Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: DI7pzm5e03rljGdVP8RPP4S/Xe4jmpfDi41IaCrmR2Q=
Subject key identifier: FB:0D:70:FA:AD:86:0D:C2:26:09:14:E1:B6:EC:AE:0E:14:DC:33:9D
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 019FAD886CF2F4DCA7378641A821CB41FDAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 1700
Signing time: Wed 29 Jul 2026 11:00:26 +0000
Manifest this update: Wed 29 Jul 2026 11:00:26 +0000
Manifest next update: Thu 30 Jul 2026 11:00:26 +0000
Files and hashes: 1: C3nc48r2b2USpSkgOVzgsEQF2h0.roa (hash: kvFI72ZsGMqBnEvEAYRTWIp6gxPL8rac8rSJwcsVy0w=)
2: XaIcpqpb27hhGRIZ8h_xuzKRev4.roa (hash: pQLbKPAj3ndWd5qjjlikkIwvz29S32Fkmehgv5Ouuf0=)
3: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: YCDHd/TofGOJBigM/BZOdHMSCiGF8qnlZv2RvqnkIEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:6c:f2:f4:dc:a7:37:86:41:a8:21:cb:41:fd:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Jul 29 11:00:26 2026 GMT
Not After : Jul 30 11:00:26 2026 GMT
Subject: CN=fb0d70faad860dc2260914e1b6ecae0e14dc339d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:24:f0:42:a4:b3:98:75:bf:74:eb:00:1b:
7b:1f:c3:49:08:23:78:01:47:9a:c1:95:36:ed:16:
a2:91:e2:6f:09:2e:f9:84:7e:fd:14:db:59:70:71:
b7:36:c9:dd:2d:78:aa:6f:6a:a4:ff:92:23:5d:00:
3d:af:5b:a4:60:36:1c:ec:a1:7e:8e:85:ef:13:80:
1e:7b:6e:a1:88:01:98:e5:b5:29:1c:5e:f0:28:6a:
c7:35:50:3e:15:52:10:76:55:40:ce:43:7a:b6:66:
48:fa:4a:29:6b:c4:09:4a:4f:f2:3a:b9:18:4a:b3:
50:1f:1e:37:bb:7c:fb:cc:1f:db:1c:ec:e2:d0:23:
de:18:b3:5f:70:85:b1:0c:50:64:ad:df:6d:e6:8e:
c1:0c:f2:81:a6:f4:84:6b:40:3b:c2:34:08:39:32:
aa:b6:ca:d4:2c:14:21:1a:de:ec:39:f5:df:21:b1:
17:f8:d4:14:de:01:18:06:ab:38:30:13:5b:82:87:
a5:aa:e2:5d:20:15:18:ef:44:8d:67:40:86:56:ee:
0d:7f:db:54:b5:ea:c2:81:18:c3:c3:65:a1:1d:64:
2a:e4:ee:ea:bd:29:04:16:80:ac:60:2b:de:1a:9c:
a4:95:85:fc:44:e1:6b:f6:0d:8b:07:d5:0c:e4:23:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0D:70:FA:AD:86:0D:C2:26:09:14:E1:B6:EC:AE:0E:14:DC:33:9D
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:07:ed:58:10:93:83:64:51:5f:02:55:6c:03:16:f4:9d:9b:
5a:4b:8e:fb:14:b1:6b:fe:af:40:3f:9e:0a:da:0a:a3:16:44:
c2:8c:17:6b:69:88:a8:12:4e:75:31:aa:d4:54:0a:bf:a7:33:
6e:96:16:6b:b5:50:8c:20:04:47:ec:85:1c:69:30:00:5f:08:
cc:a9:cd:dd:69:ab:35:53:69:53:1a:69:a4:4a:6c:7d:b9:9f:
6c:1f:51:c8:05:cb:4a:ab:95:17:ec:58:6b:15:71:b5:d7:0e:
6e:66:d4:15:d0:a4:de:bf:39:2a:3a:cf:b4:b9:2d:89:d5:75:
ed:2b:a8:68:df:15:61:84:0d:ce:98:8b:a0:1f:1f:df:b2:fc:
70:1f:e1:40:18:1c:dc:07:87:2b:aa:d6:39:eb:25:ff:24:0d:
f0:7a:b5:df:d0:72:9d:2c:e4:01:92:e5:61:65:fa:d7:7d:c4:
34:1b:48:1b:64:64:a1:90:13:b3:d9:da:77:15:64:86:85:d7:
a2:0d:d6:4c:e7:24:54:ad:54:f9:4b:31:d0:23:cd:c0:8e:b0:
83:5c:09:a5:1b:ca:70:77:4f:fb:ad:48:f9:e3:74:50:c8:69:
77:15:39:14:7f:65:a0:8a:07:67:b1:82:76:54:7b:bd:1e:be:
22:64:63:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:53 2026 by rpki-client