Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier: o/2AUJ5iNrfvz9i6mT6hyYg1PfmJbmcm6bZnFIA5IKs=
Subject key identifier: 46:45:AE:59:34:FA:91:EA:11:D1:42:08:8D:68:56:A9:13:02:2C:76
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 019F946E2D8EF28487FF533F25DBE856FCE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number: 0EB0
Signing time: Fri 24 Jul 2026 14:01:16 +0000
Manifest this update: Fri 24 Jul 2026 14:01:16 +0000
Manifest next update: Sat 25 Jul 2026 14:01:16 +0000
Files and hashes: 1: 1lPDb-Qc7dgd58_k0ugXvgO36w8.roa (hash: up0wKM+by5cZA7R34zmGPf+ho8Ei16Ys0MiWkd/R1jk=)
2: NbUyaKZBv1RnKePQIxmyxsT9zGw.roa (hash: YfuIIb8IL5a5Ql6qciTZgKEuG43i9WjmWByHoP25V3M=)
3: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: qK+kdvMmBqNcpcREiDk8KreQXWzoJAs3UjkUcs3gKK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:2d:8e:f2:84:87:ff:53:3f:25:db:e8:56:fc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: Jul 24 14:01:16 2026 GMT
Not After : Jul 25 14:01:16 2026 GMT
Subject: CN=4645ae5934fa91ea11d142088d6856a913022c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:2c:2c:4e:f5:7b:46:bc:07:b1:24:30:b2:
6b:93:da:54:63:41:5d:17:1e:61:21:0c:23:6f:da:
5c:d9:bf:de:c3:3d:20:ba:d4:cf:36:7f:d2:a8:f2:
cc:8c:ba:52:b1:2c:38:77:6d:6b:5d:ca:9e:1c:a4:
23:0c:2e:30:eb:26:0e:45:17:81:1c:63:b4:f0:c4:
8f:be:de:2e:76:c4:29:84:71:5a:b4:5e:ff:b1:3f:
f7:3c:fa:e7:3f:02:e2:41:8a:73:ae:86:55:3c:a4:
d5:44:3e:65:d7:d9:82:e6:03:dc:4a:f3:60:7c:1a:
e6:87:bd:2c:a6:62:72:79:24:e1:7b:8d:6e:aa:e8:
80:82:83:25:31:e1:bb:b1:73:a8:e9:43:bc:e5:59:
9a:a6:66:48:af:45:f3:c8:9a:11:b5:e4:68:21:6f:
de:e9:85:cf:56:3d:3a:44:4b:62:82:6b:4b:75:d3:
be:e0:02:5a:13:c4:72:0c:80:cf:f5:ba:be:9a:df:
e1:6a:02:69:67:98:e2:5d:1e:55:3b:ff:af:56:f2:
8c:8f:c9:3a:23:07:d8:62:e1:df:35:ab:aa:91:e2:
dc:36:64:dd:72:0c:ab:0e:36:5d:4d:de:f6:f9:07:
c4:e0:dd:c0:7d:39:08:42:99:b5:63:9b:2e:9a:a4:
fa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:45:AE:59:34:FA:91:EA:11:D1:42:08:8D:68:56:A9:13:02:2C:76
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:78:7c:66:1d:40:90:cc:6a:57:b7:02:f8:15:73:42:80:3c:
2d:7b:7f:71:d5:9b:34:b3:62:ce:e9:6a:18:b5:5c:c7:7b:c9:
d2:3b:a0:d5:b7:ce:97:61:d9:05:ba:0e:7a:28:f5:8f:01:9c:
e4:b5:9a:55:55:ce:0b:e5:44:e4:20:8e:f1:80:9a:5a:f2:56:
45:b6:45:46:14:7c:69:a5:40:aa:c4:12:2b:f6:0c:1a:05:8a:
f2:33:41:ba:5e:3c:fe:4d:c5:f2:f3:a9:59:59:8f:9b:b8:16:
de:21:a2:a0:c3:80:5a:59:21:90:d2:7f:bc:43:df:e9:d9:90:
6e:3c:28:12:7d:9a:29:b8:57:a8:35:e1:6c:e1:05:8b:c7:64:
ca:04:c5:1f:53:77:9b:24:c4:a6:85:fd:40:2c:5e:cb:6c:2c:
72:6e:da:60:75:bd:6a:e3:8a:31:71:2c:d0:b2:a2:24:2a:94:
c2:29:d6:c6:e3:93:8f:b6:3c:4b:d1:6c:08:84:27:5a:e9:51:
44:98:85:3c:08:13:55:38:bd:ac:2a:1e:6c:1c:80:9e:5c:38:
80:f4:5d:21:bb:d3:35:1b:77:e5:ee:4f:1f:d7:e7:50:db:32:
f8:d2:21:a7:76:80:50:26:44:ce:5e:b0:19:80:81:b8:11:53:
32:c6:6f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:09 2026 by rpki-client