Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: miZwRau1cLKeJUWdGCM39VEDno/FdVdIGhqigaMztRs=
Subject key identifier: B4:73:53:0B:BF:B9:77:8D:BF:08:B4:3A:8D:68:19:8D:3B:F6:CA:03
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 019FBB44A17450C1AD6613A0AFB67A465EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 19E2
Signing time: Sat 01 Aug 2026 03:01:04 +0000
Manifest this update: Sat 01 Aug 2026 03:01:04 +0000
Manifest next update: Sun 02 Aug 2026 03:01:04 +0000
Files and hashes: 1: YNrng7LuWkCZkAtvO0FUnnpdapY.roa (hash: LVcYH4intwAxq/uJ9kNbCKuqV5DBz8cARMAEmR1qWHM=)
2: jB3wCiu-AvDKO3DTXUCgLV9LXBA.roa (hash: 1qE+PeKCdqwLTMKhlG/DvcYz45q96dHEsGiuDU6+/bM=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: 28e6BIcS98qsUr2Av186ti4I60RQkN6M3HlRM1kIeLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Aug 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bb:44:a1:74:50:c1:ad:66:13:a0:af:b6:7a:46:5e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Aug 1 03:01:04 2026 GMT
Not After : Aug 2 03:01:04 2026 GMT
Subject: CN=b473530bbfb9778dbf08b43a8d68198d3bf6ca03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:02:02:58:6d:1e:51:97:30:02:e7:c0:c3:74:
90:c3:93:b9:b3:a4:9f:bc:71:74:2d:72:13:a2:6f:
cf:82:7d:4f:31:cf:b0:5d:23:41:49:27:86:dc:98:
19:c4:1a:b5:c0:f9:06:19:a4:7e:20:5b:6b:4c:ba:
87:a4:ef:df:8d:39:6d:77:28:5b:9f:82:a9:a0:bf:
22:37:bd:5e:ec:a0:64:96:4e:29:94:b8:d7:37:d6:
cb:32:7d:6c:0c:0d:70:7c:12:55:ac:c5:15:ca:54:
88:4c:65:89:cb:e3:dd:12:7c:b9:fc:0f:c9:40:2c:
48:5c:6b:b8:0b:8f:21:16:90:d6:7b:7a:74:93:da:
62:1e:f0:9d:30:17:08:92:5c:83:ec:77:c7:6b:d2:
88:07:50:03:4f:63:44:5d:c9:e1:48:30:f5:1c:3c:
4b:6b:74:62:10:f2:39:03:91:8c:c0:ab:9b:60:87:
5f:cf:cb:b4:77:17:c8:f0:99:d4:23:e0:ad:64:5e:
34:bf:53:6e:5d:2c:c7:ea:25:f8:1c:e4:dc:15:d1:
f0:1a:d7:bb:d2:a9:93:2e:97:af:7f:19:a9:4a:95:
0c:9c:31:8f:b9:f7:a4:8c:e5:dc:01:9f:fd:98:d6:
12:7b:37:b0:0f:00:4a:d0:01:c6:17:7b:29:f1:52:
62:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:73:53:0B:BF:B9:77:8D:BF:08:B4:3A:8D:68:19:8D:3B:F6:CA:03
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d7:06:53:21:8d:61:3e:1c:47:52:19:e9:a0:53:1f:3a:0d:
c5:19:8a:d1:b6:e4:8b:ce:88:4c:29:2f:a6:60:59:ce:0d:68:
98:e3:16:49:84:06:17:5a:14:4a:26:ca:d8:e3:f1:74:5b:6a:
40:58:e9:47:ca:85:7c:e9:3b:b5:31:12:d4:c1:27:36:58:28:
1d:18:6f:e9:27:fb:e5:9d:1e:b4:b6:55:9f:42:55:23:95:5b:
57:de:99:89:e3:9a:c4:40:8e:61:49:40:51:3c:49:dd:c8:0f:
52:fe:38:35:3b:59:73:cd:8c:ad:d4:54:74:f2:44:0d:ec:a1:
2d:34:c5:7c:9b:c6:9b:fd:3a:67:27:5e:ad:4e:01:65:e3:67:
9e:af:e2:84:11:25:9b:aa:ad:9d:37:c7:16:4d:67:ac:c4:b1:
08:cb:1b:7f:12:eb:eb:03:2b:47:fe:22:36:44:17:b0:67:25:
05:5b:53:2e:d7:b9:e2:4b:cf:33:9f:80:25:b5:5e:07:50:d5:
bb:34:cb:e6:e0:1c:f0:ee:af:c8:65:ec:ae:88:d4:07:91:af:
bb:6b:39:5f:f9:c2:18:5e:5d:2a:46:fc:a1:26:a3:22:37:a3:
26:3f:59:ba:94:d7:b8:f3:71:1a:53:fd:ba:d3:cc:75:d0:e2:
5d:18:98:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 10:49:45 2026 by rpki-client