
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File: yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier: ouyjHBGxef6wYov9JO7WIW9vLlH1gPkn+dZIBZgHDLI=
Subject key identifier: 4C:DD:B9:18:67:77:DF:8D:EE:AB:1E:73:76:E2:E6:EF:80:96:C4:70
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial: 019FA1BB0F0F505CBC30FB4A08B386155BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number: 122B
Signing time: Mon 27 Jul 2026 04:00:18 +0000
Manifest this update: Mon 27 Jul 2026 04:00:18 +0000
Manifest next update: Tue 28 Jul 2026 04:00:18 +0000
Files and hashes: 1: D3wkpKKSoJovDsiCfvbh1DYTkx8.roa (hash: c0FcHGYTB+tG9IR/+QbyBfjUn2VqFpbtfy3DDserGhM=)
2: KSjHgXPRASqnBW1tjOtvhmkWPHE.roa (hash: h5XvzMTTFxSuHg9vWwCmjacM7SXacJTLfB8wl2n3Cec=)
3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: 9tp3fKyXlPUJIhDVAoZNAdF7DW86zqdo1dKipRJGbdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:0f:0f:50:5c:bc:30:fb:4a:08:b3:86:15:5b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Validity
Not Before: Jul 27 04:00:18 2026 GMT
Not After : Jul 28 04:00:18 2026 GMT
Subject: CN=4cddb9186777df8deeab1e7376e2e6ef8096c470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:45:e4:e5:0c:d3:e2:1a:a6:13:5a:d9:ff:
22:1d:98:d3:80:02:35:22:2a:ce:42:10:d6:23:65:
81:8e:3d:a3:aa:67:48:d0:af:3c:2d:e6:7b:83:0c:
1f:f4:e1:a2:0d:1a:41:be:de:7c:01:33:b8:5f:de:
42:69:55:c1:1b:70:78:be:9c:41:b1:14:b5:c9:1a:
14:6c:94:1c:3d:a2:38:d7:9b:bb:79:82:4f:ff:f1:
ed:47:d3:61:af:0b:57:14:83:80:87:77:8e:38:91:
e9:37:94:bd:be:c0:1f:88:c3:a1:af:7e:fc:8b:40:
4c:17:c3:97:4b:45:c0:48:e7:f2:37:80:d2:1d:53:
55:94:04:8a:02:f3:d1:e9:ff:e2:e6:3b:74:a8:ba:
c4:a5:ca:78:6c:8f:85:24:31:0e:f7:9a:4a:c2:f6:
9f:75:23:ff:c3:20:83:94:78:8f:00:f2:47:3c:f3:
97:12:97:9d:14:d1:66:b2:ba:92:81:5c:ba:1a:47:
c5:78:70:c9:bb:8e:67:a4:2e:4d:69:28:93:14:42:
e4:8f:df:ad:6f:c4:dc:17:bf:70:09:d7:21:49:e3:
04:76:d2:00:72:1e:e5:cf:a3:4f:32:e3:87:6e:f6:
de:20:01:a6:ea:99:ac:21:19:63:81:fc:0e:1d:07:
8f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DD:B9:18:67:77:DF:8D:EE:AB:1E:73:76:E2:E6:EF:80:96:C4:70
X509v3 Authority Key Identifier:
keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:bd:c9:5d:99:95:08:c6:9b:f0:ec:2a:ef:e9:26:bc:60:39:
ac:0e:8e:6a:fb:d0:d7:55:82:c7:8a:e7:a3:53:44:b4:a2:1d:
64:7f:ed:13:27:97:44:33:fc:e5:0b:24:09:ff:ea:7f:69:a4:
5a:d6:9e:18:6c:94:c1:cf:3b:ab:0f:1e:ee:e0:4a:b4:e9:50:
bd:07:87:35:68:81:e2:07:70:6a:ac:51:2b:33:a2:7d:fb:f8:
4f:dd:88:ea:97:bf:23:2a:51:f4:54:0e:c7:00:41:fe:19:5c:
f8:f4:95:a5:42:fa:91:66:14:dc:c6:c6:82:35:88:db:26:91:
5d:77:bf:5b:cb:98:d8:56:ce:67:23:50:37:dc:87:6b:06:a9:
55:7b:d0:59:8a:6d:a6:d1:83:29:b0:90:25:23:de:10:78:ba:
61:99:5f:48:14:3b:93:00:e0:85:76:60:eb:5b:81:14:e8:29:
d4:90:f6:62:a9:85:3c:06:63:b1:03:2a:fb:c7:7c:4f:b1:45:
64:2e:5f:f1:36:6f:8d:56:ca:f0:f3:07:ba:08:79:8d:d8:c1:
b2:19:aa:3a:32:c7:27:a4:a4:3e:3d:b7:04:81:26:33:27:e4:
24:77:09:1b:63:38:03:30:15:93:65:43:c4:1a:63:a5:22:66:
98:08:fd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:05:39 2026 by rpki-client