Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
File: YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json)
Hash identifier: RbE1YiZgLbZmvXK6D1JIUwvGRCWTO1M3uM8cEuFwNPE=
Subject key identifier: 6E:87:87:48:34:32:2D:80:46:0A:6B:25:89:79:05:0F:F7:FC:12:EE
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial: 019FAD1A8290ED3368D3468C1CF57F1BE542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 09:00:23 +0000
Manifest this update: Wed 29 Jul 2026 09:00:23 +0000
Manifest next update: Thu 30 Jul 2026 09:00:23 +0000
Files and hashes: 1: J3trJnMvDZJ0BcVGu5fGaJyrupg.roa (hash: e8osDQcIENsCGM6JtSYddOPk22ajtK1guuuZINYdCT0=)
2: WiHVRTKANQPSLlslZgPEwLo61sU.roa (hash: NTrkcyBW/Rrku+dfbekK8M7MWrvABIKgt6ihPMKiaiM=)
3: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: QZ+Nwrtk6gC72Wgy8jZjjQOe5tlx53Ij6bih+WChhPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:82:90:ed:33:68:d3:46:8c:1c:f5:7f:1b:e5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Validity
Not Before: Jul 29 09:00:23 2026 GMT
Not After : Jul 30 09:00:23 2026 GMT
Subject: CN=6e87874834322d80460a6b258979050ff7fc12ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:61:b0:48:3c:f1:d6:1d:96:b1:fa:67:6d:
55:11:88:32:bb:76:85:1d:1d:10:b5:fe:b8:de:4e:
4b:d4:41:1c:f0:9f:b5:61:5c:82:c6:f3:1e:95:9b:
c8:34:c3:7c:ef:e0:b4:3d:b7:9a:0c:3d:0d:8a:29:
65:d8:f0:d2:f2:f7:47:9d:77:b7:ee:5b:48:b9:2a:
9c:77:e2:e5:5d:09:b0:fe:cd:ba:07:b4:73:16:39:
7a:0b:b3:03:8c:41:da:46:1f:a5:5f:c0:c7:6f:7d:
03:fc:62:93:a8:33:7d:df:d1:9e:40:c5:db:46:a7:
d4:a6:47:d1:42:4f:bb:40:0f:ea:24:db:48:d2:f1:
4c:48:0b:82:a8:98:18:34:a1:9a:68:fc:4c:94:e7:
43:35:6d:7d:b5:72:1f:50:26:58:9f:a9:6e:02:fb:
a3:42:e0:05:aa:0a:02:85:b2:42:44:af:ee:9f:74:
9f:1b:7a:69:c9:a0:d4:79:2b:9b:b2:3c:c0:3d:50:
a5:da:69:52:19:53:c7:7a:95:3b:4b:e3:c9:61:0e:
4e:bb:0a:30:a4:51:c1:34:9c:43:b6:7f:f7:b3:e5:
d7:06:99:f1:87:15:b8:c9:cd:c9:f4:dc:c9:e7:7a:
10:1c:f0:cb:a0:88:5f:1f:a1:3d:6f:cb:68:bf:97:
db:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:87:87:48:34:32:2D:80:46:0A:6B:25:89:79:05:0F:F7:FC:12:EE
X509v3 Authority Key Identifier:
keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:4e:8b:7d:c8:0b:44:93:8e:8f:34:a0:65:e6:c3:f7:2d:e0:
c9:0e:8f:82:cb:73:82:28:ed:e9:51:a6:4a:63:a1:22:d6:8d:
93:2f:e3:a6:8c:39:68:b7:a7:a8:80:7c:98:6b:61:01:3e:2f:
15:30:59:91:d5:90:ef:2a:8c:eb:67:81:87:35:3b:be:de:7b:
8a:31:d4:3f:c9:c4:f3:22:65:d2:e8:8b:72:b5:5a:48:68:bc:
27:7a:2a:37:08:75:d1:16:9e:fd:03:5f:3e:b6:00:9e:07:0b:
21:d4:57:ce:2f:5f:ef:5f:87:33:7b:6a:8f:19:e7:69:0f:8b:
ca:4a:38:61:96:c1:9b:94:d8:d4:ac:b4:4e:77:a3:9a:01:00:
39:2b:64:f5:6d:20:10:81:bb:ed:3f:f8:6f:00:0a:db:7f:20:
cc:92:2a:40:95:67:9d:2c:91:c7:2a:d1:e7:36:7a:2d:82:a2:
85:fb:10:da:db:52:a0:6a:23:5e:d4:63:58:b2:de:83:f6:56:
3f:c2:22:dd:97:48:2d:18:46:e1:d6:10:57:b0:6f:39:55:f5:
24:b1:15:68:00:72:de:0f:3e:eb:52:0b:9d:01:75:98:36:09:
58:90:13:eb:65:61:f0:12:ac:65:cb:24:ee:5c:a9:f5:bc:51:
2c:36:b5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:17:18 2026 by rpki-client