:d4:f9:84:f9:92:88:76:
e4:92:87:61:36:2e:7e:8a:40:c4:49:b3:7f:8f:34:29:41:6d:
64:b2:c6:d1:96:94:c2:35:e2:2d:f7:16:d3:d7:a2:6b:ef:2b:
60:c7:32:75:bc:70:35:97:c4:0f:b2:0c:88:94:67:a5:79:c0:
80:4c:9a:e6:7a:3a:84:77:bf:a5:eb:2b:32:04:1e:f4:a9:d9:
d7:14:e4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:28:44 2026 by rpki-client