Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: +ly579HMT5juoDIpWG3KOL6lazkqVQcF7YpoGBy+RkA=
Subject key identifier: 5B:18:B7:34:D9:35:F2:FD:C8:C4:A8:FB:B4:99:FF:B1:70:5C:D5:F0
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 019F93925288BFC319E2175CFC5FE6B560C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 1863
Signing time: Fri 24 Jul 2026 10:01:07 +0000
Manifest this update: Fri 24 Jul 2026 10:01:07 +0000
Manifest next update: Sat 25 Jul 2026 10:01:07 +0000
Files and hashes: 1: 9Nl9UE6iQ8BzYdxl7G-kytsnGM0.roa (hash: DwCSayZkRcTecU+QYNWzkQO84K94CzpgnweIdh3T7XA=)
2: ENI7Z5yBr-3vmabr7x8Oqv2rU3k.roa (hash: SYbuwV9RF98H2wnwET3rqVG/OV1l8TgwPl32TdMZOp4=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: MerDBQWRp7vU8unqrjIyg1Obla3tAQKKzfm0BQOzkoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:52:88:bf:c3:19:e2:17:5c:fc:5f:e6:b5:60:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Jul 24 10:01:07 2026 GMT
Not After : Jul 25 10:01:07 2026 GMT
Subject: CN=5b18b734d935f2fdc8c4a8fbb499ffb1705cd5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:be:0a:c0:f8:c2:97:48:4d:d3:2c:27:80:22:
54:61:5b:84:c9:5a:91:7d:d7:00:3d:ea:e1:ac:fe:
55:1e:4a:0d:74:62:8a:9c:a1:99:18:df:88:65:ee:
12:82:76:24:d5:ae:4f:8a:24:08:32:2d:8f:61:8e:
56:a8:df:72:ea:41:62:f0:db:d7:bd:7b:d1:9d:b1:
58:b2:06:13:06:5f:ab:5e:98:5b:71:b6:c1:03:c5:
15:9f:92:d3:f6:a6:fc:f5:51:62:5c:68:11:38:59:
1c:85:c6:42:e2:b6:e0:5c:01:dc:8e:9c:5d:7e:40:
d0:38:06:ab:20:07:2c:1a:f4:11:37:07:eb:d9:fe:
ca:e4:27:db:c6:8c:f8:92:2b:99:af:bf:7a:9b:6e:
ae:b0:bd:78:83:38:dc:f9:a0:04:6a:85:20:13:6d:
7a:fc:34:bb:0c:bc:81:3e:8b:56:fd:73:2e:26:42:
94:cc:c8:fa:53:e1:9a:26:04:17:f7:30:50:7b:30:
3e:f0:35:76:e9:c7:a7:c2:f7:31:f8:01:ac:52:4e:
2a:c5:99:99:c4:49:21:7c:bd:5f:66:ae:3c:dd:2b:
fe:f2:30:fe:d4:71:1d:6c:c1:bf:b5:4d:59:93:ba:
b2:5f:1c:8d:ad:5e:30:be:a4:2d:1d:c4:d9:d5:31:
bd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:18:B7:34:D9:35:F2:FD:C8:C4:A8:FB:B4:99:FF:B1:70:5C:D5:F0
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e3:0a:0c:3e:fa:83:c2:74:c6:c4:94:05:ae:ef:1c:6a:89:
2d:10:e1:49:ea:08:a7:f4:05:b4:89:a2:8c:87:13:15:24:37:
bb:51:0a:32:46:3d:2b:db:70:62:cc:48:5f:65:ae:bc:09:de:
46:38:bc:cb:30:44:75:23:1e:11:88:8c:5f:b9:e3:ae:58:fe:
87:3c:fe:61:c3:3f:d2:b3:23:47:27:98:b5:38:e9:6d:a5:40:
58:98:72:2f:cb:9a:4a:77:a3:7e:1f:3c:46:4e:e4:2d:75:19:
44:96:fc:d1:b6:ba:a4:1e:a0:96:eb:23:5a:db:ba:d0:e9:3f:
23:46:dd:1a:62:0f:c2:62:f0:04:58:86:a0:a5:5f:cd:7a:a8:
2a:bf:28:49:0f:0e:0f:e4:b7:ad:27:33:5a:e0:f3:79:ce:ba:
05:9f:57:64:7b:a6:1e:b6:c9:11:98:4c:72:91:c1:72:d4:71:
31:56:e7:1f:0e:08:74:02:0d:d7:11:e2:1c:12:ba:f3:87:dd:
bd:e4:d2:ff:ff:7e:8a:7f:22:8c:f8:35:87:42:cc:8c:f9:93:
54:9b:42:dc:27:64:86:2e:21:91:83:09:e2:68:39:2f:80:3e:
fb:bc:b9:fc:36:8f:3d:6f:84:47:73:8d:26:3b:5a:51:5a:4a:
aa:72:a3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:29 2026 by rpki-client