
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
File: YuJWVsULslT1gHfRuWbkdLFjR68.mft (raw, json)
Hash identifier: 1jE3VpfySu7R7dsg4XjL7qG2imI18SADZ/ipJB1acm0=
Subject key identifier: 6A:EC:36:B8:F3:AB:25:DE:E5:39:C8:86:68:19:E8:31:03:7A:28:8B
Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
Certificate issuer: /CN=62e25656c50bb254f58077d1b966e474b16347af
Certificate serial: 019FAA87D10418FDBA1DB4A47CFAB438EEEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 21:00:55 +0000
Manifest this update: Tue 28 Jul 2026 21:00:55 +0000
Manifest next update: Wed 29 Jul 2026 21:00:55 +0000
Files and hashes: 1: WDz5bqq9s7Sot6DZTyns7ujP_G0.roa (hash: jp6a/AgGzZ0JdGjudIFSMOs/t8/efE23HGLQbGbVGxE=)
2: YuJWVsULslT1gHfRuWbkdLFjR68.crl (hash: ueBHCfFTQvOvG4cGTFjeOyHSMbJ56heJDaMsR/beQDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:d1:04:18:fd:ba:1d:b4:a4:7c:fa:b4:38:ee:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af
Validity
Not Before: Jul 28 21:00:55 2026 GMT
Not After : Jul 29 21:00:55 2026 GMT
Subject: CN=6aec36b8f3ab25dee539c8866819e831037a288b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:16:db:6a:93:4d:8a:a8:fa:9a:9f:2e:89:
8e:15:6a:25:a5:f0:7f:35:ee:34:49:aa:9b:12:54:
46:80:e4:d0:14:74:42:53:53:f4:48:f5:64:2b:97:
9b:51:11:8e:56:d5:2e:46:f2:17:f3:0b:87:3c:9f:
ac:d8:b2:5d:e6:26:a7:1f:d6:12:49:65:76:d7:b4:
c8:e1:ee:e5:30:34:32:2b:4b:f0:fd:94:28:93:66:
6e:69:83:90:90:5b:cc:1a:62:45:e2:68:a0:f0:30:
7c:7d:15:92:6f:58:8d:cc:9b:02:79:bb:5b:c6:e4:
3f:ab:08:72:90:f5:f1:94:2d:2e:f1:4a:be:0e:9c:
31:ae:36:e1:db:00:cb:2d:02:2f:d2:76:d8:c5:e8:
03:e5:09:21:81:e5:14:9b:55:98:78:11:3a:98:da:
12:f2:81:83:b0:5f:54:1a:7e:45:68:b9:4a:8e:3f:
aa:bd:92:7c:66:99:8f:9e:1f:97:81:0a:07:f1:e7:
03:16:dc:fb:59:31:4a:25:97:a0:4d:1f:b5:a9:e3:
3a:e6:ea:0b:aa:3d:71:d9:75:b7:e6:87:86:fa:11:
af:b2:4a:0c:39:23:dd:56:a3:13:cb:26:13:72:d4:
5d:24:05:4a:4f:1c:64:cf:71:87:f6:1a:28:3c:13:
15:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EC:36:B8:F3:AB:25:DE:E5:39:C8:86:68:19:E8:31:03:7A:28:8B
X509v3 Authority Key Identifier:
keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0b:e2:c4:4b:82:ab:8e:6d:ee:c6:e4:cb:ff:4f:26:c7:e1:
77:a3:e4:89:04:92:68:44:9d:fe:ef:64:21:61:14:0c:59:4d:
b1:72:34:a9:af:3d:43:68:55:8f:b7:48:fb:d3:bb:7f:81:89:
ea:05:ae:b1:8f:4e:0f:80:83:d5:72:01:a6:42:ba:31:9d:51:
00:3c:85:49:4f:ab:81:5d:5b:66:0f:db:d1:33:90:b8:30:79:
a9:45:39:a4:0f:4f:c5:73:16:bf:86:0f:56:46:20:2d:79:a9:
20:f5:b0:0e:77:e6:00:cb:41:15:c4:22:61:80:5f:eb:d5:68:
a4:0c:d1:13:de:6c:ec:f2:77:af:ef:07:96:4e:ba:2c:56:c0:
0e:d9:8e:e5:91:56:c2:d6:5a:47:fc:07:5c:77:2d:e6:d7:94:
0d:6b:6d:db:d5:f3:0f:3d:68:b0:27:da:39:03:97:d9:b4:b8:
4e:04:85:aa:15:8f:78:5f:77:48:e4:e7:e9:11:8c:74:39:5a:
eb:f7:60:35:f8:94:75:47:2b:89:b5:27:c7:d1:f3:3d:46:1c:
d2:da:87:3c:e2:9c:7b:06:fc:5d:0a:4d:f8:86:57:74:e0:d6:
13:69:f2:b8:fb:1b:13:92:e0:87:56:b0:24:4d:57:42:3a:1b:
ae:91:6a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:54:57 2026 by rpki-client