Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
File: ylmb3Bz8eujML7oV_NgMoRc3hGc.mft (raw, json)
Hash identifier: DvNtCsK/q83UkJ3N9J7A3H/eIX8oRFlhuX00qiiRWOY=
Subject key identifier: 57:FE:85:BE:1A:75:01:4B:85:64:54:D5:05:21:72:4B:1C:17:A4:0D
Authority key identifier: CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
Certificate issuer: /CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Certificate serial: 019F965C3E1DC96D57684A5EA449305E643D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
Manifest number: 05E1
Signing time: Fri 24 Jul 2026 23:00:55 +0000
Manifest this update: Fri 24 Jul 2026 23:00:55 +0000
Manifest next update: Sat 25 Jul 2026 23:00:55 +0000
Files and hashes: 1: hLDJZ-V17lQ1uYy4Yb_7EyNt5EY.roa (hash: 0stvy4uT+ZzDa9Ceq2lwui9WwwpxCgyyC5wsX5cUjjE=)
2: ylmb3Bz8eujML7oV_NgMoRc3hGc.crl (hash: RSxgUa57RtpyEBYfJZSS8JO4T8019+t5yhUUR7Wu2Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:5c:3e:1d:c9:6d:57:68:4a:5e:a4:49:30:5e:64:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Validity
Not Before: Jul 24 23:00:55 2026 GMT
Not After : Jul 25 23:00:55 2026 GMT
Subject: CN=57fe85be1a75014b856454d50521724b1c17a40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:7a:a8:81:27:22:c0:e9:d4:59:6c:b9:bd:
dd:94:49:8b:d8:65:f9:c1:c7:92:62:1e:77:4b:ed:
c4:f0:40:c7:bb:80:4e:8a:5d:90:9b:84:2a:c9:61:
96:c4:0e:d1:ce:d7:3d:35:b2:86:f8:03:79:cb:12:
4e:33:e8:db:d2:51:4c:e2:5d:cb:4d:80:ae:1b:07:
32:b6:7e:08:8e:76:4a:1e:13:50:18:77:a1:35:97:
15:0e:e8:41:6c:9d:fe:c2:34:5d:66:d2:1f:fd:3e:
23:13:0f:d0:62:50:d0:fb:a6:85:e8:0b:05:69:53:
f5:16:1a:09:e4:19:ae:e8:0b:65:d2:4b:9c:8c:1c:
eb:b1:55:dc:12:19:22:ce:21:dc:c9:19:1e:33:62:
77:47:37:39:d8:0a:da:a5:1f:1a:8d:d2:65:68:8a:
13:12:17:b9:80:75:42:a4:1f:ef:c6:eb:2b:ce:c1:
c7:59:ae:67:46:f2:fe:f5:05:0b:89:28:e4:65:1e:
7d:99:db:a3:c1:a2:5b:50:ce:09:3a:72:f4:44:66:
ce:37:16:48:ee:16:33:ca:34:4a:71:b6:96:8d:00:
fa:df:bf:f0:5b:76:ee:9d:2e:15:7b:32:46:69:b3:
1b:60:27:fb:be:ec:54:21:f3:04:73:d4:39:fb:5b:
13:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FE:85:BE:1A:75:01:4B:85:64:54:D5:05:21:72:4B:1C:17:A4:0D
X509v3 Authority Key Identifier:
keyid:CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:10:b5:08:8d:c5:43:9e:4a:08:19:c2:64:a5:20:6d:08:81:
62:12:d5:35:a5:4d:a7:df:a8:88:9a:d0:c4:b0:9e:9e:12:59:
62:ce:ec:0b:1f:fd:2e:00:9a:e5:8a:9a:ae:0f:15:17:35:fd:
c9:d1:12:4b:d5:ec:84:bd:df:0d:ca:55:3d:f8:40:91:4a:5d:
d2:66:1e:78:74:0e:7c:12:8f:dc:e7:a4:e4:77:30:ef:83:61:
40:6e:50:57:08:8c:11:f2:3c:2e:fe:fd:35:bd:be:e4:06:c0:
cc:90:65:de:02:79:4f:2c:7f:cc:df:1a:4a:f5:4d:ee:aa:44:
30:c2:9c:08:ae:b6:39:bd:2b:73:c0:17:07:e7:4a:1e:57:5a:
fc:1c:a2:5f:40:01:59:78:78:66:d0:df:33:f0:5b:1b:38:13:
33:20:57:f5:c9:84:ea:45:0f:cc:b4:b5:f6:d1:c1:b8:33:8d:
6e:0e:22:47:e6:93:85:ec:b8:49:a2:0b:f6:d8:f9:8c:f7:8d:
a1:8f:83:ff:65:1f:f6:35:d3:9b:bd:d8:23:b2:77:22:c0:7c:
a2:fd:d7:76:b9:94:f0:c5:bd:3b:c1:43:92:b1:8f:31:12:c8:
cd:4b:9f:b9:18:a6:03:3e:ca:7d:27:b3:0a:fa:c5:a1:6b:70:
97:47:72:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:03:38 2026 by rpki-client