Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: cOz7uyjPjGUEusCL767C92xJOk9vsUbokzIJ9suq37Y=
Subject key identifier: 82:54:8C:B7:59:50:8A:A0:CC:1B:7D:1B:1F:81:79:F6:96:D1:CA:67
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 019F9090E7DAE077D01942F3423C64711508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 16F1
Signing time: Thu 23 Jul 2026 20:00:43 +0000
Manifest this update: Thu 23 Jul 2026 20:00:43 +0000
Manifest next update: Fri 24 Jul 2026 20:00:43 +0000
Files and hashes: 1: C3nc48r2b2USpSkgOVzgsEQF2h0.roa (hash: kvFI72ZsGMqBnEvEAYRTWIp6gxPL8rac8rSJwcsVy0w=)
2: XaIcpqpb27hhGRIZ8h_xuzKRev4.roa (hash: pQLbKPAj3ndWd5qjjlikkIwvz29S32Fkmehgv5Ouuf0=)
3: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: 62aS4v4FSuyLapIyXhud42zvnSbXd8p90VFOz0pdHPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:e7:da:e0:77:d0:19:42:f3:42:3c:64:71:15:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Jul 23 20:00:43 2026 GMT
Not After : Jul 24 20:00:43 2026 GMT
Subject: CN=82548cb759508aa0cc1b7d1b1f8179f696d1ca67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d1:a3:e9:78:c0:27:3b:f6:48:f3:38:32:bd:
ce:68:42:7b:d7:64:0e:a9:7f:d7:92:58:46:f9:ac:
6d:9e:35:d5:58:44:cc:95:00:55:4a:52:37:16:34:
c5:82:b9:19:61:bd:5f:55:e3:60:99:eb:0c:54:1d:
78:2e:62:8b:fc:ef:37:3c:e7:16:32:69:a9:c4:26:
7f:d2:a2:7f:aa:f6:49:22:d4:10:94:6a:db:8c:1c:
0e:ef:c8:72:1a:12:6d:22:00:60:ba:9a:5e:22:57:
ae:cd:c5:8d:d2:3f:7a:d5:4b:ec:6c:ae:3d:35:97:
40:2d:63:0b:fe:d8:64:e9:22:de:7b:1f:ae:82:82:
c0:ec:b0:38:8b:a0:57:66:cd:c7:12:87:18:c4:b8:
ad:11:51:70:67:13:70:4f:2e:d3:5b:5c:f5:59:29:
27:e8:5f:13:1c:2b:3e:55:f3:be:69:51:7b:a9:bd:
1a:e8:38:73:ab:0d:a2:d4:8b:b6:f8:ef:89:42:b2:
2e:3e:30:a1:d4:8f:88:9e:42:eb:ec:43:71:f3:14:
8b:fe:0e:09:1b:91:b6:94:1b:cc:9e:d0:6a:3f:15:
05:32:26:73:32:fb:55:ed:9a:48:78:dd:18:ba:ac:
b3:8a:47:ac:da:2a:5b:8d:57:a6:53:7d:d0:47:a9:
5e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:54:8C:B7:59:50:8A:A0:CC:1B:7D:1B:1F:81:79:F6:96:D1:CA:67
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:5a:17:6f:31:d1:2b:fe:77:14:41:8b:17:bd:06:c1:be:48:
43:b9:f3:db:da:0d:1e:b7:06:eb:3b:10:36:a1:1d:f5:f1:3e:
79:27:67:b7:4b:21:36:ca:c0:f1:84:61:7d:60:cf:6c:3d:5a:
72:1b:ae:b3:79:de:68:ff:92:f8:bc:d0:37:8a:c6:4f:d4:cf:
e4:d4:3d:a8:ac:d6:a6:f7:41:bf:e2:2e:42:68:ba:b7:c3:3a:
78:18:d4:72:23:8d:ae:c6:d9:06:b3:e4:88:c7:d8:fd:98:87:
b0:fb:8e:12:b5:aa:1d:86:13:98:57:6f:3f:b2:96:7f:b7:93:
4b:95:cc:61:c4:a6:89:6e:44:b0:5d:83:f8:ff:e9:e9:cb:8b:
d3:f1:96:f8:f2:c7:da:1e:a6:f5:b5:6d:8b:c0:5e:bc:8d:bc:
9c:6b:34:15:44:a5:3f:d5:02:5f:df:43:96:fd:67:3c:27:21:
ac:d7:b1:c6:24:7a:7b:4f:82:51:14:5e:ea:61:e7:7f:26:9c:
2e:d6:2c:6a:10:f2:b8:88:c4:66:92:d4:0d:fc:9f:99:42:69:
a4:69:52:97:1d:4d:ce:7e:76:aa:c5:c3:66:b4:d6:ef:c7:01:
9b:5b:76:c0:74:7c:28:ff:90:83:5f:62:93:cc:84:3f:2a:45:
b7:fd:33:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:54 2026 by rpki-client