Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
File: YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json)
Hash identifier: oX18Tfc5ZtP7SiKh+flpOqWhJpynQx3sX12zitb627w=
Subject key identifier: EC:4B:96:90:39:F6:BF:83:0F:6D:11:4E:FC:11:0D:B8:BC:2F:E2:73
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial: 019F65A6C2A08F0FB8E084948BF366B7421D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
Manifest number: 19B0
Signing time: Wed 15 Jul 2026 12:00:55 +0000
Manifest this update: Wed 15 Jul 2026 12:00:55 +0000
Manifest next update: Thu 16 Jul 2026 12:00:55 +0000
Files and hashes: 1: J3trJnMvDZJ0BcVGu5fGaJyrupg.roa (hash: e8osDQcIENsCGM6JtSYddOPk22ajtK1guuuZINYdCT0=)
2: WiHVRTKANQPSLlslZgPEwLo61sU.roa (hash: NTrkcyBW/Rrku+dfbekK8M7MWrvABIKgt6ihPMKiaiM=)
3: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: cfv+TGnNp9d3UIQCbd5SUFyu4D/BLuLSW5X4h/RBcFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:a6:c2:a0:8f:0f:b8:e0:84:94:8b:f3:66:b7:42:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Validity
Not Before: Jul 15 12:00:55 2026 GMT
Not After : Jul 16 12:00:55 2026 GMT
Subject: CN=ec4b969039f6bf830f6d114efc110db8bc2fe273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:27:48:92:86:c2:15:a5:8b:70:a3:70:6a:5a:
a9:e7:61:ac:aa:44:b1:91:f2:5f:a8:f2:b4:a4:d8:
3b:bb:e4:46:fe:07:b5:be:38:45:79:3a:89:ef:6d:
9c:d6:a4:60:97:a4:40:34:f2:b5:3b:c7:06:e2:38:
b2:bc:11:bb:01:77:6b:55:77:6d:bb:f9:91:8b:a2:
59:ce:dd:63:53:d6:0c:8c:ce:07:b4:62:c6:51:d2:
de:9e:17:36:d1:ef:a8:f0:78:aa:ec:f6:f4:67:94:
37:34:e5:10:6b:46:99:ed:f5:6b:58:c6:89:9d:c3:
94:f3:99:39:04:62:44:0c:ed:88:15:11:f4:06:da:
c6:65:65:f3:f1:d3:85:ed:c1:da:7e:ef:0b:35:90:
cc:4d:1b:c0:cb:b8:9b:46:0d:4e:39:4f:c1:df:48:
83:6e:92:63:b9:56:df:d4:8b:24:a7:5a:ac:1d:b6:
b2:9b:6a:43:f4:d1:1c:e8:0b:8d:39:2e:fa:c0:a1:
7a:ad:8b:0e:8c:3d:45:c1:b0:9e:88:0f:3d:b0:2b:
8b:55:61:82:bf:d3:87:ba:8a:8c:a0:e4:b0:e8:ac:
e4:d7:2a:07:8d:19:f1:a9:11:87:21:4a:f7:8f:94:
20:b9:eb:a6:8d:9f:df:30:ed:49:9a:21:8e:97:65:
45:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4B:96:90:39:F6:BF:83:0F:6D:11:4E:FC:11:0D:B8:BC:2F:E2:73
X509v3 Authority Key Identifier:
keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1c:38:b7:de:00:0c:65:af:71:ac:1c:a5:80:bb:e0:03:48:
84:b0:2b:5d:4b:e0:6a:cf:b8:3a:3b:af:72:4b:de:a5:a8:21:
ac:55:e2:16:85:eb:16:37:a1:2b:05:04:1b:d7:b0:96:92:f2:
f7:64:ac:ae:5a:7b:cb:00:ff:06:37:cf:ce:89:67:57:e3:df:
aa:a7:13:e8:a1:60:30:4c:5c:2e:72:9c:33:e3:df:5d:78:0b:
40:04:61:d3:2a:fe:eb:d7:09:21:97:2e:00:5f:e0:b4:c3:09:
f8:ef:50:55:4f:57:7d:23:40:59:3a:04:57:25:a5:dc:16:d7:
37:31:0b:38:90:27:cc:1b:c3:d6:3f:55:53:00:70:9e:4b:f2:
28:7e:7e:5f:16:6e:41:33:51:86:09:c3:3a:a5:cf:45:49:57:
39:c5:86:ae:b9:30:05:0d:95:ad:2d:2b:d8:b3:7e:f8:29:61:
98:14:44:43:49:68:42:50:85:7d:67:8c:f2:b2:27:ec:a2:42:
df:9a:0b:b2:08:3c:2a:26:ff:5a:b1:cb:b0:26:7d:46:1f:ea:
93:6a:6e:8f:e9:cc:1a:15:77:4d:a5:88:5d:c0:f3:ec:5d:47:
2f:93:52:f7:02:d3:16:45:9b:55:d2:29:72:43:9f:da:3d:5d:
ea:9a:69:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 19:08:48 2026 by rpki-client