Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier: dU5+3Q4fD0p7yayuo94r7pWvojG8AOU41SD2fcMouQ4=
Subject key identifier: 59:90:41:64:D2:90:46:41:BB:A2:0B:B4:27:1D:DB:E0:70:48:38:2B
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial: 019FACE3BE87316CDA9D7DECC8FCD5378660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number: 0E23
Signing time: Wed 29 Jul 2026 08:00:34 +0000
Manifest this update: Wed 29 Jul 2026 08:00:34 +0000
Manifest next update: Thu 30 Jul 2026 08:00:34 +0000
Files and hashes: 1: wUbhJ1Q-nlV3uEvjLuk77UUB7Gc.roa (hash: R+RnalKmquQEDqC7KdcNQz1uImcCiR+mgzNPx6OERvI=)
2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: hsLUuKobwesv9VqeiCl06lOS31DPBJzAlIQDCVqrCc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:be:87:31:6c:da:9d:7d:ec:c8:fc:d5:37:86:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Validity
Not Before: Jul 29 08:00:34 2026 GMT
Not After : Jul 30 08:00:34 2026 GMT
Subject: CN=59904164d2904641bba20bb4271ddbe07048382b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:7d:83:69:1b:c5:3e:7e:63:1b:38:7f:18:
11:15:11:94:29:9e:35:37:68:63:c0:b0:4b:52:6d:
e8:82:fa:99:71:f0:00:b7:22:ae:de:42:c4:6c:36:
05:33:cb:94:69:45:7f:2a:fe:1d:3e:fb:66:d7:bc:
97:25:5e:35:e0:ea:43:da:1f:48:a3:3e:b6:6c:09:
a1:ed:14:e5:2a:78:4f:bc:95:f5:67:bb:ec:64:9c:
f0:66:0e:9c:81:1d:c4:02:e0:7b:1d:68:6c:e7:4f:
c3:83:36:7d:3f:c5:1e:69:5e:2d:02:c7:2e:d4:bf:
12:50:50:8d:1c:64:04:58:fb:15:a5:7a:3f:c0:4d:
54:23:ed:e1:e3:01:89:f5:6d:b5:ce:e2:b1:16:c3:
5a:92:a6:6b:dc:be:01:1b:b9:ee:a6:3f:5c:9a:eb:
f7:c4:4a:05:c6:5f:f1:a1:45:34:22:5c:61:9e:3d:
24:6f:16:e0:5d:ff:93:20:4f:5d:34:cd:6b:7e:c4:
59:42:02:98:37:fa:26:6a:e2:99:bd:49:e7:7a:dc:
45:7b:04:4a:da:e1:77:46:f0:31:65:3d:50:2f:75:
85:fd:46:ab:ba:2b:00:43:d7:46:ad:9c:98:2a:56:
b7:8f:f6:c8:d6:c9:4a:87:45:a9:69:91:23:62:58:
05:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:90:41:64:D2:90:46:41:BB:A2:0B:B4:27:1D:DB:E0:70:48:38:2B
X509v3 Authority Key Identifier:
keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7e:62:eb:1a:31:01:8a:bb:73:7f:6c:fe:14:66:0a:e8:7c:
dd:c1:8e:d7:d3:93:2e:6c:71:9e:43:f8:37:a0:ee:15:a9:50:
67:e0:8a:ef:d3:fc:48:a5:5a:ed:76:80:3c:2c:51:dc:b1:a8:
ac:bf:10:f0:ef:6f:51:79:1a:01:48:10:54:af:59:27:95:9d:
13:80:04:ca:cf:bd:87:9c:ca:ae:1d:65:76:e7:62:de:fe:99:
53:f6:18:82:88:aa:90:2d:a4:67:18:55:8a:7c:b2:f9:62:dc:
d5:cd:4d:e6:f5:79:95:c6:22:a9:4a:ec:db:50:94:db:da:cb:
d6:93:5b:4b:b2:7c:bf:16:46:28:d0:ec:34:57:f6:70:fa:c2:
51:ce:4c:f9:34:12:56:a2:7c:6b:c2:d7:9a:f1:43:95:fa:92:
51:f7:45:5f:20:d0:d9:28:41:97:88:d6:ca:bb:36:e1:ba:7e:
9f:61:87:7e:85:c6:58:42:b3:83:84:6c:fc:30:1c:93:c4:fa:
a3:93:61:e7:58:59:30:ba:34:5b:90:55:8b:13:ba:cb:13:1c:
1b:41:6f:17:aa:e7:37:b5:16:84:bf:34:a0:d8:50:1b:1f:c3:
87:b8:63:f5:c4:6d:2a:1d:04:4a:51:bb:53:c1:cb:6e:86:d0:
c2:89:21:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:29:24 2026 by rpki-client