Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
File: yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft (raw, json)
Hash identifier: 2swfHdBVKB9XK3X/jp00cHekijDlFBe0oQcaf0jxx10=
Subject key identifier: 08:AB:6A:49:D3:5C:2F:72:19:FB:95:59:80:12:56:3D:28:0A:D5:29
Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Certificate serial: 019FAA199817236CC3E4FCB8B1DB881AB3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
Manifest number: 06F1
Signing time: Tue 28 Jul 2026 19:00:31 +0000
Manifest this update: Tue 28 Jul 2026 19:00:31 +0000
Manifest next update: Wed 29 Jul 2026 19:00:31 +0000
Files and hashes: 1: 4vtYbcZI2E5thjXIkhV7Fuwh_C8.roa (hash: teuW6Uqx1V2y5WJ8UJGDWcpw8cpD9xgHQ0Zadlt/dZ8=)
2: 9Px8z48R321lmmBfJpYZPXnmcpo.roa (hash: 2fda7ZTjyIH4HX9HuDuDyOX1MzL7aXtB6nPUNzP2md8=)
3: yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl (hash: HapBxoUSXFnDcYbFkDrHCv/X0Q81cWtuSaX3TaPPTOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:98:17:23:6c:c3:e4:fc:b8:b1:db:88:1a:b3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Validity
Not Before: Jul 28 19:00:31 2026 GMT
Not After : Jul 29 19:00:31 2026 GMT
Subject: CN=08ab6a49d35c2f7219fb95598012563d280ad529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9d:33:95:00:48:dc:82:6f:98:88:04:e7:ac:
48:f4:43:d3:09:4b:e8:20:37:58:27:c0:7f:9b:f9:
be:1b:34:33:27:13:42:55:8f:fa:f8:9e:ad:0b:a4:
a8:0e:da:2a:83:76:68:86:0b:87:da:23:23:39:81:
54:c0:d8:11:ad:d4:8c:14:83:cc:14:6d:0d:84:d2:
46:53:a0:16:b5:76:92:a1:85:dc:c6:a0:aa:ba:88:
50:33:83:ce:cd:31:46:f8:ae:54:0c:dc:ed:bf:4e:
77:2c:a5:b8:21:85:32:dd:93:3d:b3:9e:2e:99:db:
d9:3e:84:d8:c1:93:0d:44:2e:4f:82:bf:8b:64:3d:
d0:55:00:1c:28:06:83:1c:16:4a:ba:35:a2:f8:4f:
09:d4:c2:25:39:37:6a:01:96:4f:e6:13:dd:45:fc:
4c:a1:e9:ed:ce:f2:84:37:d7:1c:af:a9:22:18:21:
f3:d1:af:30:95:9e:c0:7f:ad:ae:e3:66:e5:bf:70:
6e:d1:ff:4d:09:ec:88:69:4f:49:f5:b5:86:ca:26:
bd:6f:58:16:84:11:49:d7:ff:ca:8c:e3:8c:d7:eb:
54:ca:ab:6c:e3:48:2c:42:87:5d:70:b0:ec:e2:72:
85:38:ab:00:81:9a:ef:0b:3c:b5:5f:20:58:3a:ca:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AB:6A:49:D3:5C:2F:72:19:FB:95:59:80:12:56:3D:28:0A:D5:29
X509v3 Authority Key Identifier:
keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:98:f1:82:2d:ac:3d:f5:91:98:31:89:a5:7a:b5:ea:a0:d9:
77:de:56:b6:9d:79:41:93:39:19:53:33:31:7b:ab:34:f1:70:
2f:94:93:8d:01:e2:7e:8c:12:fd:4f:22:86:71:a9:ee:2e:cb:
61:e0:77:93:0a:df:0c:2d:bc:c0:2b:8a:12:04:dd:c0:36:90:
d9:3a:3b:31:8d:5c:5f:b7:98:46:d4:ae:b3:5c:c7:b4:52:4f:
ce:fb:4f:98:17:16:9f:c8:3f:8a:d3:1e:a1:76:f1:1e:b3:76:
e8:fa:be:0e:17:c8:68:54:78:39:4b:ef:9b:92:c1:31:26:bf:
ac:03:ee:d0:5f:67:a7:aa:63:46:42:89:91:76:53:f8:4a:61:
09:a6:63:cd:c8:42:95:06:6d:29:b5:51:72:8f:22:5a:64:c7:
b0:0f:9e:2a:b4:39:3b:7d:be:e9:a9:51:35:65:52:e3:b8:c4:
fb:c7:e3:4c:95:83:86:14:21:e2:54:ed:19:e3:1c:35:d4:20:
7f:9a:0b:f7:64:7a:4a:95:1c:a0:74:0c:f4:f8:ee:5f:95:f3:
65:93:74:e9:a9:8d:7f:c4:f7:d6:0b:3c:82:43:52:85:70:d8:
04:d1:52:77:e2:64:36:60:59:db:bc:eb:2d:d9:1a:83:44:42:
7b:7b:79:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:08:25 2026 by rpki-client