Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
File: ypAPHhHi0l0LIxatbgEmhIOayB4.mft (raw, json)
Hash identifier: bUZ4SrxmvwYrNVXfVMGjJTfiGJ4NZipjbyDWZ8cWpKs=
Subject key identifier: A6:05:BA:B3:DB:28:7D:FE:AF:A7:47:D1:2E:CD:BE:71:46:7D:2A:5C
Authority key identifier: CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
Certificate issuer: /CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Certificate serial: 019F91357E14D53F974F390C064453593E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 23:00:29 +0000
Manifest this update: Thu 23 Jul 2026 23:00:29 +0000
Manifest next update: Fri 24 Jul 2026 23:00:29 +0000
Files and hashes: 1: K2muBRhSzEeWwEOKyiaVJYw5K3c.roa (hash: 9FMIKD8yGkaykJTy68XJ8mxhdE87R0V7qtYcMc3oayY=)
2: ypAPHhHi0l0LIxatbgEmhIOayB4.crl (hash: BbESQ2l8p1QvrNWei9csV3qkn4HwJdS9HA8PVdKeWmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:7e:14:d5:3f:97:4f:39:0c:06:44:53:59:3e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Validity
Not Before: Jul 23 23:00:29 2026 GMT
Not After : Jul 24 23:00:29 2026 GMT
Subject: CN=a605bab3db287dfeafa747d12ecdbe71467d2a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:29:06:8c:8e:18:28:34:74:ba:a3:04:61:
19:7c:96:42:e1:9b:fd:4b:a6:d0:ae:94:23:00:10:
25:ed:30:0b:a0:bd:88:75:0c:86:a7:c6:12:d0:35:
97:c3:a2:ea:f3:97:aa:54:b3:cf:b6:3e:bd:f4:be:
fc:cb:a1:7f:92:97:f0:19:f9:6b:df:de:50:d7:e1:
b3:c1:e1:71:97:97:a2:d2:5b:a5:a9:79:c5:47:06:
44:10:f0:6c:f1:6d:fe:22:88:f5:8f:b3:de:6f:e5:
2e:70:22:2e:24:da:17:1c:9a:98:3b:f9:a5:b0:ae:
49:97:f2:33:a5:9c:a2:bb:be:76:3f:3b:ab:83:57:
89:9e:2f:fb:de:f4:c3:52:c2:7c:60:a5:36:2b:91:
87:60:1b:8c:36:e1:6c:6f:40:30:ad:cf:90:49:9a:
ae:db:89:aa:44:31:8f:9a:31:c1:3f:bc:c0:0e:bf:
b2:3d:f2:40:f5:b0:04:e4:e0:de:97:20:86:70:8c:
01:f9:fb:53:14:5f:cf:1d:ae:d8:9a:da:b5:08:6e:
e0:02:35:ef:69:d2:b7:fd:90:3f:65:0d:a8:b2:9d:
e2:cf:de:9f:12:4c:a2:ef:13:a3:83:b9:ed:f6:65:
2d:f2:b9:39:3f:94:f0:b5:3c:36:48:07:29:76:47:
81:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:05:BA:B3:DB:28:7D:FE:AF:A7:47:D1:2E:CD:BE:71:46:7D:2A:5C
X509v3 Authority Key Identifier:
keyid:CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:62:88:8d:9f:60:3e:11:e5:4b:f9:e8:0c:46:0d:d4:c2:6b:
1e:6b:d4:7f:05:67:73:f4:f1:e6:35:d8:1c:cc:1a:26:37:3c:
56:6f:b7:78:2f:1b:22:14:ac:67:24:4d:61:d5:e3:70:07:fa:
31:bd:b1:15:96:c7:d5:d3:65:84:98:62:92:ef:cd:bd:e4:4c:
cb:df:a0:49:60:aa:11:2b:e5:df:56:ef:c8:39:87:4f:e1:29:
02:40:66:0d:3c:ee:24:87:df:7f:18:77:fe:6b:db:a4:b9:c3:
a6:dc:be:10:79:0e:65:af:26:f5:a3:1e:59:3e:3d:b5:ee:24:
ba:e2:f9:6e:2b:e3:a5:d4:f2:67:bf:80:7b:6a:0c:03:48:e0:
67:be:e4:57:28:97:b7:7b:7c:74:bd:37:92:5e:84:45:fb:5d:
a2:71:34:b2:9a:d1:f1:20:bc:a5:3f:f6:0d:47:63:96:2d:c0:
98:ac:8a:5c:cb:51:9f:0a:91:17:1c:36:be:74:c0:df:6b:b7:
0d:6d:79:fc:d0:6f:d9:87:8f:df:e6:93:27:b1:91:d2:08:23:
75:01:78:40:4b:86:49:4b:3a:77:19:47:fa:49:d0:3b:9f:68:
57:01:90:5d:8c:e7:06:08:18:d5:09:25:b9:0c:3a:e4:48:ed:
ff:f6:32:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:15:52 2026 by rpki-client