Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
File: YGhXxDyh3wTLaaSgqshim98ydWs.mft (raw, json)
Hash identifier: 9V0jOdkM62tOFqiA36soEyOhDf0S2uTNvMMFM12RjRA=
Subject key identifier: D8:63:4B:42:AD:00:98:99:27:5E:0F:7E:DF:7B:FA:C5:1E:22:1B:0E
Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
Certificate issuer: /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Certificate serial: 019F9437278399A7B8213D3CECC3E65016C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
Manifest number: 167F
Signing time: Fri 24 Jul 2026 13:01:10 +0000
Manifest this update: Fri 24 Jul 2026 13:01:10 +0000
Manifest next update: Sat 25 Jul 2026 13:01:10 +0000
Files and hashes: 1: YGhXxDyh3wTLaaSgqshim98ydWs.crl (hash: cQZgBO5Rmw0FdrJcHH3sHeyetmddY44YoPlmNab+xiI=)
2: r07b59Kbc0tU4fUroKjDGDeksk4.roa (hash: VbjM5vBRkz4uK7ac3fSu6tjCMa1PBV229HM3K4xTekY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:27:83:99:a7:b8:21:3d:3c:ec:c3:e6:50:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Validity
Not Before: Jul 24 13:01:10 2026 GMT
Not After : Jul 25 13:01:10 2026 GMT
Subject: CN=d8634b42ad009899275e0f7edf7bfac51e221b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:d1:0c:02:87:26:0f:02:9b:ed:06:3e:fb:
9c:69:75:f8:2f:8b:c8:37:23:87:60:8f:e6:1f:1f:
b2:3b:ba:e6:7a:8d:d1:d0:1c:0e:94:48:a9:f1:39:
ad:60:a8:1c:8b:93:74:19:81:85:8a:a4:2a:0e:30:
97:00:2a:e5:4e:29:34:12:4a:5e:4a:d3:e6:c5:f4:
39:59:75:6d:89:7f:f1:72:1a:8e:61:e2:c7:c6:2f:
98:c5:e4:33:eb:69:c2:28:9b:9d:07:ef:77:eb:52:
d4:57:ea:99:d3:80:f1:9e:48:41:5c:45:39:03:ab:
b0:d9:5f:4a:5a:b2:d2:28:94:a9:46:d3:d9:79:09:
ca:b9:cc:a6:38:b4:21:e9:7c:c7:ac:78:c2:27:94:
fd:9d:4f:9f:b1:8b:92:2f:dc:f1:f8:cb:94:d2:78:
f7:b7:8e:16:54:43:67:d8:bb:74:63:5a:08:45:03:
0e:c8:dc:8f:be:52:91:62:85:5e:07:96:96:23:f0:
57:b6:50:de:8a:21:d4:29:04:34:b3:7c:1a:0f:b5:
c9:db:6c:3e:b0:46:80:ef:17:81:e6:73:7d:27:40:
1f:5e:7a:55:fe:d3:06:d1:b3:c3:65:7f:fa:d7:0c:
4e:80:c3:bb:c2:4c:a7:cf:f2:2d:db:7e:e3:56:fa:
1c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:63:4B:42:AD:00:98:99:27:5E:0F:7E:DF:7B:FA:C5:1E:22:1B:0E
X509v3 Authority Key Identifier:
keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:02:09:09:c2:6e:d1:f1:dc:fa:31:76:e8:e8:93:ef:37:bc:
38:a3:93:1a:d8:a6:fe:d4:3f:57:f4:99:c6:62:51:17:49:3b:
06:81:38:d9:e0:f0:56:12:d0:b0:1d:0e:46:4d:a4:a6:ec:8f:
ad:1a:b7:89:c6:f0:5d:c3:95:29:0c:68:b7:e9:6e:51:4c:83:
74:bb:1c:38:dd:06:08:f2:6a:db:c5:34:88:04:33:da:79:5a:
2a:f1:2a:89:27:7b:b0:35:2f:2f:5e:22:c8:36:e1:f8:b1:00:
ab:fd:02:a5:a6:b1:5a:b3:74:73:7c:c4:c5:9b:5e:32:37:be:
b6:01:a6:2e:2e:32:88:c3:18:fa:cd:b5:68:77:4d:b3:df:f5:
8f:c4:6e:df:a8:c2:b4:36:26:b7:34:a2:68:19:ac:4a:53:c6:
c7:0e:d6:85:5a:f4:dc:d6:dc:1d:93:bb:7c:af:6e:d7:fa:93:
03:6a:57:74:61:89:5e:ee:1b:9e:3a:9c:a5:15:41:9e:88:e7:
45:f5:43:f6:c9:9b:5a:8d:a8:ed:29:dc:e5:a9:22:43:d8:4b:
09:c3:55:a8:e5:68:02:25:a9:1e:ce:65:6f:54:3d:10:db:bc:
02:7a:3c:c9:23:60:c7:cd:3d:da:57:2f:33:5c:44:24:40:27:
f1:04:58:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:25:17 2026 by rpki-client