Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: +FMks2jfmutNvJg1XXJctcBbAABH+5D6TIWgaI/gZWo=
Subject key identifier: 93:1E:04:46:7F:ED:88:71:1D:E4:A7:37:F1:B5:93:50:41:3F:DC:08
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 019F8FEC2273CEEBC01B27C334583709548E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 0D59
Signing time: Thu 23 Jul 2026 17:00:44 +0000
Manifest this update: Thu 23 Jul 2026 17:00:44 +0000
Manifest next update: Fri 24 Jul 2026 17:00:44 +0000
Files and hashes: 1: 1JivGUDnbvvAALdPLWmN3LnRPUU.roa (hash: CFdTUCMz6IqAjDVASJIEHVZNQPU5MvWCKn0J2DxXzcY=)
2: mDQRP_41vCpTv8zEQtwrpsMlm6o.roa (hash: wP6wE0fEKqnHP4YtC1NM+FHDVJbGLAERsWmmC8DpUK8=)
3: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: UyfAN73Fauek63IllccKa8OyZ3BSLyierWv7CK89MEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:22:73:ce:eb:c0:1b:27:c3:34:58:37:09:54:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: Jul 23 17:00:44 2026 GMT
Not After : Jul 24 17:00:44 2026 GMT
Subject: CN=931e04467fed88711de4a737f1b59350413fdc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:53:72:8e:5b:30:e4:9c:79:14:03:a4:de:83:
ed:e2:10:7a:25:5b:2c:72:a6:40:da:f0:9a:e0:fd:
e5:72:33:8a:2b:d8:4c:74:af:83:6d:18:e2:05:2e:
d9:fa:32:3e:4b:28:ab:49:0b:96:88:7f:1a:6c:f4:
0f:0e:65:fb:f8:d3:69:d0:50:4c:3e:bc:96:b1:a6:
f4:bc:82:5c:f6:a8:1c:89:ea:bd:f5:26:7a:6b:5f:
03:15:2c:9d:cc:3a:ea:5f:5a:12:fe:d3:a9:76:f8:
4b:c1:88:c7:6b:62:44:82:9f:1e:33:f1:17:56:90:
a1:d5:5c:29:7f:3e:98:d7:3d:9b:2a:89:43:fb:98:
5d:43:c2:b2:ee:8d:b3:2b:37:05:9f:30:19:0b:1a:
fd:5e:0c:99:27:14:59:40:1c:ea:b9:35:4a:26:19:
18:ca:23:d1:d0:9a:3a:39:25:47:00:6c:40:3a:3a:
70:c8:27:98:65:76:2d:d0:8e:e6:66:1c:24:b2:81:
35:bc:1a:90:89:df:13:a3:f1:cc:92:5c:20:cd:43:
74:d0:1f:40:ae:75:c0:39:8f:f3:91:19:7d:b4:1a:
e4:d5:1f:a4:42:f0:5d:fa:77:75:0d:70:52:62:1c:
75:c1:de:60:fe:68:41:c3:8e:e5:d6:69:1c:66:02:
23:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1E:04:46:7F:ED:88:71:1D:E4:A7:37:F1:B5:93:50:41:3F:DC:08
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:df:00:61:70:5a:c7:25:2f:e9:0b:f2:4e:6f:55:e5:af:5f:
4e:03:26:ba:d2:cc:b3:f2:66:ed:49:35:84:75:1a:cf:08:33:
78:fc:0e:74:b3:14:c1:d0:6b:69:96:1e:b7:ff:41:13:a0:63:
cd:98:f6:e2:60:eb:6d:ad:8f:c3:f3:a9:c7:91:93:52:55:4a:
8f:3c:c1:87:d0:f5:a5:64:1e:c2:7a:e8:43:ad:4c:b7:c2:0a:
66:14:86:a7:3e:bc:f9:6d:0b:19:ab:20:c7:99:14:f5:43:13:
94:39:b9:f8:8c:52:04:9a:ca:22:74:4c:98:c5:ae:ad:5b:40:
5c:96:e9:50:e3:15:2a:7a:bf:51:fe:5f:4f:6f:97:5a:a4:08:
24:d5:b9:40:5f:e8:fc:6b:dd:28:d6:7c:db:94:1b:99:4b:cf:
f4:2a:6b:48:7e:1f:60:88:19:0e:ea:cf:91:24:49:fa:5d:a6:
57:eb:fc:7f:76:99:68:f3:a0:a0:73:07:83:d4:a6:cc:b2:19:
27:32:0c:21:5a:ee:3e:ec:dc:60:04:24:73:2c:22:88:88:48:
bc:a4:94:3a:ad:50:6c:04:19:80:2e:69:cc:2f:8a:36:6a:87:
97:5e:d0:f0:93:59:2d:97:87:89:4a:b4:7e:d1:73:33:a0:55:
a0:30:48:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:43:54 2026 by rpki-client