Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
File: yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json)
Hash identifier: CGeIsu+mKSqwo9p42pGz08r97SYp5BRCUV9hux9DXII=
Subject key identifier: 05:9F:32:57:E0:EC:0C:6F:60:E0:5A:22:01:EA:E5:83:46:A6:D0:BE
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial: 019FAABE4B6DE013C24CFBD700BDB2DAB107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
Manifest number: 0A2A
Signing time: Tue 28 Jul 2026 22:00:25 +0000
Manifest this update: Tue 28 Jul 2026 22:00:25 +0000
Manifest next update: Wed 29 Jul 2026 22:00:25 +0000
Files and hashes: 1: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: uqNbrGizkLZDchIUgVdLyRl9bvv0c/n3T8dlaaVdzp4=)
2: ykn6ra4wP0urmcyUyxV1FWZ2Kp0.roa (hash: IJ1D7ZuY9/uNKyGnyBgDEp0dSpIFh5mPiRSScoZkO+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:4b:6d:e0:13:c2:4c:fb:d7:00:bd:b2:da:b1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Validity
Not Before: Jul 28 22:00:25 2026 GMT
Not After : Jul 29 22:00:25 2026 GMT
Subject: CN=059f3257e0ec0c6f60e05a2201eae58346a6d0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3c:43:03:23:08:8b:49:1e:53:ec:6f:d0:de:
25:b6:bf:81:4f:40:bc:35:61:e9:a9:2e:ad:9b:9d:
75:e7:c6:49:10:f4:80:c1:ff:7e:86:c7:9e:a3:5c:
d7:a4:15:16:15:0c:18:54:e0:25:8d:c7:76:ea:08:
dd:75:f4:33:a2:17:70:f8:37:a3:75:39:fd:e6:ae:
e6:76:ee:51:13:96:d7:48:92:90:1f:79:0b:a8:8d:
13:99:0c:d9:c6:7e:08:d7:5d:64:84:57:64:b7:a6:
a4:10:e6:c8:91:96:4a:af:aa:77:10:2b:39:f6:27:
b3:cd:4f:30:8c:38:60:47:f3:85:e5:43:98:1d:2c:
6a:be:1d:8e:9e:dd:05:7c:6d:98:23:52:b8:54:bd:
0b:55:44:43:8a:c7:61:1c:82:73:d7:f9:e0:11:67:
67:2c:00:9a:10:1a:be:99:c5:ef:f6:c7:25:0d:3b:
23:4b:5a:79:79:16:62:45:c3:28:b5:69:58:df:e1:
58:9d:d5:fd:ee:ed:72:9b:bd:c3:d9:22:e2:ba:ef:
24:ea:21:9c:13:d7:2a:e1:3e:39:2c:55:7b:1c:e6:
f8:85:13:b7:94:c1:4a:12:81:a8:72:a2:f7:30:e8:
84:b4:fe:c0:d4:ed:a5:9b:5d:5f:2e:fe:14:8b:1f:
7b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9F:32:57:E0:EC:0C:6F:60:E0:5A:22:01:EA:E5:83:46:A6:D0:BE
X509v3 Authority Key Identifier:
keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:02:d4:94:16:eb:b0:9b:ea:49:bc:88:3e:00:b7:bd:b5:b4:
a3:9f:bc:cb:c4:c2:1d:7b:87:a5:30:c6:dc:33:e3:94:1f:67:
38:ba:7c:41:2a:92:8c:fa:8e:a2:f7:8e:89:bc:46:7c:76:ea:
46:a6:c7:df:95:32:8f:a1:11:02:74:90:4e:00:e4:a6:15:05:
98:81:c8:d1:10:4b:03:4b:77:e5:a3:79:b3:53:8c:eb:9d:d3:
94:58:24:93:0c:8d:a7:8c:b7:cd:e6:cc:3d:53:8c:65:4a:03:
9f:b0:89:d1:83:1b:59:28:3b:80:ca:83:24:c1:bb:96:24:9a:
30:8b:41:84:7f:c8:78:fc:3f:fa:b8:c0:65:f3:b8:1c:78:e1:
fb:be:ba:3a:46:cd:b0:c4:df:8a:f4:46:d4:e1:e2:05:be:6c:
67:8f:61:17:51:79:90:91:9f:aa:f3:07:c3:8d:42:cc:bf:d6:
18:b3:56:27:6f:bb:bd:b1:0e:ea:39:ef:b4:c8:51:48:2b:51:
45:e9:21:01:21:d5:57:7d:38:c7:01:9f:7a:e4:a0:d9:52:e8:
95:f7:fb:2e:98:38:2e:be:f3:65:95:44:f4:51:e2:4a:f9:46:
8d:80:d8:bd:11:df:f6:dc:c8:5b:92:4d:b3:3b:13:89:e6:89:
c0:8a:3d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:45:29 2026 by rpki-client