Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
File: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft (raw, json)
Hash identifier: e3xzmAGOZuZ6Y+kCfzPJqbno1QJlsNUkiNlhFXNz6G8=
Subject key identifier: E0:95:AF:4D:F2:FB:23:5F:D9:5B:91:06:04:60:96:4E:60:7B:39:9E
Authority key identifier: 61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
Certificate issuer: /CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Certificate serial: 019FAAF6094BBA9ADBA45AC69BBC12153A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
Manifest number: 0BE2
Signing time: Tue 28 Jul 2026 23:01:18 +0000
Manifest this update: Tue 28 Jul 2026 23:01:18 +0000
Manifest next update: Wed 29 Jul 2026 23:01:18 +0000
Files and hashes: 1: B-jtVqVW9M43hbMxN6j_v-hrwB4.roa (hash: xV6nCB7rwxI+22ZkCjSqm8Ae38pQziS4ET9GFX+UA2o=)
2: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl (hash: FZVEZBVmXpub6eYDiUMk5wnFYkjgVtOIPMvEOM4VH8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:09:4b:ba:9a:db:a4:5a:c6:9b:bc:12:15:3a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Validity
Not Before: Jul 28 23:01:18 2026 GMT
Not After : Jul 29 23:01:18 2026 GMT
Subject: CN=e095af4df2fb235fd95b91060460964e607b399e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:fb:8b:62:b6:fe:e2:69:ad:67:66:24:3c:
5e:4c:c0:38:b5:99:3d:6a:49:86:a1:37:c8:55:a3:
bb:0d:00:d3:2d:c9:ee:6c:4c:9a:65:61:da:b4:e1:
64:d8:e7:38:87:0e:7d:b0:88:f3:4f:6c:9e:7f:b3:
0b:02:89:40:a7:7c:7a:c7:9a:c0:78:dd:8e:9b:c7:
18:4a:b9:f1:e1:c1:a5:61:40:09:2e:9e:4f:b5:9f:
82:12:2a:d4:8e:0e:f0:c8:cd:80:ef:33:55:6c:0e:
d0:3d:34:ef:5c:11:e9:6d:11:0d:a2:a8:96:db:96:
c9:d3:fd:b3:63:61:ea:67:e6:45:e7:a1:e9:15:fd:
62:bb:29:4b:43:10:19:65:25:2e:14:3a:fb:0e:00:
73:25:69:a0:f0:2c:61:1a:04:66:c6:ac:ea:72:56:
52:1a:50:e2:75:a9:32:01:6a:c3:e9:63:ca:f8:eb:
17:8f:79:63:73:8a:51:88:10:fc:aa:68:ae:49:f1:
37:e4:ba:07:f6:3a:2c:34:b8:47:e1:27:82:13:fe:
6c:d2:a8:09:e5:4b:2f:d6:43:cf:6b:53:ed:2f:67:
a9:aa:b0:85:24:57:7f:7c:18:da:23:2d:91:3b:6e:
42:ae:da:d5:0d:c0:39:68:7f:40:f2:17:ee:8c:d3:
dd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:95:AF:4D:F2:FB:23:5F:D9:5B:91:06:04:60:96:4E:60:7B:39:9E
X509v3 Authority Key Identifier:
keyid:61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:dd:05:8b:c2:3f:af:76:49:17:13:19:47:60:42:0b:cf:88:
fd:8c:fc:cd:62:53:c6:e2:4d:6e:1f:14:04:ee:2a:39:f1:f5:
24:cc:6a:55:ce:2e:54:a3:b9:fb:31:17:cc:fb:55:77:63:68:
f2:8d:95:74:63:bf:fc:c6:b7:a1:ba:3c:d9:26:ec:99:b2:46:
bb:0f:a0:03:50:b6:30:6d:28:ba:2a:92:6d:c4:12:ed:48:7b:
ba:88:15:78:f4:58:45:6b:96:d2:9e:a8:55:bb:38:41:a7:96:
db:4b:67:17:e8:70:2a:e5:2f:24:89:40:90:32:35:d1:36:03:
be:cf:43:95:5d:fe:26:a7:c5:e6:88:d1:99:68:4d:ab:e2:48:
bb:b9:55:a7:bc:24:eb:46:b5:35:63:2a:b5:3d:d4:43:d0:00:
14:8e:2e:cc:38:8f:b3:d3:00:64:f1:27:f1:f2:ee:8c:d7:62:
a1:b4:2d:1d:f6:f2:70:9c:72:eb:a3:1b:c4:52:ca:1f:66:72:
86:9e:93:77:45:ed:a2:74:cd:0d:12:56:f3:07:8e:9c:5b:4a:
fe:15:09:1c:fc:90:ec:cd:f1:01:5c:c6:80:46:ed:de:5c:9f:
7f:a1:f3:80:9b:70:39:0a:c4:13:ee:dd:0e:b8:4c:0d:a7:a5:
0b:33:9a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:52:26 2026 by rpki-client