Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
File: yDOgOJWSdW5BXN40irvCQxKwLfY.mft (raw, json)
Hash identifier: nl1/mlMxqMScT877JPLcj/tZtdRB72VBUorMuyMmVe4=
Subject key identifier: B4:AC:48:1E:70:3A:44:90:49:85:A4:34:16:F1:CF:C1:37:C2:79:BB
Authority key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
Certificate issuer: /CN=c833a0389592756e415cde348abbc24312b02df6
Certificate serial: 019F860D7F43E0FFDF164817E88C56A52049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
Manifest number: 19C2
Signing time: Tue 21 Jul 2026 19:00:59 +0000
Manifest this update: Tue 21 Jul 2026 19:00:59 +0000
Manifest next update: Wed 22 Jul 2026 19:00:59 +0000
Files and hashes: 1: 3TtBL0qA5kisjEdyIAiW0RrkR5Y.roa (hash: IIwZ4eNX/TnLbTOdzNJ7spbedu7ExR/vuLghC48r7Rc=)
2: yDOgOJWSdW5BXN40irvCQxKwLfY.crl (hash: vTIBLrJEB+4XdriD2bvevSz9raXqrjwIwokgqjxjggU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:7f:43:e0:ff:df:16:48:17:e8:8c:56:a5:20:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c833a0389592756e415cde348abbc24312b02df6
Validity
Not Before: Jul 21 19:00:59 2026 GMT
Not After : Jul 22 19:00:59 2026 GMT
Subject: CN=b4ac481e703a44904985a43416f1cfc137c279bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e1:bd:af:37:ff:31:68:fe:c3:2d:3b:3b:8b:
c4:11:94:93:1b:e3:b4:34:15:b4:66:04:d5:dd:4b:
72:37:05:96:1e:fd:84:d3:1c:12:09:0f:62:c8:76:
7a:be:32:dd:96:44:c4:f1:33:99:ee:d4:49:8c:23:
9c:10:ee:08:86:2f:16:48:aa:86:31:c9:96:f3:26:
60:31:34:a6:16:e0:36:c5:0f:19:63:76:5b:ed:26:
2a:01:52:5d:c2:ed:5d:3f:cd:7a:7b:4e:7f:44:cd:
6d:ff:44:4b:f1:93:9e:d7:21:d3:32:d6:c6:04:c2:
62:fd:b5:2c:7f:1f:80:5a:92:a0:bb:c9:67:58:75:
9c:39:0c:38:ab:f3:20:c3:0b:0d:ec:66:a6:66:d9:
56:41:59:b4:3c:25:03:35:ea:22:8b:9c:4f:cb:9c:
bc:c2:e1:47:76:67:6a:0a:07:1f:da:df:7d:41:9f:
7f:87:5d:1f:0f:af:07:c5:e8:5e:19:33:33:cd:1c:
de:20:2c:98:e0:db:ba:64:de:fe:30:55:50:c2:fc:
5a:fe:b3:04:ea:7b:86:f3:25:fa:45:ae:08:52:b1:
5b:da:c1:8e:42:3b:bc:b3:51:46:d1:a1:d0:29:e0:
e5:86:71:e5:66:8b:84:93:61:e4:4b:95:ca:a7:af:
05:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AC:48:1E:70:3A:44:90:49:85:A4:34:16:F1:CF:C1:37:C2:79:BB
X509v3 Authority Key Identifier:
keyid:C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c3:bf:e7:d3:51:d9:55:cd:1c:3d:ea:58:9a:ef:b4:f6:30:
a9:06:cc:01:8a:e7:9f:77:b6:13:c1:c1:5a:02:94:59:94:3f:
8d:cc:f4:f0:4a:32:a3:b5:86:07:89:b0:50:9a:7c:a8:07:90:
df:62:ba:2c:7c:3f:3f:87:d2:5f:4b:74:f4:81:a2:be:46:cf:
c6:44:f7:06:10:13:aa:7a:37:50:bc:9b:c8:3d:c9:2f:ab:9b:
9d:d8:6b:bd:2e:00:a4:4b:e9:34:d5:a5:0a:63:24:89:41:8b:
96:8c:5c:ff:fd:15:36:07:ed:64:5b:eb:aa:df:0f:50:72:b3:
08:01:9c:cc:c1:78:b6:f3:c8:f1:57:dd:e8:1a:7f:44:6e:93:
3f:c7:20:19:3f:65:64:0a:77:4d:db:81:79:01:ae:eb:58:01:
47:99:94:26:c7:df:4d:58:53:c1:0b:c5:6e:8d:a6:e2:d0:eb:
da:ee:5d:48:9c:47:21:1e:49:68:02:7b:8c:7b:97:8b:58:a6:
a8:ff:79:ec:64:06:b8:98:63:a5:76:10:48:1e:0f:14:b9:1d:
f5:eb:0c:f1:b6:f5:dd:b8:68:56:2b:e0:db:e2:ab:3f:5c:a9:
03:55:6d:16:92:27:b1:42:c9:9c:75:65:b2:4a:59:67:24:36:
28:bd:74:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:53:03 2026 by rpki-client