Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
File: YYcWngMONyXW60eKMn5r3za-jS8.mft (raw, json)
Hash identifier: dMISG8/zWzBeOXJnFLHPV0d8WrW5AhgWWtf5LI7SYcE=
Subject key identifier: 44:FE:A6:AA:68:CB:60:BB:87:A2:21:59:2C:D8:D7:49:1F:B0:F8:30
Authority key identifier: 61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
Certificate issuer: /CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Certificate serial: 019FAB99DCE246B41C79DC72E0AB1D9EC296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
Manifest number: 03C9
Signing time: Wed 29 Jul 2026 02:00:15 +0000
Manifest this update: Wed 29 Jul 2026 02:00:15 +0000
Manifest next update: Thu 30 Jul 2026 02:00:15 +0000
Files and hashes: 1: YYcWngMONyXW60eKMn5r3za-jS8.crl (hash: m00tfKcoYcI6ZyEQTyYV0T4R0WpIsw2Ka95M9FPxzK4=)
2: dlAKs2OGLWJirE63ZpdfiOJ1IDw.roa (hash: 1fH4y0wj0PpFc5LsMAZ3oXLqRp58JujDDG0+JToDmTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:99:dc:e2:46:b4:1c:79:dc:72:e0:ab:1d:9e:c2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Validity
Not Before: Jul 29 02:00:15 2026 GMT
Not After : Jul 30 02:00:15 2026 GMT
Subject: CN=44fea6aa68cb60bb87a221592cd8d7491fb0f830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:2b:3d:35:a0:f3:70:bf:dd:10:03:5c:59:
8e:73:0f:ab:65:bd:a3:d7:25:ef:7c:30:d0:e3:da:
e9:3a:71:c9:27:d1:de:6f:ff:96:fe:4d:e1:95:e4:
c1:84:a0:75:d8:8b:58:c5:3f:f0:90:9c:03:52:38:
bc:bf:6d:d3:b5:e3:2b:61:7d:b7:a7:1c:96:b4:7b:
00:53:a2:a7:28:dc:c8:86:11:9b:4d:97:07:a9:fd:
04:00:9a:ef:58:99:8d:bf:c5:d1:fb:98:c5:92:62:
a8:42:ea:9b:64:18:22:25:77:c0:1c:72:66:49:4e:
89:fe:ae:05:27:67:d5:60:a8:57:ea:35:a5:f5:32:
ae:47:51:5f:59:34:5d:97:98:ae:e4:66:61:6a:58:
7b:30:67:44:3f:02:6f:4d:22:ad:12:61:ba:7d:78:
b9:72:4e:22:29:4a:59:cd:4e:14:1b:29:01:95:25:
22:40:b7:4d:fd:84:5e:cd:aa:86:0c:56:d7:8b:3f:
60:7b:dc:ac:82:d9:a0:24:5b:29:69:9d:d5:c1:45:
a0:a6:08:f0:ea:63:06:35:61:39:96:4e:4f:3b:3f:
a7:a2:ed:fa:9a:dd:49:cf:39:e3:9f:32:b5:66:ff:
b1:a9:08:36:85:b7:7b:bc:e6:60:6f:46:a5:bc:71:
99:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FE:A6:AA:68:CB:60:BB:87:A2:21:59:2C:D8:D7:49:1F:B0:F8:30
X509v3 Authority Key Identifier:
keyid:61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:e4:98:f2:c5:05:8a:49:3b:aa:05:94:1d:0b:76:0b:ac:c5:
eb:4a:8c:78:9d:8d:c8:47:c8:a0:eb:94:04:fa:bc:20:aa:78:
60:29:da:3a:a1:05:25:c7:8e:72:9a:14:7e:77:28:27:27:6b:
69:95:e7:0e:ed:b7:ac:d9:28:bf:2a:aa:c2:89:e3:c5:20:e3:
7a:74:b0:ef:bd:45:60:e6:8a:f4:9f:a6:80:ac:35:eb:c8:6a:
7f:3a:51:45:08:6d:90:26:47:3f:ce:a7:71:78:88:8b:b0:d6:
02:8e:bf:13:0f:4a:db:38:ae:94:e7:b3:d0:81:4d:fb:e5:d6:
dd:2b:96:64:b0:c1:ff:2c:d7:49:72:2c:0b:b2:22:59:8c:b5:
39:c1:0d:c1:d4:23:b2:7c:a1:f5:34:76:ce:2a:0b:74:07:1c:
8f:60:c5:f9:46:f2:28:20:a6:38:42:fb:1a:64:26:42:09:47:
24:10:da:5b:4c:cd:ae:22:2d:f5:22:2a:ee:40:e0:cb:9a:2a:
d9:57:18:2b:52:36:60:f6:4f:34:1c:f8:8a:07:59:f7:30:6d:
3b:d4:46:01:65:a7:70:95:6b:db:7a:50:80:95:94:3a:35:ac:
16:de:4c:ea:a6:af:08:3b:11:87:01:c7:98:b3:b4:bc:51:67:
40:d7:91:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:08:31 2026 by rpki-client