
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File: YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier: 2t7e856rWKcRnGoj6pbUdgJL4VsoNFxgU58Y1J6vvQw=
Subject key identifier: 8E:D4:00:81:BD:39:F5:85:99:AE:08:13:64:70:70:2A:1A:9D:9C:9A
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer: /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial: 019F94A43FC139CAADE22990E427D8A4E870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number: 0E53
Signing time: Fri 24 Jul 2026 15:00:19 +0000
Manifest this update: Fri 24 Jul 2026 15:00:19 +0000
Manifest next update: Sat 25 Jul 2026 15:00:19 +0000
Files and hashes: 1: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: SajWLmuagrPATApfqG0sMjBbS/8v+rjB6Q6pPhSd9d4=)
2: kGLxA9onzrf8JLssDr-KbBw0Iso.roa (hash: iCYCJqbAYcmF46KnTkB1atw07n5B8BjwCirxzmxkzlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:3f:c1:39:ca:ad:e2:29:90:e4:27:d8:a4:e8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Validity
Not Before: Jul 24 15:00:19 2026 GMT
Not After : Jul 25 15:00:19 2026 GMT
Subject: CN=8ed40081bd39f58599ae08136470702a1a9d9c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:34:98:a5:13:8a:c9:69:96:93:1b:1f:05:25:
6e:33:e1:84:cc:f5:47:d9:de:33:53:79:7b:23:df:
0e:fc:87:40:88:f4:df:0f:f2:6c:4c:49:95:c5:2f:
e8:90:cf:54:dd:d2:d0:b6:35:b4:68:74:19:fe:a5:
27:de:1b:32:f5:63:8e:cc:59:d5:a0:b0:df:a9:55:
6c:5a:f6:ea:fd:33:6a:a2:37:2c:22:9e:ea:d1:b6:
08:1a:83:1d:f6:67:c1:1e:d4:ed:38:42:f3:63:43:
01:2a:11:62:1d:80:3f:89:ad:f4:c2:37:03:65:65:
cf:a4:2c:db:d3:8d:d2:98:4f:bf:05:41:44:d8:5a:
c9:be:22:de:b8:c0:92:2d:ab:a9:13:c6:ed:c7:b9:
b8:a4:0c:45:72:e5:1a:82:0b:af:c4:9c:5b:e6:d4:
7c:27:54:11:f2:2c:55:ce:84:d8:e4:b3:49:e8:81:
ed:a4:64:bd:41:05:ba:be:a0:b8:d9:18:60:7a:2f:
9e:aa:ac:51:b1:17:a3:c9:e4:b6:25:6e:f0:ef:c3:
ac:77:ad:0a:83:9d:4f:ec:7f:8b:e7:c0:8c:e6:92:
48:9f:da:8a:9d:12:61:b0:b8:ba:1a:4f:73:07:d6:
7e:f5:4b:62:d3:e6:c1:08:bf:39:72:5d:17:d1:4a:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D4:00:81:BD:39:F5:85:99:AE:08:13:64:70:70:2A:1A:9D:9C:9A
X509v3 Authority Key Identifier:
keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:93:57:c4:fc:da:de:09:77:98:71:19:f2:37:9a:55:d8:72:
c3:58:4b:ab:f6:26:d1:e7:36:8b:67:54:55:b7:7f:de:95:8c:
28:6e:d4:ad:0f:6c:4e:80:74:00:c0:e7:4f:6c:42:ea:f8:26:
1b:4b:4b:71:8f:b0:20:e9:fd:4e:58:d9:6c:c9:55:73:2e:ee:
2d:db:c7:d8:25:39:26:26:79:40:52:cf:aa:1c:d1:e1:af:53:
6d:62:b5:8d:a5:13:56:7e:1b:2c:8e:ce:93:a6:8c:e6:b8:18:
32:68:99:91:2e:75:72:b2:d4:9d:0c:12:78:02:c8:ab:91:90:
a1:72:a0:f1:12:f6:19:c6:cd:00:0c:dd:8a:a6:f9:47:b0:0e:
aa:14:ec:44:29:e8:23:b1:0d:85:22:07:b5:24:84:21:27:76:
e4:7e:bd:87:1d:08:89:11:07:2d:4d:1d:49:65:e6:45:55:c9:
1d:4c:56:e1:24:21:13:40:38:ac:ac:65:f5:40:c0:7a:ff:ab:
39:39:01:ad:6d:78:f5:f4:52:4c:ef:6f:68:af:60:df:98:97:
18:c5:fa:14:91:28:f3:24:b5:b5:2b:cd:62:2b:5d:9f:6c:2b:
d5:9a:a5:5e:40:1c:ca:d6:33:cb:df:51:c8:10:5d:bc:ff:01:
4e:6c:15:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:54:41 2026 by rpki-client