Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File: YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier: TE/V/7Vn3ij2fH54DDrYBMkExR1KbPs1WKsIw5NN8zw=
Subject key identifier: 2E:F3:1A:1D:9C:12:CC:9A:85:60:76:83:91:BE:52:A4:10:2E:AA:0F
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer: /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial: 019FAD8870B51EA2B8A8A67175782E14680A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number: 1598
Signing time: Wed 29 Jul 2026 11:00:27 +0000
Manifest this update: Wed 29 Jul 2026 11:00:27 +0000
Manifest next update: Thu 30 Jul 2026 11:00:27 +0000
Files and hashes: 1: ET5vMhLbSdWsUS7cNiMD0Da89x0.roa (hash: +AkKc2WCnmOlPOxnIiAKu7no0yZQrgr6+XgFHwBRgZU=)
2: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: VKokIeSI5RmlUNApwlGijHnUHLFL2Q3tTPbHB+O3Nn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:70:b5:1e:a2:b8:a8:a6:71:75:78:2e:14:68:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Validity
Not Before: Jul 29 11:00:27 2026 GMT
Not After : Jul 30 11:00:27 2026 GMT
Subject: CN=2ef31a1d9c12cc9a8560768391be52a4102eaa0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:f7:2b:cc:93:5f:f4:68:0c:ef:88:34:00:
2e:15:de:6e:36:b7:19:ac:fc:66:32:86:3c:8b:9a:
19:de:6d:36:d4:26:cd:59:41:20:ea:ca:f9:c0:ee:
ac:cf:fd:9e:5a:35:4e:92:a1:75:47:cd:4f:23:fb:
2d:f8:ef:35:07:40:42:55:a0:a2:c0:41:89:8f:29:
ac:c0:75:19:d6:1c:24:60:16:a1:7f:8d:a8:ee:fa:
72:fc:5d:40:80:b8:19:42:0a:16:0c:c6:63:01:4e:
cb:b2:27:ec:7c:17:ef:68:03:60:5e:28:7f:e7:42:
e8:3f:2d:d3:9c:db:c6:80:d0:f4:e2:ca:81:6e:34:
51:2c:5c:e8:69:e0:9d:2e:4b:46:0c:ae:51:73:49:
fc:6b:58:93:04:60:e6:c8:4b:fa:f6:ab:b7:e2:7d:
80:09:f7:76:df:10:4d:a0:d0:96:2e:23:d1:f6:65:
03:94:d6:cb:b9:0a:97:1e:be:ad:4c:6b:b1:fb:5b:
df:52:b4:b3:9a:21:00:f7:8d:eb:ff:78:21:87:8d:
8a:b2:f8:5a:0e:0d:2c:11:7b:93:76:22:db:0e:65:
8c:f1:df:70:bc:11:f0:8c:1a:95:e3:c2:24:e2:46:
21:20:70:70:6f:8e:2c:ca:fd:ad:d5:39:d7:d7:77:
37:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F3:1A:1D:9C:12:CC:9A:85:60:76:83:91:BE:52:A4:10:2E:AA:0F
X509v3 Authority Key Identifier:
keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7b:3d:b3:92:b8:a8:d2:7d:dd:10:56:6b:e8:0f:39:70:bb:
19:5e:44:5c:df:fb:00:29:d7:77:fc:3d:a2:89:e1:38:a2:d6:
00:95:46:0b:2b:1d:72:fc:cb:38:89:c6:78:e7:0f:bb:e1:bf:
0a:d0:62:4c:08:62:a8:e7:22:e7:41:6e:38:dc:51:7d:a2:b7:
a5:9b:cf:44:df:a0:74:79:e3:71:70:ef:e3:c8:58:f7:f8:11:
a8:4c:6d:b9:f0:ea:1e:21:be:20:15:b7:64:0f:be:a5:d9:92:
fe:6a:06:df:55:bb:ac:dc:47:5c:ff:75:66:57:02:62:cb:95:
b8:27:e6:ce:9e:70:42:e7:83:e1:9c:1f:55:58:7f:4e:14:70:
24:7e:95:4f:3a:32:b8:51:5b:90:c5:0c:b7:cc:92:7c:2a:d8:
e6:9d:13:0b:29:b2:ea:1e:91:a5:8a:00:ce:5d:f5:85:6c:74:
84:fc:11:79:6f:d3:1e:ec:8d:ec:e3:5c:f1:e2:cb:3f:36:5d:
82:83:d6:b2:57:6f:6a:43:f7:d2:1e:72:1e:19:64:8f:e6:01:
97:e6:74:fb:79:52:e8:02:d2:d9:69:3e:03:d8:50:35:46:14:
90:df:fc:be:4d:f7:13:24:62:48:c8:46:08:0b:0e:a8:e0:ce:
da:bc:8a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:49:16 2026 by rpki-client