Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File: YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier: L5ZXzXtlmcPgqEEPRKmWL3rdgQbTzeVoycp/GPV5DEc=
Subject key identifier: B1:33:65:37:48:19:0E:1B:FA:4A:80:62:F5:49:46:A3:58:D4:77:4A
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial: 019FA9E2A7054557CE2BC6A170134670E3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 18:00:31 +0000
Manifest this update: Tue 28 Jul 2026 18:00:31 +0000
Manifest next update: Wed 29 Jul 2026 18:00:31 +0000
Files and hashes: 1: 1iPsYqvE-ccnXaUSDoZeDrNAomM.roa (hash: rvJ3z6CrzCzgXCYWONhujj1iC92V3sl9Uzqlk+xTEEI=)
2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: FaEP3miQzdUm+Eks5C8fux0YlxgEo/WsZPryfVmiTMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:a7:05:45:57:ce:2b:c6:a1:70:13:46:70:e3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Validity
Not Before: Jul 28 18:00:31 2026 GMT
Not After : Jul 29 18:00:31 2026 GMT
Subject: CN=b133653748190e1bfa4a8062f54946a358d4774a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1d:90:49:c3:78:8f:7d:bc:54:02:05:9b:01:
06:d0:fe:cf:95:01:4b:3b:2f:f8:64:c7:2e:9e:b5:
da:62:42:34:fb:cd:40:c7:17:c6:11:13:b5:b1:5c:
27:b8:11:d2:ee:17:ba:e5:1f:8e:cb:92:e0:af:16:
2d:da:04:64:04:b6:d7:c6:02:c4:06:b8:dc:47:c6:
7d:2c:17:f2:70:76:82:a4:62:4a:f7:a3:52:d3:6a:
7e:df:90:65:2e:7c:64:e7:39:9f:b6:81:00:a9:71:
e3:2c:bc:51:5c:01:d0:2a:65:16:42:83:1f:e3:d8:
8f:82:b1:39:28:7b:ab:d3:8b:0f:26:d7:d3:ea:75:
ca:82:1e:e3:c8:62:eb:5f:46:fe:df:8f:ac:80:7f:
91:10:be:ba:80:d4:10:f4:1a:76:8f:9d:72:db:dd:
28:06:af:f4:c5:b4:ea:0d:e7:43:5d:69:2a:97:2d:
9f:17:a6:0e:f0:bb:2e:20:64:53:44:20:af:5e:11:
b3:5f:9d:4a:d6:3a:7d:c4:03:bd:06:89:14:f1:d7:
a9:61:5d:19:73:35:62:db:2d:2e:08:bd:b0:8b:2e:
74:36:70:4f:e9:92:68:8a:8c:28:b8:46:1c:f6:ca:
da:7f:3d:cc:95:31:bb:2b:31:b7:eb:6f:f2:4a:42:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:33:65:37:48:19:0E:1B:FA:4A:80:62:F5:49:46:A3:58:D4:77:4A
X509v3 Authority Key Identifier:
keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8a:af:24:13:16:2f:79:29:3c:74:c4:a7:cd:c8:a5:e3:11:
6e:5e:b1:93:51:07:64:04:ff:fc:70:13:08:d7:14:66:b1:0b:
2e:99:79:b2:3e:27:9f:a8:0d:17:90:42:a8:9f:1f:e5:ed:83:
87:1d:81:68:b5:04:33:f6:28:4a:2b:c8:69:df:da:73:fb:4c:
eb:79:e8:2f:92:7c:2a:23:31:a0:2f:f2:ac:8b:a4:89:ff:e0:
7f:cf:f4:d0:48:83:30:29:e6:e7:57:76:ff:23:ac:8d:f0:37:
ed:c9:8d:47:f1:ff:bc:8f:56:79:64:a7:8c:1f:9c:d1:22:c8:
37:1e:3f:74:87:21:c3:23:9c:8b:93:d4:1e:61:82:a7:29:0b:
49:4c:3a:a6:90:c4:4f:6b:bd:ab:31:81:d0:ca:7f:b3:32:6e:
d9:61:52:a1:5a:2d:8d:f1:37:9f:8d:79:f5:13:7e:a7:4f:73:
c4:29:78:ba:fa:cf:cf:75:ff:39:52:c7:73:67:7d:87:3b:49:
a1:cf:08:f7:0e:48:54:e9:57:10:95:c3:c4:70:3b:c6:1a:54:
97:e7:ed:17:a4:d3:eb:6c:ee:00:ec:e2:0b:46:11:93:d0:56:
36:bf:ea:c1:43:3c:23:fc:67:fa:75:cd:00:bc:75:40:eb:a6:
1b:97:a5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:22:06 2026 by rpki-client