Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
File: YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft (raw, json)
Hash identifier: qlX/2tPtdHJY3HNazhhXQOcWJb2McnBMJLhVeyHgNQg=
Subject key identifier: 39:D7:59:7B:04:86:06:0E:24:F7:FF:03:5F:15:8F:A5:01:8D:79:9E
Authority key identifier: 61:F5:FB:83:DA:45:58:46:EA:64:1A:A7:21:11:C5:FC:2C:7C:46:83
Certificate issuer: /CN=61f5fb83da455846ea641aa72111c5fc2c7c4683
Certificate serial: 019F92114DB42C9D5744EDCF8495CE5B125D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
Manifest number: 8B
Signing time: Fri 24 Jul 2026 03:00:35 +0000
Manifest this update: Fri 24 Jul 2026 03:00:35 +0000
Manifest next update: Sat 25 Jul 2026 03:00:35 +0000
Files and hashes: 1: YfX7g9pFWEbqZBqnIRHF_Cx8RoM.crl (hash: wTn8g4pB6kxL3gx7wlJKpoxoCa5zIBt8ky9r+yEFuH4=)
2: r4vw3CV_1lGW-7JvXgWzIRjbm3U.roa (hash: 0TvJ5qpmjC4SexSyQHzjCW5fHWTpVt06kKMKKnnsoV0=)
3: w-zL9cm1eAuLHEkbGACu_Uty4Ws.roa (hash: 4C8sJjkhX9FkHPcP/da4C31h5T/IA24CkXSEegBHM68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:4d:b4:2c:9d:57:44:ed:cf:84:95:ce:5b:12:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f5fb83da455846ea641aa72111c5fc2c7c4683
Validity
Not Before: Jul 24 03:00:35 2026 GMT
Not After : Jul 25 03:00:35 2026 GMT
Subject: CN=39d7597b0486060e24f7ff035f158fa5018d799e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:eb:9e:8b:9e:30:ea:71:3c:3e:af:de:51:
d0:42:de:a6:00:e7:a7:dc:d6:de:77:f7:df:b2:a3:
38:4b:ec:fd:b5:8e:0e:55:a3:a0:a8:94:a7:55:25:
18:63:92:50:61:7f:fe:2e:13:ef:2e:15:8d:5d:4d:
e8:be:6a:a5:55:2c:c7:02:70:f3:e7:0f:1e:b2:04:
0d:90:81:6d:94:e4:a1:57:d7:cc:3f:c2:e0:fd:bd:
5f:26:c0:18:e5:d1:cb:7e:69:0d:f5:fa:55:9a:9d:
34:ca:52:7d:88:e9:bd:45:dc:63:84:25:c8:5a:0c:
e7:3e:a9:6a:20:a5:80:5f:07:e7:c9:b0:ee:70:a0:
ee:c6:aa:04:0d:43:0c:0f:eb:89:5a:ed:d5:a7:9d:
70:e6:80:27:a9:4e:e7:5f:1a:c2:3a:96:f3:f6:c8:
86:93:2c:b1:ea:0d:7c:98:1b:7a:cc:06:8f:21:22:
a0:ca:c9:3a:81:9f:43:58:37:85:df:c6:20:f3:9f:
67:6f:45:88:40:b9:76:55:08:48:d7:f2:60:fb:3e:
a9:d5:3b:ab:97:9e:41:af:83:80:b1:60:b2:2d:b4:
78:84:d0:5b:8e:f3:00:27:43:b8:a0:ec:cd:5f:f6:
5b:84:50:ce:5f:93:39:16:dd:a5:8b:1f:82:04:79:
d5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D7:59:7B:04:86:06:0E:24:F7:FF:03:5F:15:8F:A5:01:8D:79:9E
X509v3 Authority Key Identifier:
keyid:61:F5:FB:83:DA:45:58:46:EA:64:1A:A7:21:11:C5:FC:2C:7C:46:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2d:13:3b:cb:92:0c:d9:b5:0d:7e:0f:8e:9f:3a:80:b9:f7:
e8:84:eb:51:65:bb:79:f7:17:ec:28:6c:f1:b4:e2:db:0f:b5:
10:5c:c9:fb:6f:50:fb:6e:aa:02:4d:1b:81:c9:3b:56:fe:b0:
93:7c:1a:2b:3d:b6:c5:84:c4:02:d9:33:ab:91:c6:08:14:b9:
c2:02:e8:4f:7d:bc:06:f2:18:0d:7e:8a:ea:29:f9:e4:e3:0c:
23:f4:89:e6:04:6b:7a:ed:ed:66:59:dc:c1:cb:94:42:75:29:
9a:a9:65:c8:cc:97:dd:f3:d5:f2:a2:81:1d:d7:50:05:70:77:
5a:d7:aa:d0:a1:d8:26:95:21:72:da:4a:b8:f9:b0:10:d4:4d:
c7:b7:81:c3:d8:35:63:ba:5b:60:ef:a6:0f:0f:cf:2c:7d:95:
05:68:ac:bd:a0:fb:25:99:8f:93:8d:0c:09:cb:4c:6d:83:ae:
c3:92:87:5a:b6:e3:69:fa:f5:13:6c:1d:3d:25:05:3b:07:47:
53:81:0d:88:17:e7:39:e7:30:0b:1e:7f:b8:e0:55:81:2b:c8:
ae:c1:d5:b7:35:49:86:c0:ca:a7:ec:d7:17:c3:c5:05:1e:f9:
94:63:45:bf:a6:a4:89:e4:27:e8:6c:52:6a:f2:d1:b1:f9:93:
9d:45:87:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:26 2026 by rpki-client