Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: joTOcK86oVWOrGqQhwlu5qZprmQlydFBdqbE3Irj+rE=
Subject key identifier: 97:D1:5C:4B:87:0E:DF:86:03:06:9B:14:91:81:F8:02:8B:62:E1:79
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 019FADBFD409241BE86B93DB2F212F88F661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 12:00:57 +0000
Manifest this update: Wed 29 Jul 2026 12:00:57 +0000
Manifest next update: Thu 30 Jul 2026 12:00:57 +0000
Files and hashes: 1: Xz1YPhwlgcFJn9H6zKCHQE9OZMs.roa (hash: E23r1ViDJSDDunuaw4r4shrNSmLJDRKbQsrvll9ROpQ=)
2: Y6uXwuSAMDltrgK47G1JT4Ly1MU.roa (hash: kINCl8tG1shq70mte4iuRzZgEl60hKLBpRpKxfDa3dE=)
3: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: rwI7N69qGWz6drLVtEd7xffIFY/ktUALZGQZrCn8S9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:d4:09:24:1b:e8:6b:93:db:2f:21:2f:88:f6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Jul 29 12:00:57 2026 GMT
Not After : Jul 30 12:00:57 2026 GMT
Subject: CN=97d15c4b870edf8603069b149181f8028b62e179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:cb:61:43:6f:d0:77:1c:f5:a3:45:6c:12:
30:82:7e:5d:6d:b0:91:f2:c0:08:10:fb:1d:7f:04:
5d:57:0b:38:68:dc:f3:31:a2:fe:24:c9:cc:27:94:
ec:26:0e:3b:7b:33:d7:56:4d:1f:9a:cc:93:b3:c6:
ac:97:dc:13:3e:95:b0:2c:c4:bb:57:8f:27:0b:40:
91:38:76:db:a7:7c:70:d2:b0:69:8b:55:86:1e:25:
33:95:75:85:06:0c:52:d0:7a:3d:f3:f5:16:d1:71:
74:d3:27:49:47:79:ae:6e:0c:3f:e1:63:44:6f:16:
9a:c2:6d:f2:6a:ac:b4:33:f0:b2:a8:d8:b4:44:5d:
9e:b1:6d:d0:46:15:9b:a4:b9:7d:56:4d:be:97:7e:
7f:2b:f3:50:94:3f:70:c6:b2:b7:61:c5:e7:33:55:
aa:77:5c:6a:df:16:4f:46:e3:3c:ca:ae:08:80:06:
73:1d:18:bb:19:7c:73:bc:d3:92:c5:24:bc:c7:ff:
2e:85:5d:be:04:02:37:38:aa:5a:5e:05:70:dd:93:
ed:51:64:e8:15:37:d6:c1:4a:d8:b7:44:27:91:07:
12:38:45:aa:ff:a7:6d:62:1b:03:2b:ee:40:ec:6e:
d1:38:64:83:c7:69:9b:d3:cd:00:14:c7:6b:2d:15:
dd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D1:5C:4B:87:0E:DF:86:03:06:9B:14:91:81:F8:02:8B:62:E1:79
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c9:42:72:ec:56:81:ea:70:76:90:7e:98:39:d1:47:f4:55:
42:54:39:e4:c9:da:ff:c0:75:9d:14:00:c1:01:e5:02:72:33:
98:f7:9b:cb:d2:24:e1:a3:55:48:09:35:a2:ab:24:57:c3:c5:
dd:c8:78:78:d3:05:71:ee:f3:5e:7d:c9:9a:1a:8f:14:f3:79:
e0:74:34:9e:9b:3f:41:28:4b:1d:5e:15:52:51:ca:bd:a4:41:
3a:85:0f:bd:09:ba:e8:8a:97:14:e6:8c:78:e3:60:de:07:70:
16:1e:5c:8f:1b:a0:4c:0d:4b:7c:c7:c1:4a:2f:32:fa:96:68:
51:58:f4:a0:b6:9d:00:02:f9:25:f4:e4:9b:a3:4a:b1:63:30:
ec:f2:f4:51:d2:0b:2f:ef:1f:b8:a1:2e:07:88:db:b4:8d:7d:
65:f0:86:0f:eb:c9:c0:11:ad:79:60:d7:cd:3a:48:89:66:3f:
79:bd:5a:2e:63:8d:1e:76:3f:7f:ee:30:08:46:77:c6:5a:ff:
21:6c:45:1b:ee:30:c3:ce:bf:68:7d:cf:bc:be:26:14:1f:fa:
85:56:89:e4:b5:03:4f:7a:16:75:5c:ed:74:69:47:d1:4c:75:
d6:a3:f2:7a:7a:d3:4a:ca:80:ea:fa:b3:25:0f:8d:c9:d6:88:
09:ce:0d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:58:32 2026 by rpki-client