Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json)
Hash identifier: U0kbL9DSnu/j0GHlvLXcDQJl81tBLYTHDtUd8lXW4y4=
Subject key identifier: 04:DB:19:AB:73:E1:3E:28:BA:23:AA:AF:E8:32:40:5F:1F:73:CC:77
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 019FAABE60B8F3AE7A9F35235AA95F59CF60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
Manifest number: 0927
Signing time: Tue 28 Jul 2026 22:00:30 +0000
Manifest this update: Tue 28 Jul 2026 22:00:30 +0000
Manifest next update: Wed 29 Jul 2026 22:00:30 +0000
Files and hashes: 1: Ewfu9z930MhyPX8313muaLXe2oM.roa (hash: xaNiT68XuLXKua+vW1yOiyZ2EeD/WOwvk5iab3yyEqE=)
2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: BFC0hf7Lbi8lWnU5DnU19ICFJBpKzvxCfF5xb0Roazg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:60:b8:f3:ae:7a:9f:35:23:5a:a9:5f:59:cf:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Jul 28 22:00:30 2026 GMT
Not After : Jul 29 22:00:30 2026 GMT
Subject: CN=04db19ab73e13e28ba23aaafe832405f1f73cc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:92:df:94:77:10:a2:c9:f7:24:e5:07:38:f4:
45:5b:2e:3c:73:63:7b:6d:f2:12:dc:3b:00:33:39:
c1:12:7d:c3:6a:4a:af:e4:65:e4:0e:40:e4:61:6e:
5f:b9:5f:e8:b7:16:36:77:10:4a:d3:b9:a1:86:3a:
a1:5d:51:2b:d0:22:e6:f4:2f:24:40:7e:07:a0:40:
20:cb:c9:f5:8c:76:b3:bd:13:28:98:96:55:9e:88:
6f:6b:9a:93:fe:d2:fb:c4:19:26:58:99:79:cf:ca:
06:e0:ba:37:17:5a:89:8a:e6:12:95:75:ca:ad:ca:
6f:74:69:5d:d1:ad:72:be:10:bd:20:a0:d7:4c:b1:
f6:a5:22:60:bc:dd:fd:47:ee:5f:6e:f1:32:b4:d3:
ae:cd:ad:4e:92:41:ec:06:84:3d:15:79:2f:20:97:
95:eb:21:2a:d6:16:ff:cb:af:27:3b:40:14:e5:8e:
38:dd:08:22:45:38:17:e9:3f:67:34:96:92:1d:b9:
b8:2b:a1:c2:da:38:3c:65:e3:b8:79:b4:28:78:ca:
dd:13:05:4e:5f:03:0c:31:8c:5e:42:ab:a5:b2:d1:
f2:6f:3f:3e:28:ad:69:58:1c:08:9e:13:df:b3:6b:
55:00:b7:ff:dc:e4:5c:2c:c4:f3:d9:7b:ad:cb:09:
99:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DB:19:AB:73:E1:3E:28:BA:23:AA:AF:E8:32:40:5F:1F:73:CC:77
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:97:33:df:65:60:18:14:a3:c0:38:2e:a0:dc:f4:19:1a:50:
79:39:90:b2:37:3e:64:86:a3:4b:37:10:06:32:ff:46:ca:87:
b1:b6:50:14:4a:8c:27:2a:5f:57:1c:96:f6:90:36:89:82:11:
e4:9e:77:2a:73:70:b4:dd:65:e8:71:8a:86:cb:e7:8e:62:e1:
68:f6:61:2a:57:2d:6b:76:61:dd:b5:ca:bb:02:f3:7b:e4:5a:
4d:a9:78:53:1c:08:51:ec:31:65:bc:96:d5:4a:03:3d:7f:4a:
70:06:cd:a3:6f:2b:d3:cc:57:c2:df:e1:76:a7:40:02:92:e3:
48:d6:5f:e6:b8:8e:01:10:43:c4:a9:1a:ad:25:59:2d:b5:62:
ed:25:cb:31:ba:15:e0:57:68:b7:1c:7d:db:7a:27:4f:dc:b0:
f9:f6:f4:09:de:c6:8b:fc:59:9a:18:12:c7:52:96:c9:ee:c3:
86:63:6a:33:96:ef:e2:9e:59:2e:79:a5:f4:94:57:76:49:84:
e8:f7:cb:da:55:49:a5:87:bd:6f:82:b3:85:52:bf:21:05:54:
a5:69:2b:6d:18:e4:f1:80:6a:74:d5:44:36:92:c3:08:c0:f4:
c0:74:2d:9d:57:f8:41:ad:6b:19:e2:35:6f:ed:44:75:b8:4c:
92:8f:d3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:43:27 2026 by rpki-client