Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
File: YET26nnk4qPgKos47QzTpAWROKw.mft (raw, json)
Hash identifier: T8gNMNt3y9Wh8MnXQ8YOZHnA/Bktju+K+7UJpXTTIKw=
Subject key identifier: D5:39:7C:45:39:8D:50:1D:3C:61:24:14:B0:EC:0B:DB:22:DC:BF:10
Authority key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
Certificate issuer: /CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Certificate serial: 019FAA50B5BF09B449F1D3813E4A54672202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 20:00:43 +0000
Manifest this update: Tue 28 Jul 2026 20:00:43 +0000
Manifest next update: Wed 29 Jul 2026 20:00:43 +0000
Files and hashes: 1: IPSLN6U-mPgMx0jYi_ORZZDwgdQ.roa (hash: 9nBExfSnL3g+4CNDTe8481JrkpEVyvy2139EXebjOIs=)
2: YET26nnk4qPgKos47QzTpAWROKw.crl (hash: oSGEic+BaCHuemT7fh2o2mYrb14If4xFRcaEFnl6hZ0=)
3: vNHV1DYtOsfUinz5gwCFoBzKiIg.roa (hash: OIxUV31cdJf2l/w+qSDbXSkKEcQlTRfi/zGOENFvc+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:b5:bf:09:b4:49:f1:d3:81:3e:4a:54:67:22:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Validity
Not Before: Jul 28 20:00:43 2026 GMT
Not After : Jul 29 20:00:43 2026 GMT
Subject: CN=d5397c45398d501d3c612414b0ec0bdb22dcbf10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:72:20:ab:a7:48:37:f8:5a:93:fb:e4:af:
0e:c7:cf:33:69:d2:29:91:e1:2f:7a:48:03:50:80:
22:ac:65:78:19:82:60:74:80:f8:88:d8:4d:e6:87:
b5:26:be:19:0b:4a:9e:51:ca:eb:bb:6a:dd:13:71:
f3:45:0e:47:58:82:da:60:56:37:57:0d:32:2a:8f:
47:62:7b:d2:db:e8:8a:06:61:03:13:52:ff:bb:15:
8d:97:ff:ae:cc:80:3c:3a:7c:27:1c:41:5e:78:00:
22:d0:6f:44:f0:54:74:88:60:93:2c:5e:df:5d:94:
dd:9f:d8:d9:eb:3a:af:b0:19:30:30:c2:24:b9:a2:
ee:ce:6f:3f:e5:39:25:38:c8:8d:d7:30:de:18:af:
e9:8b:4e:4c:b3:e9:2d:52:a2:d2:05:f1:05:98:d6:
ea:bd:9d:8b:c8:6a:ea:95:51:fb:f3:ca:b5:fe:b6:
28:46:c9:19:93:c2:8e:82:93:ff:30:c1:af:5c:2c:
ff:35:11:b5:18:98:d9:f7:a8:41:4c:18:0d:6a:6c:
d2:eb:a8:aa:5e:58:b2:b3:67:91:4a:24:38:bd:ed:
8f:d3:8b:bc:fd:6e:d4:c7:ca:d8:a1:2f:ca:7c:f5:
5a:51:bc:f5:62:f0:8b:59:ef:6a:56:ae:ed:f2:b3:
ec:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:39:7C:45:39:8D:50:1D:3C:61:24:14:B0:EC:0B:DB:22:DC:BF:10
X509v3 Authority Key Identifier:
keyid:60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:82:fa:7c:e3:17:4d:2e:ec:f8:45:5c:e1:9c:86:54:99:1d:
1b:65:bd:38:a7:2c:79:c5:db:ff:76:0d:fa:9d:51:da:15:69:
74:59:9c:39:bd:1e:a9:ff:86:a6:ec:1a:f6:9a:df:b2:7a:d1:
a9:6a:d6:2b:48:d6:fe:fd:5f:92:3b:1a:7e:4b:27:53:cc:24:
76:52:77:72:e4:30:36:70:15:e5:f3:ed:aa:f3:f6:9a:62:50:
64:f4:52:a0:65:cb:36:12:a1:b5:dd:d2:8e:75:1b:eb:6f:44:
13:19:ff:1c:1f:76:3b:59:b1:b0:c4:02:ea:79:81:e4:46:1c:
10:10:a5:df:8c:41:f7:ad:08:e3:62:8f:01:9a:fa:01:87:a1:
94:d3:4e:15:0b:ca:1d:e5:8b:31:b6:bf:8f:48:bd:d4:09:35:
cf:c7:ad:98:dc:dc:82:86:9e:a7:44:4b:db:e1:1b:d5:34:bf:
ba:a6:8b:8a:2e:89:ee:b5:8a:b8:30:e7:5e:96:13:75:0c:35:
c6:e0:7c:39:5b:d0:c9:8c:4a:17:7f:f4:2b:d6:08:60:0d:e1:
e8:1a:d8:77:f5:82:0d:25:34:5f:c4:dd:d0:f7:9f:3f:3b:fb:
35:32:8d:19:a7:ad:cb:17:48:8b:8a:d0:cc:79:82:2d:f1:56:
cb:cd:41:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:39:46 2026 by rpki-client