Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
File: YXvGPTvl98AszEqZ_C8vVSiKLWc.mft (raw, json)
Hash identifier: rVL4hT3acpAlnghKeASb/+KerslxIfwGS9VR7GCHa+Q=
Subject key identifier: 4C:C6:B8:1C:CC:A8:30:4C:88:BC:D1:38:7C:1C:04:D0:C7:83:9E:60
Authority key identifier: 61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
Certificate issuer: /CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Certificate serial: 019FAC7652434D3493811A9086D2AC757A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
Manifest number: 01AF
Signing time: Wed 29 Jul 2026 06:01:03 +0000
Manifest this update: Wed 29 Jul 2026 06:01:03 +0000
Manifest next update: Thu 30 Jul 2026 06:01:03 +0000
Files and hashes: 1: YXvGPTvl98AszEqZ_C8vVSiKLWc.crl (hash: bv0Lpx/LHlwE7wtAx0R/vNcgPeo5wDYcoDDOGvegIJw=)
2: oC8MNAr3RRJD7iVzFgvjH2c0fSg.roa (hash: zQGn/viKIKxmP8Pxorl9pkhqm4xAapY3F6TTAuu6mlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:52:43:4d:34:93:81:1a:90:86:d2:ac:75:7a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Validity
Not Before: Jul 29 06:01:03 2026 GMT
Not After : Jul 30 06:01:03 2026 GMT
Subject: CN=4cc6b81ccca8304c88bcd1387c1c04d0c7839e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:c7:3c:d2:f8:5a:31:b9:b4:3e:44:ea:70:
60:de:d2:cc:3d:28:79:b5:ee:24:ee:41:78:3f:9e:
af:ac:e1:48:d4:40:75:8f:13:fe:da:8e:22:90:64:
fd:29:65:7b:0c:98:4f:df:65:60:c2:69:e0:f1:5d:
0b:df:1b:d0:6b:15:28:1a:c7:38:a5:db:76:7f:ef:
a8:78:b0:e4:6a:5d:27:1d:dc:49:30:ad:88:af:c8:
15:81:4c:94:a1:ba:0d:a7:af:2a:b9:ce:8e:56:71:
08:3d:26:a4:a7:bd:17:99:ed:a8:56:6b:97:8b:c5:
95:2a:53:59:80:eb:68:cb:e6:54:1d:fc:f0:ca:6a:
5d:a0:8e:bc:da:da:94:b6:66:0b:e5:81:2f:d7:76:
ab:63:4c:e0:c0:3f:e9:42:43:35:ed:80:71:62:69:
e8:f5:29:86:9f:e0:62:16:ef:37:43:3c:0b:2b:66:
9e:bd:e1:41:e3:22:9d:6d:02:fb:0c:59:4a:07:e2:
43:12:d4:f8:28:42:fb:5f:24:6f:45:f1:fa:95:88:
ab:97:a1:01:cd:88:64:6a:8b:4c:a5:77:66:ae:24:
cf:12:78:8c:04:f1:04:78:64:12:ea:9e:70:95:3c:
a1:4c:fd:0a:5d:d3:ab:36:b4:91:09:73:10:22:86:
d0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C6:B8:1C:CC:A8:30:4C:88:BC:D1:38:7C:1C:04:D0:C7:83:9E:60
X509v3 Authority Key Identifier:
keyid:61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7c:21:c6:ac:3a:66:ac:fe:19:1d:07:9c:59:ba:ea:80:ea:
cd:ef:c8:16:46:c3:8f:aa:db:c5:d2:56:56:86:11:50:31:7a:
54:52:d1:18:b5:45:db:18:f2:c8:f9:23:e2:74:06:23:48:a2:
8b:5d:a0:ad:5d:f9:03:b7:91:b5:f8:6c:57:f9:63:fb:b2:c0:
48:b9:9c:6f:9c:63:f0:d5:ac:ec:99:9d:f4:80:a7:e7:bc:7f:
94:b5:01:0d:12:26:03:1c:38:63:fc:49:fa:a7:c8:33:fa:b7:
32:04:85:a1:22:cd:c2:8c:06:3f:d5:e2:0b:66:98:1f:94:a0:
43:ed:aa:3f:50:94:9e:51:21:33:ab:dc:3c:c3:01:b7:57:90:
24:00:b6:e9:47:00:c6:55:5f:79:96:66:9e:2e:1b:c3:40:72:
82:96:5a:5b:33:7f:9d:cd:e1:df:6c:5e:19:3b:77:4b:85:f8:
21:70:75:f4:73:f7:86:ac:be:d0:73:45:74:a1:0c:66:ce:3e:
93:13:65:93:09:30:55:4e:c0:40:e6:3f:ab:74:42:6b:c3:a6:
45:cb:7d:43:f2:2a:fa:4a:9a:ec:53:ff:ee:cf:f8:fd:eb:72:
e6:a1:af:ee:64:38:8a:8b:4f:a0:51:fd:35:64:ed:a6:df:61:
54:c1:5a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:01:30 2026 by rpki-client