Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.mft
File: RYYKw_LILnYscXB-YHYOM7mWLpY.mft (raw, json)
Hash identifier: zACiX37IZM+IpRVS1bSiQpTKHvqrwaUqXBBDiQ5Ot2E=
Subject key identifier: 32:17:72:10:0A:C7:30:10:32:A1:08:3D:4A:DB:7E:4B:72:51:83:DB
Authority key identifier: 45:86:0A:C3:F2:C8:2E:76:2C:71:70:7E:60:76:0E:33:B9:96:2E:96
Certificate issuer: /CN=45860ac3f2c82e762c71707e60760e33b9962e96
Certificate serial: 019F1265C40CCFD585B62C5C8BB32614A394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYYKw_LILnYscXB-YHYOM7mWLpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.mft
Manifest number: 0119
Signing time: Mon 29 Jun 2026 08:01:26 +0000
Manifest this update: Mon 29 Jun 2026 08:01:26 +0000
Manifest next update: Tue 30 Jun 2026 08:01:26 +0000
Files and hashes: 1: RYYKw_LILnYscXB-YHYOM7mWLpY.crl (hash: qyewBAv7e1X+tR6Xu/Lgwhvz7hjlJnLHWbZ7SYFrh2U=)
2: mmEnZdJB5y2A5vx7a-IUKiFNSKo.roa (hash: h0AxjH15fpWyphKp2ONrmBwWqI/VqO79cDpaG7xwPAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYYKw_LILnYscXB-YHYOM7mWLpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:c4:0c:cf:d5:85:b6:2c:5c:8b:b3:26:14:a3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45860ac3f2c82e762c71707e60760e33b9962e96
Validity
Not Before: Jun 29 08:01:26 2026 GMT
Not After : Jun 30 08:01:26 2026 GMT
Subject: CN=321772100ac7301032a1083d4adb7e4b725183db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ff:01:e7:51:6a:6a:5c:56:18:96:02:af:9f:
b8:10:5d:0b:28:a0:45:48:34:e9:ab:67:d3:f0:ed:
50:48:41:44:e3:52:db:f1:10:8b:ab:cc:5a:12:30:
88:0e:3b:46:17:06:f1:b5:21:ba:21:01:ee:a5:84:
b7:64:72:dc:90:c4:b0:2b:33:3b:4d:da:34:a4:e6:
70:f8:ae:a1:c9:d0:1f:1a:ed:3f:9e:9d:73:27:ce:
f9:3d:5c:20:38:bc:3f:fb:ca:7f:68:92:e7:be:88:
34:b6:83:78:eb:44:bb:98:14:06:ea:57:59:b7:d2:
82:dc:a1:e5:21:12:b4:af:f5:90:d5:9b:e7:ef:82:
96:01:c9:73:c6:d1:8b:c3:f2:7d:78:28:f3:2f:ab:
9a:44:25:e4:30:37:60:bf:78:b0:e7:30:a0:a5:8d:
2d:9e:fb:1d:99:c1:99:8a:be:5b:c4:b0:7d:33:2f:
35:25:7a:c5:78:e2:8a:78:67:ad:1f:d6:48:d7:92:
40:bc:e9:38:de:26:46:5c:23:a4:89:2f:1e:56:ac:
bb:cf:cb:98:4a:97:b2:9b:fd:8b:fb:0a:cf:3b:2f:
50:7b:6e:42:0f:0c:46:e8:f7:10:76:1f:68:c6:48:
9c:47:85:ef:bf:6f:ee:84:f1:59:1f:6d:a1:a6:80:
d9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:17:72:10:0A:C7:30:10:32:A1:08:3D:4A:DB:7E:4B:72:51:83:DB
X509v3 Authority Key Identifier:
keyid:45:86:0A:C3:F2:C8:2E:76:2C:71:70:7E:60:76:0E:33:B9:96:2E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYYKw_LILnYscXB-YHYOM7mWLpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:46:e7:e7:f9:11:4a:07:93:78:53:e4:af:a5:06:09:d2:d4:
93:76:90:a9:5f:c7:9b:2e:82:e7:a4:f5:3d:56:10:7e:38:76:
79:f9:0c:77:80:1a:d1:2a:77:d1:06:72:2e:0c:6c:4e:18:cf:
9a:2d:17:f1:af:a7:f4:c1:7b:2d:fd:4b:6b:25:04:a4:d6:be:
84:cc:aa:3d:69:f1:51:fa:cb:dd:6b:f7:d2:f9:bc:8d:01:a1:
8a:5d:e3:05:da:8c:54:03:7a:40:40:a9:4a:03:02:04:b8:9e:
5e:3c:59:06:70:6f:d8:6b:16:f2:58:29:2b:8b:38:1c:33:08:
e9:5f:c0:83:c9:11:9f:43:f3:01:17:9c:84:ea:36:04:ea:2c:
19:e5:e2:25:47:91:e6:41:e7:d9:bd:df:18:a1:f3:ca:ff:45:
13:7b:03:a8:e5:16:d4:be:c6:16:a8:2d:74:77:62:6a:a8:33:
bd:39:7a:32:dc:dd:2f:83:08:69:a0:e2:82:46:27:f6:3b:fa:
d9:2b:60:f5:5c:75:ef:51:fb:28:1b:4b:0a:ae:8e:1c:b5:20:
3e:b7:ad:0f:19:f3:9e:1c:15:5c:f3:f7:86:bd:13:c0:96:45:
3d:52:d1:92:94:58:ab:74:75:7f:b4:80:dd:e7:3a:69:d8:f6:
b8:46:a6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:44:41 2026 by rpki-client