Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
File: YET26nnk4qPgKos47QzTpAWROKw.mft (raw, json)
Hash identifier: 0TRQGqJ/Xq6UuZA92XcJiOOj6YWSdifjxIWyiX4RnLg=
Subject key identifier: 9A:07:C3:FC:CC:97:13:4C:3A:1E:F5:11:59:E4:2C:08:0A:9D:2D:D8
Authority key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
Certificate issuer: /CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Certificate serial: 019F913573C78D30D64888D0FEA45AB5B58B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 23:00:27 +0000
Manifest this update: Thu 23 Jul 2026 23:00:27 +0000
Manifest next update: Fri 24 Jul 2026 23:00:27 +0000
Files and hashes: 1: IPSLN6U-mPgMx0jYi_ORZZDwgdQ.roa (hash: 9nBExfSnL3g+4CNDTe8481JrkpEVyvy2139EXebjOIs=)
2: YET26nnk4qPgKos47QzTpAWROKw.crl (hash: l1uIdBvvMzJQBNqlIlWB+oHz8KTzOldK02ytenaNfMo=)
3: vNHV1DYtOsfUinz5gwCFoBzKiIg.roa (hash: OIxUV31cdJf2l/w+qSDbXSkKEcQlTRfi/zGOENFvc+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:73:c7:8d:30:d6:48:88:d0:fe:a4:5a:b5:b5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Validity
Not Before: Jul 23 23:00:27 2026 GMT
Not After : Jul 24 23:00:27 2026 GMT
Subject: CN=9a07c3fccc97134c3a1ef51159e42c080a9d2dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:ad:85:b1:f1:e1:76:b5:16:55:61:84:88:
a0:67:19:18:a6:36:01:2d:29:db:65:64:16:4e:45:
93:30:7c:c7:78:3a:79:38:c4:a9:f9:9c:af:c6:e1:
99:1a:a3:e6:43:75:6d:5e:54:00:24:6c:db:bc:66:
d8:c4:67:5c:98:33:de:da:8d:f6:d1:78:c0:15:87:
f0:9a:78:20:eb:f6:09:e9:e5:4e:d0:75:72:e1:a3:
56:07:91:aa:2a:6a:10:e7:fe:76:41:81:8a:8d:56:
71:8d:e6:5e:4d:51:93:fd:d1:7f:e7:eb:de:ce:75:
3c:af:69:bb:8d:a6:c3:fc:aa:55:11:34:80:0e:ce:
a4:ea:fb:0b:61:71:53:0e:dc:80:be:20:50:95:cd:
60:83:16:9a:a1:ea:49:62:d4:dd:1e:ba:11:ca:b2:
78:84:27:23:c8:e4:15:e1:f2:a9:8f:4a:d8:73:a2:
4d:7c:8e:55:31:4d:e1:a3:e9:14:27:32:a3:5e:1c:
4c:08:ff:d1:e0:46:1a:c0:f0:25:34:61:4d:c9:da:
c8:b6:4b:3c:23:ac:96:98:59:6e:31:76:20:86:25:
b6:b3:45:f8:8c:0f:96:4b:e7:a4:05:40:52:93:94:
f5:d1:e9:6a:6c:6c:2f:b1:0f:05:43:be:ea:32:c2:
46:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:07:C3:FC:CC:97:13:4C:3A:1E:F5:11:59:E4:2C:08:0A:9D:2D:D8
X509v3 Authority Key Identifier:
keyid:60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6f:3a:66:91:03:1e:fe:fd:01:01:6b:ff:57:aa:19:fa:2c:
99:0b:bc:1c:c4:96:f7:3a:59:b9:84:7c:7f:11:e1:f6:51:b6:
7b:20:d7:45:b0:04:ae:c8:6d:82:3c:3a:d0:ef:85:46:3d:4a:
27:9f:c2:c1:3a:50:b2:43:2b:5e:01:e1:5d:4f:f5:27:b2:b6:
df:9c:87:e6:f1:10:76:8c:02:c2:75:d3:1e:01:12:bf:58:ab:
90:a5:d4:0d:af:fe:c2:15:a7:13:f9:70:fb:43:0f:ea:bc:42:
5d:7f:bb:c0:d6:d2:6b:b1:31:e4:bb:00:19:14:3d:ee:93:9b:
92:09:27:78:e4:44:95:c4:90:2f:13:d0:dd:6a:b0:e9:c0:51:
c2:a5:6c:5d:c9:c1:0a:e4:1c:c5:27:e0:7a:91:59:0b:03:d1:
40:47:81:54:82:ff:15:3d:95:74:74:10:95:e7:b4:99:fc:fc:
2d:f0:16:9a:6e:dd:f1:58:cf:75:f5:03:91:1a:64:c5:36:67:
a0:25:48:0f:26:bf:2a:5a:26:01:55:02:a6:4a:4b:74:a9:c7:
ef:3c:96:de:87:5c:bf:85:e7:65:c7:7b:01:f2:c3:ce:22:0f:
b2:65:e0:79:c7:41:6b:e6:82:07:42:14:3c:70:42:96:58:83:
a6:c5:89:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:24:43 2026 by rpki-client