Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: gbJkt/G7/Jr82IQJYMiRgoqGxjaL8eo7ZSnvxIopEjI=
Subject key identifier: 25:13:94:5F:90:A1:07:16:40:E0:34:00:BD:6A:4F:8B:80:6B:F9:75
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 019F871FF307B49AFBA812D7D1F12D8251B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 19C3
Signing time: Wed 22 Jul 2026 00:00:45 +0000
Manifest this update: Wed 22 Jul 2026 00:00:45 +0000
Manifest next update: Thu 23 Jul 2026 00:00:45 +0000
Files and hashes: 1: 7duJmg6XBu7Dkr56DQUbxqUTtGI.roa (hash: vRnmShBspjKGY8+2c67XY2q1Q6Ro3wJjFJL27Iuvolk=)
2: XNV9wPAqysMBIC2XJGUuQeljvGQ.roa (hash: flffQRMNH+W2jDu27k/I1V7GhHYoHbxfArajhLjcHkc=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: yx9aEmCOmXKsVcY0NNLM9Vaqsr5rBaCKdPsAdxkUeME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:87:1f:f3:07:b4:9a:fb:a8:12:d7:d1:f1:2d:82:51:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Jul 22 00:00:45 2026 GMT
Not After : Jul 23 00:00:45 2026 GMT
Subject: CN=2513945f90a1071640e03400bd6a4f8b806bf975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:18:80:e9:de:7a:ff:20:d5:01:7d:07:c9:
6a:a6:e8:d5:12:e3:a9:ce:96:bf:27:28:e2:6b:4e:
c8:f7:45:3c:d3:4d:9d:62:3c:c5:f3:ae:cd:3c:cd:
3d:fd:d2:20:dc:71:e8:1b:34:e5:43:a1:c5:59:9c:
7f:2a:89:be:01:de:b5:83:56:e0:a9:93:a5:ec:e0:
3e:7b:9f:9d:f1:c0:de:27:c8:f4:4f:ce:60:48:95:
5c:3c:c4:ef:50:6a:b7:85:94:7c:10:f9:3d:0a:65:
25:f0:6f:c8:e9:3c:a9:45:c9:e2:fe:21:51:37:3e:
68:40:29:f4:fa:16:45:ba:cf:81:e7:d5:b9:d2:eb:
15:05:c4:27:60:80:2f:2f:ec:93:6f:93:b9:7f:be:
ad:cb:9b:35:fa:0d:94:8b:b4:68:98:42:00:79:3a:
b2:cc:63:38:1c:31:8f:e3:0f:9d:00:78:93:a1:25:
c2:42:60:34:f2:89:ec:b9:dd:c9:d2:ed:08:06:ab:
92:65:5d:ed:5e:b6:fb:e7:0a:ae:2d:6d:00:9b:8c:
23:77:25:63:c5:57:c5:b3:36:fe:44:7a:ae:50:45:
18:fe:01:1e:66:30:c3:81:97:49:c5:dd:da:26:bd:
17:b6:ce:06:8b:b9:6f:52:13:32:42:98:61:22:17:
30:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:13:94:5F:90:A1:07:16:40:E0:34:00:BD:6A:4F:8B:80:6B:F9:75
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:24:63:ff:f3:f1:39:4d:77:30:6c:d4:c7:02:08:65:3b:71:
e2:a3:a9:95:3d:7d:11:88:2c:53:79:4b:3a:60:1c:d8:22:0c:
fb:3c:32:03:3d:dc:13:66:a9:0a:7e:d3:7c:42:a4:fe:3c:b3:
a0:a0:f9:55:7a:25:ba:6d:f2:91:79:09:e4:56:4f:c2:37:3e:
b0:df:b7:b0:4e:57:89:29:00:5c:8f:06:f6:b4:ef:aa:57:a3:
20:78:90:15:ff:92:9c:5e:57:63:08:12:0a:50:45:a8:ad:0e:
b9:d3:70:84:60:80:51:54:47:2e:db:77:9a:9f:bb:00:9a:fd:
0f:38:4a:9b:18:24:db:dc:d8:d6:44:d7:cd:94:0e:8d:eb:d4:
21:ef:4b:2a:c5:b7:e5:d2:67:39:81:00:b7:8a:28:69:4a:e4:
bf:33:af:b6:85:62:4e:3a:7b:65:12:8f:6a:45:0b:8b:d8:fc:
e5:f1:6e:24:54:cd:24:aa:27:9d:43:e1:81:65:41:c1:34:d8:
12:11:5c:6e:0c:ab:86:00:d1:e9:af:60:4e:5f:6a:0f:8c:e8:
84:47:cd:2b:af:b9:23:af:65:50:b8:03:fb:67:e1:fe:1e:c8:
31:20:60:21:44:b0:37:59:e6:a7:64:04:a9:2d:ec:c0:b8:45:
5f:e2:85:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:45:21 2026 by rpki-client