Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
File: YGhXxDyh3wTLaaSgqshim98ydWs.mft (raw, json)
Hash identifier: 9fYQDYBYBEBbNs2i+hWrjDvJP0wikhG5pRamsel4Y74=
Subject key identifier: C2:1F:C7:B2:18:F6:5F:1C:D9:03:70:17:36:F0:93:D8:2A:89:71:C0
Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
Certificate issuer: /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Certificate serial: 019FAB632062A27A28CC3FDABD59C2385D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
Manifest number: 168B
Signing time: Wed 29 Jul 2026 01:00:27 +0000
Manifest this update: Wed 29 Jul 2026 01:00:27 +0000
Manifest next update: Thu 30 Jul 2026 01:00:27 +0000
Files and hashes: 1: YGhXxDyh3wTLaaSgqshim98ydWs.crl (hash: BXMI+n9IztZuATKJvWEUKHqgeZFAWErbhpMH+KtNEwY=)
2: r07b59Kbc0tU4fUroKjDGDeksk4.roa (hash: VbjM5vBRkz4uK7ac3fSu6tjCMa1PBV229HM3K4xTekY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:20:62:a2:7a:28:cc:3f:da:bd:59:c2:38:5d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Validity
Not Before: Jul 29 01:00:27 2026 GMT
Not After : Jul 30 01:00:27 2026 GMT
Subject: CN=c21fc7b218f65f1cd903701736f093d82a8971c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:33:95:3c:3a:23:6c:b3:a4:55:68:e4:c7:
ac:a5:95:a0:1a:89:1a:ea:c1:49:38:7f:ce:5e:d5:
7f:0f:19:c5:a4:6b:ac:50:48:6c:36:1d:e6:c9:4c:
6b:c7:91:ae:7f:12:2f:9e:43:0e:c8:a2:45:b5:bf:
d2:37:f3:11:df:46:48:4c:52:21:be:7f:fa:c5:0a:
83:83:83:fc:f6:d5:9d:2a:be:0a:70:20:2b:3b:d6:
41:3d:00:bb:d9:88:f2:0c:dc:19:90:50:cb:41:7d:
18:48:8d:31:38:3f:51:4f:a8:d7:89:d3:0e:5a:5a:
65:3b:cf:ad:85:cb:1e:48:11:be:dd:b6:3b:9d:a4:
83:92:84:98:b6:28:32:c9:f5:f5:5b:05:cc:70:8d:
bb:cf:cb:49:fa:7a:b6:0d:78:05:70:d1:2f:bb:bc:
7c:ec:2a:a1:8b:ce:32:ac:7e:4a:fa:7a:70:85:54:
cc:01:41:6b:bd:69:09:97:8b:c6:0b:5b:80:4f:e0:
f8:33:c5:65:91:83:46:39:2c:fa:77:2d:da:fe:64:
9d:00:de:02:ef:6a:86:f7:43:43:21:de:16:80:76:
91:8d:de:d1:f1:46:75:88:2e:5b:16:a9:c5:84:2f:
8d:2b:e2:9b:ff:68:9b:42:df:12:d1:72:8a:23:1d:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1F:C7:B2:18:F6:5F:1C:D9:03:70:17:36:F0:93:D8:2A:89:71:C0
X509v3 Authority Key Identifier:
keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bd:00:f3:33:fe:92:e1:1f:7c:7f:82:97:35:2c:ae:c6:22:
b2:ce:2e:f9:67:bf:38:e4:58:30:74:02:ff:6b:8a:0d:5a:11:
85:d3:38:d1:d0:99:f5:0f:75:41:59:4c:a9:28:2b:22:3d:85:
cf:6a:f3:fd:fa:84:ed:ed:a6:ff:77:f8:38:ad:05:e6:73:26:
7a:2b:4b:78:46:d8:fd:78:35:3c:ce:ee:fa:95:d7:0a:b3:44:
24:be:ab:12:53:d7:55:ae:55:03:b1:8c:24:a7:a6:ed:63:95:
e6:2b:bc:1c:ee:ef:c8:e4:29:3e:71:49:5e:52:29:3f:4b:6b:
9f:79:c0:34:ae:04:e8:15:79:93:90:09:56:43:c2:71:d4:d7:
b5:1c:c2:cb:97:66:e3:fb:e3:1f:b6:ce:f2:0f:09:af:4b:04:
39:24:34:ef:2b:e0:ac:cd:c4:e5:87:36:f8:08:64:75:ef:1c:
a0:77:4d:65:e6:0f:0f:01:70:19:7d:92:62:96:8c:02:03:2d:
b7:2c:b9:ce:25:18:14:c7:05:22:3f:b4:84:90:9c:8c:c0:3f:
86:e5:c8:f5:f1:28:da:cb:b5:b6:a8:b3:ba:d2:04:fd:ea:e6:
0c:09:b6:97:71:34:82:3a:6b:37:0e:24:45:16:d9:60:c9:8c:
d2:fb:39:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:59:21 2026 by rpki-client