
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.mft
File: YYYvsG8cKTBFdgzpj10gAuNd6zg.mft (raw, json)
Hash identifier: EJ36WJRABD1rjx15Iiqv9Up+W891CCuc3VGrxXidkbc=
Subject key identifier: 5F:21:9E:1A:A3:69:46:23:21:53:B8:A1:DD:9B:4B:19:D9:3A:A5:B5
Authority key identifier: 61:86:2F:B0:6F:1C:29:30:45:76:0C:E9:8F:5D:20:02:E3:5D:EB:38
Certificate issuer: /CN=61862fb06f1c293045760ce98f5d2002e35deb38
Certificate serial: 019F90C80F8DDD4F22645EE7AB8BDDC2FD64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYYvsG8cKTBFdgzpj10gAuNd6zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.mft
Manifest number: 85
Signing time: Thu 23 Jul 2026 21:00:57 +0000
Manifest this update: Thu 23 Jul 2026 21:00:57 +0000
Manifest next update: Fri 24 Jul 2026 21:00:57 +0000
Files and hashes: 1: YYYvsG8cKTBFdgzpj10gAuNd6zg.crl (hash: NDGrQEJpherHdjbSPhYdnp4/Eddcsy2zOFwghhsJpM0=)
2: qHCpijfdc8k5y0Zn9AxU7VJ5dr4.roa (hash: 7b7QR3OS+ILGRcJ7amN0EllvwZEFj+J1VkU+kfBrkF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYYvsG8cKTBFdgzpj10gAuNd6zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:0f:8d:dd:4f:22:64:5e:e7:ab:8b:dd:c2:fd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61862fb06f1c293045760ce98f5d2002e35deb38
Validity
Not Before: Jul 23 21:00:57 2026 GMT
Not After : Jul 24 21:00:57 2026 GMT
Subject: CN=5f219e1aa36946232153b8a1dd9b4b19d93aa5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:69:7a:93:c6:d1:b8:a5:47:4f:2e:62:93:08:
3f:74:b4:c7:7e:6c:c4:65:86:73:d8:37:f6:d6:7d:
7d:b7:55:f9:0c:cb:85:12:62:76:81:59:e9:cc:9e:
af:0c:88:f3:a6:47:c6:01:1c:af:44:1c:90:12:f8:
fa:18:e8:45:2a:95:bb:23:8b:10:d2:4e:f9:b1:ed:
7d:6f:ab:eb:6b:95:a9:f7:83:ed:83:d6:75:4e:e0:
d3:48:6d:75:ae:78:19:f7:88:eb:6c:6d:55:c1:5d:
5a:15:0a:ac:c0:c0:b3:0a:dc:8c:40:9c:4c:d6:56:
77:6d:23:f1:64:a0:b8:49:a1:56:8f:94:db:f1:c7:
7f:ea:f1:3a:3e:55:b9:61:57:86:d1:30:e0:d3:8f:
59:04:1f:ca:37:ac:1b:3d:f0:97:4d:29:19:9d:58:
32:5b:65:a9:08:42:cd:78:b0:21:a0:b8:a3:7c:23:
53:6b:ed:e7:d6:eb:ea:1d:62:c1:11:c6:0a:f3:d7:
98:d9:11:2d:44:c4:42:e5:ff:8b:3c:71:38:41:30:
ff:f2:14:0c:e4:7c:16:12:d5:0f:65:9a:c9:85:11:
0e:6e:8d:f2:06:58:fb:01:aa:b3:0e:f8:89:82:d0:
69:8d:8c:f5:80:78:bf:5b:64:de:1f:64:af:fd:05:
49:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:21:9E:1A:A3:69:46:23:21:53:B8:A1:DD:9B:4B:19:D9:3A:A5:B5
X509v3 Authority Key Identifier:
keyid:61:86:2F:B0:6F:1C:29:30:45:76:0C:E9:8F:5D:20:02:E3:5D:EB:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYYvsG8cKTBFdgzpj10gAuNd6zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d2:ff:2d:fc:42:17:e7:13:ed:18:0d:75:bd:91:eb:87:89:
b2:e8:55:bc:45:2d:1d:43:46:69:32:1a:8c:b9:fc:ce:ce:16:
9c:79:f4:e3:af:03:5d:f1:82:e9:e2:be:a3:3f:c0:df:73:3c:
65:8b:01:74:b3:b9:90:3c:b8:9d:af:2c:f8:e3:f0:93:3e:f9:
0f:e7:48:c8:a4:f4:7a:d7:18:1d:00:60:91:08:0c:30:a5:25:
a3:4f:e2:87:c8:37:03:3b:d9:c6:b0:bd:32:6e:e6:dd:60:57:
f4:24:d3:de:93:9b:ff:21:4f:e2:d1:f0:48:3d:0a:7d:77:aa:
62:83:ef:86:fc:88:86:36:0f:24:fa:70:03:77:c7:f4:96:22:
d5:2b:4a:44:77:5d:fa:ab:98:bc:ec:06:25:00:da:91:54:bc:
c9:3d:6a:b2:c9:89:ff:75:8a:2a:89:a6:b9:d3:6f:21:59:23:
51:71:1c:fb:77:5c:e7:3e:d2:3d:00:9c:85:32:e8:dd:06:3e:
9f:f5:44:31:79:0e:77:45:8b:64:1e:56:37:98:5d:71:3e:b1:
9f:9e:49:1d:7f:f1:5d:c2:1c:62:71:6c:c9:e7:56:2d:d1:17:
9b:ca:a4:fe:c6:85:6a:e6:15:62:f0:27:7d:4c:67:86:d4:09:
1f:2f:ef:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:07:46 2026 by rpki-client