Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
File: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft (raw, json)
Hash identifier: F0c6mBJmai6pWdC/4G6ujh4Uiu6OIs5pP2FzQ43CnUQ=
Subject key identifier: 0C:79:A9:56:E8:18:3A:D9:CA:3D:46:BE:F0:BC:59:44:DE:5E:47:D6
Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
Certificate issuer: /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Certificate serial: 019F9059F379F07BFC2097689E058ECF6F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
Manifest number: 154B
Signing time: Thu 23 Jul 2026 19:00:41 +0000
Manifest this update: Thu 23 Jul 2026 19:00:41 +0000
Manifest next update: Fri 24 Jul 2026 19:00:41 +0000
Files and hashes: 1: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl (hash: 9WZYehA1C4eYJyRPelroAe0niWZHadcstoOTCZ5/Cas=)
2: oIFDamMFsaAUv3_QXk-wIETOecI.roa (hash: R//1hT9e0Lq7We4cMvCWKxDCXrukd4OXlMU1MKxnozg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:f3:79:f0:7b:fc:20:97:68:9e:05:8e:cf:6f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Validity
Not Before: Jul 23 19:00:41 2026 GMT
Not After : Jul 24 19:00:41 2026 GMT
Subject: CN=0c79a956e8183ad9ca3d46bef0bc5944de5e47d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:5e:ab:6e:28:95:ff:8d:e8:2a:3f:79:02:
46:96:00:5e:3d:82:d2:ff:ac:a1:b7:35:ed:66:5c:
b0:bb:eb:69:91:10:90:88:fc:0a:fb:0a:2c:13:49:
79:6e:f4:5e:cc:5d:84:cc:71:f6:ba:e0:f7:1f:25:
2b:97:7b:44:1f:92:a1:1f:73:c9:1a:8d:85:ab:2e:
d8:12:24:73:0b:de:36:9b:c6:8e:16:5b:46:d5:04:
eb:61:6d:51:23:2e:1b:2c:ed:8a:06:45:05:57:a4:
b4:10:21:58:f8:d3:49:e6:57:6b:51:32:a3:20:f8:
e7:e9:50:50:49:9c:68:fb:a1:e3:90:a7:6a:04:70:
7d:fa:6c:7f:4d:9a:56:d2:d9:00:d7:7e:72:3a:0d:
e1:f1:c7:7c:c4:7e:34:e3:d4:d2:23:d5:c5:62:24:
08:0a:72:bb:6e:db:0a:31:4e:d1:e0:9a:92:e3:9e:
07:4e:d9:bf:44:d2:cd:88:c5:63:33:0a:76:df:1c:
f9:0c:f9:32:89:9f:20:4a:c1:4b:71:d9:8e:1e:df:
21:1d:4d:f3:63:27:98:99:6d:ca:55:c7:b5:c3:7c:
cd:b4:09:42:7e:a3:fd:84:02:9c:c9:28:92:e7:b1:
81:e4:93:f3:4b:b2:4b:60:4e:b4:b5:5e:d4:83:36:
88:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:79:A9:56:E8:18:3A:D9:CA:3D:46:BE:F0:BC:59:44:DE:5E:47:D6
X509v3 Authority Key Identifier:
keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:61:3c:77:55:80:2a:e7:b2:4a:b6:88:c1:da:9f:73:fb:b9:
97:75:80:d4:1f:4c:21:d1:a9:da:e4:00:83:8c:d5:e4:25:07:
b1:0b:69:dc:f3:42:b7:f9:1e:45:ca:32:53:53:13:5a:59:9d:
3b:c0:2e:42:5b:26:67:e8:61:15:59:bb:7c:7b:af:52:a7:53:
e0:ae:5c:2a:0e:1d:b9:63:21:69:b8:a9:dc:29:45:6c:14:63:
dd:a0:4d:d0:ad:08:e0:72:5f:7b:c5:02:29:0d:28:61:f3:74:
69:3b:2a:33:50:3a:0a:2b:1f:f1:4b:a3:99:b2:f2:04:dc:62:
12:41:16:ef:58:47:60:48:27:cb:fc:23:32:a4:4c:7f:ad:c1:
4b:80:1c:7a:52:32:70:72:e4:0d:da:e7:fb:01:71:e0:06:32:
40:9f:83:66:92:80:10:c2:49:fa:90:ba:85:0e:85:61:60:29:
40:33:90:42:bb:5a:1e:5c:23:44:ab:1d:fe:3b:5a:a1:90:03:
b2:25:22:cf:a8:de:75:5b:f6:e0:a9:7f:2b:5f:48:7f:ed:76:
6b:1b:a2:2e:71:5d:a1:75:21:d3:3f:6c:74:e7:d5:76:e4:13:
98:a9:e4:40:34:6f:87:a2:f1:1a:27:18:a1:35:0c:64:1a:c4:
47:0b:fe:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:26 2026 by rpki-client