Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
File: ylF4miMTWsImjCKihWAKX5sFN3A.mft (raw, json)
Hash identifier: 0Sk9sXQtlPfSIxDyQcdwvn4rZthCUfwqPEMRLkp9ZaE=
Subject key identifier: 31:86:88:0B:B0:E5:41:B7:7D:37:DF:B1:7F:A7:DD:67:9C:86:9E:07
Authority key identifier: CA:51:78:9A:23:13:5A:C2:26:8C:22:A2:85:60:0A:5F:9B:05:37:70
Certificate issuer: /CN=ca51789a23135ac2268c22a285600a5f9b053770
Certificate serial: 019FAC0801158B2777E91790A59E8F676F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
Manifest number: 153C
Signing time: Wed 29 Jul 2026 04:00:32 +0000
Manifest this update: Wed 29 Jul 2026 04:00:32 +0000
Manifest next update: Thu 30 Jul 2026 04:00:32 +0000
Files and hashes: 1: sr2F0zsExdSQr-zgnrk17i9FhUg.roa (hash: hKUfnAYzGISD3itupUfCkChJsvs636FejLl9Oqr8aQA=)
2: ylF4miMTWsImjCKihWAKX5sFN3A.crl (hash: jB1eWMkuC4FfEqxl+5IEbdvQ5IfiCQIMrRCwUpvQZUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:01:15:8b:27:77:e9:17:90:a5:9e:8f:67:6f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca51789a23135ac2268c22a285600a5f9b053770
Validity
Not Before: Jul 29 04:00:32 2026 GMT
Not After : Jul 30 04:00:32 2026 GMT
Subject: CN=3186880bb0e541b77d37dfb17fa7dd679c869e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:d1:50:f2:c9:ca:72:12:e5:1c:92:88:96:
61:87:48:00:07:97:c0:91:59:99:65:e7:d3:64:dc:
14:7f:2e:a9:d8:df:e2:ab:8a:43:45:9a:98:bb:71:
6d:f6:50:2a:d2:88:35:f2:95:e9:7b:70:e6:3c:8d:
66:27:88:10:9d:98:e1:ff:e9:97:9f:57:e1:60:b8:
c7:ac:7b:b4:e0:dd:67:ea:09:d5:17:2f:1d:34:44:
df:10:20:83:b6:05:44:52:4c:b2:c5:06:f1:01:22:
ce:3d:fe:57:a6:41:f8:bb:0e:9f:2b:bf:83:40:d2:
e7:67:49:2a:a9:ef:8f:a4:0f:ec:20:08:56:d1:57:
06:a5:86:20:a7:f0:38:ab:12:9d:c4:db:94:46:2c:
5e:01:71:08:86:74:cf:a1:51:2f:e9:58:02:c4:36:
85:8b:e5:82:74:0b:2f:37:82:ac:a8:11:f2:e7:2a:
74:a8:16:9d:97:79:d1:cc:e6:71:8c:d3:2c:72:3d:
e8:50:8f:5b:eb:95:e8:9d:99:74:2c:b7:5e:89:33:
2c:bb:f6:b9:a0:bf:e1:b8:3b:4f:cc:dc:73:e0:21:
1f:44:2e:69:63:75:30:a0:84:e1:38:30:b1:d5:6f:
e8:c4:65:57:01:db:18:11:ab:a9:07:e4:47:27:62:
b6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:86:88:0B:B0:E5:41:B7:7D:37:DF:B1:7F:A7:DD:67:9C:86:9E:07
X509v3 Authority Key Identifier:
keyid:CA:51:78:9A:23:13:5A:C2:26:8C:22:A2:85:60:0A:5F:9B:05:37:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a3:87:35:39:ea:4e:2f:61:90:07:5d:fe:3d:69:da:72:f6:
79:65:24:2d:c3:90:65:f7:e5:35:e1:a5:52:34:7e:75:24:9a:
a9:fd:c9:7f:ed:ae:13:8d:e2:ca:48:9f:66:8f:e3:3b:da:8d:
81:6b:a8:9f:a1:40:3a:ee:fa:f0:f3:9e:bd:8e:8e:75:53:b2:
f6:eb:bf:2b:a6:6e:72:19:c0:ad:b4:58:92:55:5d:99:43:2c:
4b:2b:af:be:63:46:e8:52:41:28:a3:72:18:3d:38:f6:d5:05:
db:19:29:36:71:01:f8:e7:b2:6e:02:a2:56:6a:67:bc:03:60:
8a:36:09:69:b5:26:89:ee:32:13:eb:0c:b7:d9:71:32:2d:b1:
43:da:4a:03:d6:13:73:06:03:05:72:e7:45:98:d8:e8:1e:a7:
42:8d:f1:4a:5c:08:f6:37:5f:c0:ad:d4:6c:90:53:db:25:5a:
f7:4e:03:09:83:ac:31:63:7c:1b:64:e0:ef:fe:a1:9f:43:34:
26:18:c2:d6:25:95:13:ba:38:25:b3:30:59:6b:9e:3f:e9:98:
56:2e:36:f0:a4:b2:43:13:07:95:12:01:1a:dd:37:9d:2b:34:
fa:19:be:c9:29:79:04:c2:be:7c:19:97:e1:8a:3a:62:d3:92:
b8:62:83:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:20:24 2026 by rpki-client