Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: KmguB+E137KW9+iYxnbT5p3+fxXHigEH1yplmyLym1M=
Subject key identifier: E4:8A:9C:8C:15:6A:29:87:CE:BC:68:8A:F9:AF:34:68:A8:D7:3F:E0
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 019FA3049EBEF03407C7B1789668D8C0E61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 10:00:16 +0000
Manifest this update: Mon 27 Jul 2026 10:00:16 +0000
Manifest next update: Tue 28 Jul 2026 10:00:16 +0000
Files and hashes: 1: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: 04z64gB2iBrb0Ka20C+DzCHJTMj8v4WSUm1bl39rjNg=)
2: aEsbh_haMhsqIB5wCxd9t5IabFM.roa (hash: Ne5BDRQ7SBRIMJmF2NPdjnl9j7TlWo9N5JJSWBtw7bI=)
3: yrgQph9zHMA3wU0ZObxjZhTJQrM.roa (hash: XV/X6CYSDEZtr00aa1x8ls6ykfziXhFe1fHOXXDEkhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:9e:be:f0:34:07:c7:b1:78:96:68:d8:c0:e6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Jul 27 10:00:16 2026 GMT
Not After : Jul 28 10:00:16 2026 GMT
Subject: CN=e48a9c8c156a2987cebc688af9af3468a8d73fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:68:4f:3c:cb:68:6e:79:ec:0e:df:4f:90:
94:3c:a3:7a:ed:3b:01:ec:ff:dd:ed:13:ac:e2:fe:
55:de:60:ac:61:d7:f3:05:51:31:85:97:71:d7:02:
77:c5:84:f8:cc:c7:23:10:29:89:b8:b4:5a:93:6c:
f6:ce:99:4b:98:dc:07:71:3c:57:35:87:d2:f2:63:
9c:03:74:db:56:1b:27:6b:15:dc:d0:33:95:61:63:
3b:d3:db:05:0a:f7:fb:24:a4:7a:f1:60:9d:1d:54:
49:c9:16:76:55:ae:b1:75:4a:ca:13:52:02:24:f2:
ac:6c:5b:2d:5f:5e:79:5a:e5:18:ca:c6:6a:09:1d:
b7:6f:dd:e1:e4:d9:12:ae:f7:a7:52:78:fd:b5:d8:
6e:36:76:65:02:77:c7:de:1c:d3:9e:9d:5f:17:bb:
c0:dc:da:09:bf:42:f5:73:f7:fd:c0:0f:bc:97:f7:
80:3f:a9:68:0b:8f:e0:9a:4d:3f:3d:99:88:7d:f9:
26:f5:0b:ca:32:0a:3c:7a:86:49:10:14:cc:57:f0:
31:0f:46:1e:77:a5:f1:21:f0:99:2c:26:dd:e8:70:
ae:4f:f8:03:37:14:25:f6:f7:c8:9d:e8:39:8b:5c:
27:e4:42:43:fd:8a:cd:da:dd:0d:8c:b2:02:ea:89:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8A:9C:8C:15:6A:29:87:CE:BC:68:8A:F9:AF:34:68:A8:D7:3F:E0
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:73:75:d4:86:1e:aa:92:13:39:be:85:9c:b7:9a:7c:30:18:
40:ff:f0:56:fb:72:da:f7:f4:93:e8:50:a0:ed:46:77:e3:04:
56:3e:82:4f:6e:16:76:df:be:73:c3:e0:65:1f:ef:1c:22:88:
32:a5:bd:71:1d:d7:fb:ec:d8:8a:55:2b:58:c9:2b:49:12:31:
9e:f4:01:3c:fb:32:d0:ff:41:dd:2b:1f:16:4e:86:90:d3:1a:
ff:ca:85:eb:0b:e4:bd:3d:e1:df:00:ba:be:f2:18:af:92:9e:
c2:43:46:39:03:bc:70:b6:83:47:ed:22:ad:ac:45:ce:05:49:
59:a9:4f:03:dd:dc:ff:18:f6:50:46:00:2b:69:03:4b:76:3a:
2b:d3:49:6d:aa:94:e8:96:b6:9f:ed:37:4f:51:a3:6f:cb:65:
8d:62:c9:c7:0e:05:a5:3a:97:40:6b:1b:42:2c:7b:cd:0f:28:
01:60:ac:41:5d:d4:39:6e:aa:77:48:b0:e0:8c:f7:b8:cd:a4:
f1:ed:28:8d:76:0d:4b:9f:35:62:79:b1:c9:2e:b3:24:2f:24:
1c:e0:9e:4f:8f:06:b9:85:5d:ac:63:00:de:db:9c:fb:31:ff:
ca:74:6d:cb:7a:1e:6b:d8:7d:6b:c9:d0:2a:ff:44:a3:08:91:
44:4a:86:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:11:24 2026 by rpki-client