Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
File: YO9KF7jv9Fugs51HSWVX44j__lI.mft (raw, json)
Hash identifier: KlpUQnRDThjnl0x8ENNQ8q1JHmG6Wm0ZM0E6cfzY3zQ=
Subject key identifier: C0:6C:3B:28:34:9C:E8:E4:7E:1B:51:9D:B1:68:8E:7E:0B:22:E5:54
Authority key identifier: 60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52
Certificate issuer: /CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
Certificate serial: 019FA974F3F84DF3082A651678FD99BCF883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
Manifest number: 04B8
Signing time: Tue 28 Jul 2026 16:00:41 +0000
Manifest this update: Tue 28 Jul 2026 16:00:41 +0000
Manifest next update: Wed 29 Jul 2026 16:00:41 +0000
Files and hashes: 1: YO9KF7jv9Fugs51HSWVX44j__lI.crl (hash: sNiPLUcKLs8PMexstTBTHeOGnkI6E8Y8nrVxJ+YKYYk=)
2: bqQFNJsrG869RK3Nfbwr65mLsd0.roa (hash: lGIgTiJR2g5VC3z+XfnzZ2hEM7gGKI2STx8vdvlyfrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:f3:f8:4d:f3:08:2a:65:16:78:fd:99:bc:f8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
Validity
Not Before: Jul 28 16:00:41 2026 GMT
Not After : Jul 29 16:00:41 2026 GMT
Subject: CN=c06c3b28349ce8e47e1b519db1688e7e0b22e554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:3d:85:59:d2:4c:e5:96:8c:50:14:80:55:
eb:45:3a:bf:6e:6e:9c:d0:6d:48:09:12:42:1c:f7:
36:ba:3f:2c:0a:b5:8d:33:4a:ea:e0:71:33:48:1f:
9c:70:98:ad:8e:4c:9c:01:22:58:96:d7:c1:37:33:
8c:1d:ed:a2:c0:be:de:90:8d:0c:2f:f6:66:a2:83:
99:f2:ef:ab:15:39:31:aa:8d:f7:f3:b3:69:1f:99:
80:15:32:4c:96:50:a1:60:02:3a:13:66:bc:63:18:
20:ff:9e:1e:cc:d0:a9:41:6a:7a:29:35:c7:cf:af:
44:f7:a4:4e:fa:74:74:8d:7f:f1:74:0e:1d:67:be:
a0:57:12:6e:e8:d6:06:51:a1:5f:6c:60:d2:91:5a:
34:5b:81:97:da:85:0f:66:b5:28:16:22:5f:bd:15:
90:83:10:ea:53:88:93:7d:fd:d0:33:d0:ea:a8:07:
5b:15:9e:dc:68:18:05:21:d6:35:5c:92:19:6b:3e:
72:73:d8:5c:99:c8:6b:d5:a7:92:7a:f9:d6:bd:cb:
4e:53:82:a9:7a:d6:dc:60:90:6b:71:42:4e:80:11:
6c:8a:2e:7e:4e:a6:2c:5a:26:8a:8b:79:e3:28:a0:
c8:cd:0f:44:3d:b5:d1:69:b1:b9:00:0a:67:94:16:
26:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6C:3B:28:34:9C:E8:E4:7E:1B:51:9D:B1:68:8E:7E:0B:22:E5:54
X509v3 Authority Key Identifier:
keyid:60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:95:e8:cd:30:7f:04:6b:41:46:4a:df:88:de:31:61:4d:47:
14:ed:80:44:de:a3:21:90:71:c8:13:41:ec:82:af:d3:8a:87:
c0:5f:07:c2:a4:9a:2b:bc:83:6a:e7:8c:6a:91:26:88:ac:1f:
64:35:09:e3:10:e2:ca:b4:4e:1f:67:57:31:1b:b2:b8:3b:fe:
20:1d:b1:4f:19:e2:95:9e:a0:35:b3:19:07:b3:5f:55:5c:b6:
ae:46:f0:2c:3d:99:e7:9c:90:88:03:0b:d6:6c:8f:ca:11:c7:
99:9b:25:2d:6d:6e:58:35:d9:69:04:5f:03:56:df:e7:51:88:
76:1c:4d:e1:e5:bf:9f:3f:de:d3:15:bd:00:14:75:3e:cf:29:
30:d9:41:4f:35:eb:bc:51:d4:af:11:bd:b7:d0:76:ff:61:6f:
76:f1:cc:0b:d8:5b:50:76:21:3f:19:68:e0:ec:f2:63:c4:97:
e6:06:df:90:bc:a7:3e:84:42:06:1c:d1:fd:8b:74:c3:4c:e9:
60:21:fb:a8:c2:8f:de:9a:6d:25:b2:10:01:ff:af:85:e5:a3:
c5:f2:09:26:07:8a:66:dc:8f:da:49:f0:57:15:07:83:05:66:
69:e1:42:06:56:37:61:a3:64:a3:d8:c7:40:1b:c6:b6:6f:86:
47:1e:8c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:09 2026 by rpki-client