Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
File: YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft (raw, json)
Hash identifier: Sr1QvbaW+UaNM/VUiqPKhuo7UzkqgFwL5bUdfdhpH08=
Subject key identifier: BA:E7:A0:A7:CD:1D:AB:3E:AE:E0:1A:4E:BA:A9:23:97:D0:16:DB:F2
Authority key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
Certificate issuer: /CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Certificate serial: 019FA9AC47010D161F8DEAF155D16982CB67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 17:01:07 +0000
Manifest this update: Tue 28 Jul 2026 17:01:07 +0000
Manifest next update: Wed 29 Jul 2026 17:01:07 +0000
Files and hashes: 1: YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl (hash: Qe/bWxQU3UQjWDIKkFhPPIe8XDu+lRH4MUi7gYQQUQo=)
2: gGpmcsWE1eZyNMee1NRlA1nhhvY.roa (hash: /R+1mDGIJPwiUjgMqzEayU7QgZR187J1ACp6m3yLtqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:47:01:0d:16:1f:8d:ea:f1:55:d1:69:82:cb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Validity
Not Before: Jul 28 17:01:07 2026 GMT
Not After : Jul 29 17:01:07 2026 GMT
Subject: CN=bae7a0a7cd1dab3eaee01a4ebaa92397d016dbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:a3:2e:cd:df:79:5b:08:6f:03:e8:2b:bd:
8e:ee:60:9c:dc:70:4b:07:68:51:a0:5c:21:c3:6f:
d5:7d:3d:98:3f:3b:04:2f:d6:76:df:bb:91:39:ad:
20:54:f7:b7:d4:9e:1d:3d:53:fa:29:c6:c1:da:ae:
fe:dd:40:bb:f2:29:f5:f6:83:fb:5a:d7:02:f9:46:
70:10:4f:ac:2e:47:19:65:45:fa:72:00:78:c5:b6:
83:04:76:b9:9e:de:f9:7c:4c:7c:6b:7a:c7:d3:68:
67:06:b0:d1:67:af:a0:3e:86:5d:e2:62:82:a7:d8:
ca:74:07:77:f0:39:a5:8e:aa:b7:a1:ef:66:c8:55:
b3:42:b6:ff:a9:40:3d:cf:77:df:46:f8:0a:66:a5:
1d:33:a1:68:c5:5a:75:35:54:39:3f:fe:a5:da:f4:
6b:86:f6:46:25:19:b9:f9:2e:75:7f:7e:ee:6f:db:
ac:63:03:e5:c2:c9:75:e6:13:90:19:96:3d:46:10:
df:90:3f:03:ef:66:ae:79:2a:9e:77:34:f1:29:39:
2b:0a:9f:49:52:a7:02:6c:25:17:69:39:d9:6a:6c:
bc:eb:df:c4:52:00:16:1d:0a:d9:d8:0c:2d:21:1f:
29:72:c8:3e:05:6a:13:d3:f2:4a:17:57:2c:f9:40:
7c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E7:A0:A7:CD:1D:AB:3E:AE:E0:1A:4E:BA:A9:23:97:D0:16:DB:F2
X509v3 Authority Key Identifier:
keyid:60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5b:51:65:7c:c4:89:93:99:56:05:ae:aa:06:e4:c7:a7:4d:
69:9b:5f:b0:5d:a1:22:53:18:57:f6:52:74:cc:33:e5:9c:73:
21:62:6d:aa:3e:37:c2:61:24:e0:80:97:f2:d2:9e:c5:f6:05:
d4:da:9d:54:dc:68:b5:48:c4:8e:9d:73:6b:8a:44:f4:9d:1b:
5b:9e:61:88:fa:57:72:1f:c1:54:32:86:d8:e6:b0:e2:9b:b8:
92:c9:f2:e0:0b:72:f4:ed:ba:84:8d:46:02:09:66:55:dc:57:
fe:bb:1f:78:9e:68:dd:f5:7e:da:f4:62:d6:55:3d:c1:dd:d8:
9b:b5:b3:71:bc:1c:74:15:43:3c:12:67:22:17:eb:f8:81:14:
e9:55:f7:07:09:fb:be:9a:23:09:69:0f:5f:c1:ef:a7:88:26:
80:6e:5a:60:62:ed:5c:14:79:d5:6c:49:1d:04:91:67:6a:20:
22:52:dc:20:f9:74:9f:f8:58:82:17:78:f5:02:09:86:3f:28:
ee:fc:e4:aa:65:ce:8d:6d:3a:30:51:f2:89:13:77:24:63:d7:
1e:25:41:f0:12:c9:d7:01:11:2c:69:5d:6d:f9:3b:db:1a:ae:
63:7a:65:eb:d1:99:59:07:32:6f:36:57:04:46:d8:90:2d:06:
83:d6:91:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:50:57 2026 by rpki-client