Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
File: YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft (raw, json)
Hash identifier: 3UAK1BRSecye9fK9sTUmMsBZ6Gg7c9AHHY/pmuaEEYk=
Subject key identifier: E3:B0:C2:D9:55:10:35:D4:B3:78:81:E1:31:22:9B:7E:0A:5B:63:98
Authority key identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
Certificate issuer: /CN=6149cbba3e6629beaebfb69668678ada51744898
Certificate serial: 019F85D5E1FF8773CD328491FE6EACBAB3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
Manifest number: 16E9
Signing time: Tue 21 Jul 2026 18:00:14 +0000
Manifest this update: Tue 21 Jul 2026 18:00:14 +0000
Manifest next update: Wed 22 Jul 2026 18:00:14 +0000
Files and hashes: 1: YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl (hash: I70JOir1h/9AdImyKmznUpR8Ir387pd+M3sj9yAqE38=)
2: v872mIxxwSGV2ha6Yd9jq9CMUao.roa (hash: 1G9sBjvfPqj7U0dttH4sUsWBNP9ecKYoKzenyr22mAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d5:e1:ff:87:73:cd:32:84:91:fe:6e:ac:ba:b3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6149cbba3e6629beaebfb69668678ada51744898
Validity
Not Before: Jul 21 18:00:14 2026 GMT
Not After : Jul 22 18:00:14 2026 GMT
Subject: CN=e3b0c2d9551035d4b37881e131229b7e0a5b6398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:b2:23:14:eb:82:6e:8f:a2:cc:d2:58:43:
f6:62:64:7f:6c:c4:49:f6:8e:d7:a4:dc:ca:84:3e:
04:03:38:16:8d:f9:bd:5b:3e:2b:2e:65:0d:29:4f:
4f:e2:fe:24:8b:ec:d5:8e:6a:52:c0:34:04:16:30:
b5:a2:ff:29:fd:4d:bd:bf:fb:42:16:29:56:dd:7f:
e0:e6:8e:a4:4b:bc:54:ab:6c:f6:fe:d4:08:02:37:
9c:c5:08:4c:d7:4b:e5:60:fb:e6:63:09:68:8c:e2:
6e:75:82:e9:1f:b0:05:92:54:ec:9a:2e:16:e2:f3:
7a:a0:64:50:b1:db:4f:90:cf:7c:79:91:b6:fa:fc:
26:c8:5e:2a:4e:e7:51:df:49:0c:0f:c2:c7:14:02:
c3:4f:6c:91:e0:54:0b:09:b9:5c:c8:da:14:4f:fe:
57:d7:aa:70:52:7c:12:1a:15:af:69:6a:9e:54:9e:
bc:83:89:16:32:9f:fc:bb:31:7c:4f:c5:d5:91:97:
b9:b6:55:20:a0:85:ba:8b:e0:93:ac:bb:7b:3a:fc:
28:6c:eb:5b:81:0b:85:e0:0c:0b:71:82:e0:81:ce:
53:64:e2:3f:ce:b9:28:3b:be:fa:47:41:0f:3c:1b:
54:62:2c:64:c5:1d:12:67:7e:e2:7f:f3:78:49:3d:
0f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B0:C2:D9:55:10:35:D4:B3:78:81:E1:31:22:9B:7E:0A:5B:63:98
X509v3 Authority Key Identifier:
keyid:61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:78:c6:d0:09:c0:14:a8:f2:87:7d:d0:ea:41:8f:f7:45:67:
16:00:e8:ed:3c:79:b6:fa:a4:c5:9c:24:28:fa:aa:81:0b:ad:
bf:e3:f4:e6:60:5a:78:96:04:35:6a:a8:5c:5c:86:6e:18:d9:
12:eb:e0:86:f4:49:05:2c:e2:7f:aa:4f:95:af:9d:b9:b7:46:
43:91:35:98:b0:07:d4:0f:00:a8:38:e5:85:c2:d5:2e:94:be:
f7:be:e5:95:b1:4b:3f:09:6f:a7:bd:28:32:c0:f5:b5:92:0e:
1d:39:56:e1:de:ec:4e:94:73:65:e7:29:88:de:df:71:77:03:
8b:0b:ac:7e:c2:8c:36:39:95:20:c2:04:0b:c4:42:dc:f2:ea:
7e:be:01:ba:7e:2a:3d:bd:b4:74:eb:2b:1d:be:7f:44:09:84:
09:39:5a:93:c4:6d:2e:42:a7:f6:e2:57:3c:32:5a:9e:30:73:
b2:0c:47:b5:ca:ca:21:34:e5:25:16:40:04:86:18:0d:04:e4:
26:e5:3b:7c:c0:5e:28:73:6d:14:15:9b:f8:07:67:82:34:54:
59:34:a7:01:fe:4b:49:56:71:12:16:d3:e1:82:cc:62:86:58:
c1:1a:f3:da:f4:dd:fb:82:eb:b2:c4:a7:66:97:b0:a1:26:19:
bc:32:8b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:16:10 2026 by rpki-client