Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json)
Hash identifier: z9l2w3s4ttCDRoU9U9mBg0LpTZAvWj1ViTAGJN60YNE=
Subject key identifier: 36:75:18:6B:E6:13:99:6A:73:BD:ED:38:90:63:FF:11:F3:38:CF:27
Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Certificate serial: 019F95121830991040F887570400C2655AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
Manifest number: 16D4
Signing time: Fri 24 Jul 2026 17:00:18 +0000
Manifest this update: Fri 24 Jul 2026 17:00:18 +0000
Manifest next update: Sat 25 Jul 2026 17:00:18 +0000
Files and hashes: 1: dm05ruUJUy3EB3fTlfRp28bRVHs.roa (hash: HKoH3W2n4KC9D9ffQJl5txh8NMSU8l6yIctHVJM24eA=)
2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: Pn5rwfMMBCPGiN6VfsTCO+tc/OHD/3s84DZx7Gi9hwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:18:30:99:10:40:f8:87:57:04:00:c2:65:5a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Validity
Not Before: Jul 24 17:00:18 2026 GMT
Not After : Jul 25 17:00:18 2026 GMT
Subject: CN=3675186be613996a73bded389063ff11f338cf27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:af:96:61:93:11:a7:50:18:e5:06:92:7b:59:
5b:aa:4d:e7:59:b1:4c:95:2a:02:79:21:37:ee:9a:
27:d3:89:ba:6c:76:92:99:a4:3e:37:42:98:50:ab:
01:c3:9b:44:8f:65:08:1d:e6:43:6c:6d:c8:8d:51:
c5:83:99:70:6e:07:00:af:ef:a3:98:a6:b6:cc:44:
53:33:a1:96:51:4b:b6:b8:52:57:fb:7d:49:50:4b:
ec:bc:3a:aa:f4:8c:47:be:5a:61:40:bb:89:d8:4e:
10:3c:4e:57:11:4f:14:1f:00:a0:54:a2:45:ca:9c:
f1:7c:97:e6:32:f5:23:4b:52:57:78:a4:d7:50:25:
3d:22:34:8e:af:2a:74:b1:65:55:1b:24:ff:18:8a:
03:e5:71:4b:33:e1:19:cc:f5:d0:44:d7:8d:bf:36:
42:9b:87:ca:0e:a4:ba:2c:be:22:22:df:dd:03:ae:
c2:03:a8:14:77:e0:8a:4e:7a:d8:b4:9a:35:6a:ac:
dd:55:bd:38:61:0d:0a:48:0d:43:7c:9a:63:0b:9a:
47:a2:99:65:27:2f:40:d2:d1:59:7f:98:2e:60:34:
ed:a9:11:96:3f:91:8e:3b:81:4e:ea:d1:cd:fb:7e:
76:a5:22:2b:97:0b:9c:c0:a1:e6:c1:b0:c1:2c:3a:
81:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:75:18:6B:E6:13:99:6A:73:BD:ED:38:90:63:FF:11:F3:38:CF:27
X509v3 Authority Key Identifier:
keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ff:80:b4:25:14:09:02:ef:bb:38:13:f0:bf:e0:7c:5f:a0:
73:10:72:33:8d:cf:ad:5b:ff:17:1f:0a:79:1e:6a:93:bf:27:
90:b1:00:b5:ce:14:e4:bf:c1:b6:f3:2f:1d:93:6a:f2:77:24:
8a:2d:7e:9e:93:5f:7e:6b:f0:97:ad:03:1c:41:fb:48:1b:46:
d8:90:56:2c:90:67:bd:3e:78:72:ff:67:e7:86:42:19:57:50:
d1:3e:75:1e:b2:02:4f:c1:bb:b0:58:13:4c:8c:91:f7:25:d4:
42:1e:77:8c:95:2e:95:a8:f5:26:77:cf:68:99:1a:5b:57:4b:
e0:01:f3:ee:dd:a5:2e:82:0c:2c:b0:90:ec:34:ce:42:83:a8:
1d:d7:63:da:d3:17:8c:78:98:ab:e5:43:b6:74:49:9c:95:2b:
41:79:bc:ee:83:27:b7:db:bb:8c:63:30:48:6a:e7:d7:f9:c9:
b7:b7:7a:d1:d2:f8:c5:e9:c4:a2:2c:0b:a8:78:a0:d3:ff:2a:
c8:32:cd:7b:4a:78:91:cf:73:02:24:72:bf:f5:6d:91:47:ad:
63:9b:09:fd:ae:39:fb:c5:74:cc:e6:ed:2f:cc:cf:4c:a2:66:
d9:46:51:21:c6:75:e4:33:84:0d:4a:b3:37:3e:31:0b:fd:e0:
19:b7:9c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:14 2026 by rpki-client