Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
File: yYra-x8x-YiapHNXkrbj20aTG7k.mft (raw, json)
Hash identifier: 6MLapbze3LG5RRzWopfmozS9jJA7sdSO//0ZFGjlzYw=
Subject key identifier: CB:69:92:68:40:83:36:BE:69:51:FC:3D:BE:ED:C3:B4:57:8F:EB:31
Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Certificate serial: 019F91DB2B3E27379914D1A788F76B645C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
Manifest number: 04D2
Signing time: Fri 24 Jul 2026 02:01:27 +0000
Manifest this update: Fri 24 Jul 2026 02:01:27 +0000
Manifest next update: Sat 25 Jul 2026 02:01:27 +0000
Files and hashes: 1: gnLcldm5nEk7VUfZ3ZCZ9CuTP_s.roa (hash: 9M0Ppv6WalIMgDZY/MAuUrb6XlVw4bEOTKI1qKmwlD4=)
2: vKRw2HUypzI_fLwgDuDJAjGJY-Q.roa (hash: kUjanpYMsskZ8DJFrlHn+4ejpbBtE2N86bbPjfXmLEs=)
3: yYra-x8x-YiapHNXkrbj20aTG7k.crl (hash: 7nRQLRbnhpyUWGB72nHFQC/9M7wNhdHszER63313pjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:2b:3e:27:37:99:14:d1:a7:88:f7:6b:64:5c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Validity
Not Before: Jul 24 02:01:27 2026 GMT
Not After : Jul 25 02:01:27 2026 GMT
Subject: CN=cb699268408336be6951fc3dbeedc3b4578feb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:65:3d:4f:d4:67:93:7a:d6:b5:9d:22:02:38:
66:41:2d:91:f5:87:c2:42:57:ff:cc:d3:9b:2f:7b:
bd:f4:20:bd:1f:22:6e:b6:5e:a1:18:94:1a:4a:b0:
c4:88:b7:11:86:4b:3e:a0:2f:aa:95:36:55:66:27:
ee:c8:31:48:09:67:62:77:d1:4f:7a:ea:fc:ca:a8:
d9:fc:5c:6a:fe:2f:7c:ac:e9:30:26:74:1c:7f:c4:
19:92:5c:ae:37:7d:48:dc:c1:0a:a8:3c:91:86:6d:
6e:5a:38:46:ea:34:63:6c:7c:30:4c:e4:f2:d4:17:
18:7d:e3:3c:4f:df:ae:94:4a:ff:53:74:f4:72:de:
ac:58:e7:2c:3d:be:62:ab:fe:3a:ef:1f:68:5c:8c:
37:ec:d9:88:ee:f9:7b:46:d4:34:6f:63:e4:ee:c2:
15:bb:3f:30:8f:29:fd:6c:37:b4:13:c9:07:04:f8:
36:90:b7:a2:e4:55:87:7d:06:bd:f9:4d:df:7c:93:
81:23:d1:94:ed:7f:d7:d9:ad:65:10:bd:c6:3c:6f:
1e:2a:d6:20:57:98:5a:22:ed:bb:e2:20:a3:80:49:
7a:ac:14:5b:cf:75:94:fd:51:c7:99:6a:b0:b4:08:
10:30:51:be:c5:1f:d9:35:14:a4:9a:31:46:4e:38:
6a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:69:92:68:40:83:36:BE:69:51:FC:3D:BE:ED:C3:B4:57:8F:EB:31
X509v3 Authority Key Identifier:
keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:69:d0:d0:28:a2:6f:d7:72:59:46:0f:2d:d1:76:46:b9:15:
aa:a9:e5:c8:c2:9a:de:5f:05:3b:81:cb:0b:9d:3d:4b:bf:a4:
0a:9d:0d:1a:c7:c2:2a:3e:56:b1:90:3d:d8:a8:b6:36:0e:17:
e3:03:db:e7:ca:28:a8:f0:1c:0f:dc:c9:21:76:40:63:07:6f:
4a:b8:b4:b8:9c:31:33:95:95:2c:fb:d3:f0:6d:52:2e:52:15:
5e:e5:49:fc:ac:f6:ad:b7:ca:49:c0:64:01:09:95:b0:dd:3d:
14:75:df:9b:8a:da:0d:a4:69:78:41:f0:a8:c2:b3:11:6f:d4:
9c:98:0c:29:88:7f:c2:7e:15:d2:6b:a1:14:db:aa:5b:07:53:
4c:e2:10:c5:8d:8e:f4:85:d9:d2:3c:9f:81:f9:70:a0:c7:2b:
ff:f0:46:46:bd:4f:55:6d:09:2b:60:f7:33:62:cc:64:f5:59:
a2:70:04:ec:c1:50:b0:32:dc:f9:8e:7b:81:86:a1:58:b2:1e:
57:d5:3c:6a:a4:52:64:21:06:a0:85:e8:56:62:c8:39:6d:fd:
16:8b:ab:41:f7:44:b8:a3:c3:12:e9:e6:6c:7c:c5:e5:7d:11:
9a:9c:76:f0:04:d8:6d:22:f4:92:35:51:fb:76:21:87:22:f3:
c6:f3:e9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:45:25 2026 by rpki-client