Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: nbi/q06Mm4ZyDdxvYuH6jzys3Siyti83amjkA+rFeAg=
Subject key identifier: A6:15:81:B3:92:0F:7B:2E:E9:78:39:81:A6:6A:43:A2:51:CA:38:30
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 019FA260E3FC2760B9FA2C9DD024DD58A8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 1417
Signing time: Mon 27 Jul 2026 07:01:26 +0000
Manifest this update: Mon 27 Jul 2026 07:01:26 +0000
Manifest next update: Tue 28 Jul 2026 07:01:26 +0000
Files and hashes: 1: 6SyYBw_h6FtZj49a8Gsl0fZClAc.roa (hash: yUA4V2vWgaIeFq+az6maBFcRTyB0lNwRfV6wBfzazGA=)
2: OQMOmyJrTs_6IRpsGLg9HTyoV7k.roa (hash: A7mJeUCg10L9AXlKSZcymy8lwjHDqKuB18cMHj/bo4g=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: +xaN9vu/911Z6CAXA9bUu8RxXFsF+iRK0ZuXcbH2G5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:e3:fc:27:60:b9:fa:2c:9d:d0:24:dd:58:a8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: Jul 27 07:01:26 2026 GMT
Not After : Jul 28 07:01:26 2026 GMT
Subject: CN=a61581b3920f7b2ee9783981a66a43a251ca3830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:cc:7e:54:67:15:75:f6:f2:4e:e4:3d:f0:
b8:01:20:03:c8:4b:e0:85:63:bf:2c:be:a3:96:d9:
d3:1c:01:d6:39:a3:f7:66:6e:ea:5b:59:6e:2f:ac:
63:98:0a:87:1b:8e:5c:54:c3:f8:cc:51:16:7c:f4:
da:12:fd:f6:cd:66:2c:84:82:7f:81:4e:90:14:71:
11:8b:a1:22:8b:78:cb:22:af:45:5d:24:cf:62:00:
79:82:cc:cf:d9:56:18:dd:6d:28:c2:f7:ee:cf:f5:
b8:35:f3:7c:f1:b4:33:18:04:a9:3d:60:78:7d:0e:
d5:da:ff:62:c5:66:cf:5f:f0:0c:07:b0:c9:70:c4:
99:cb:2c:7d:78:61:02:bd:ca:f5:40:02:c2:d9:ed:
24:63:a9:39:ed:f9:3a:a7:1a:ff:cc:a0:99:69:c2:
70:f0:4a:de:a3:c7:35:77:03:d7:92:4e:56:8d:e9:
77:78:9b:ee:1c:2d:1c:e5:36:c9:5f:58:47:5f:9c:
87:e3:20:e9:fa:43:be:ea:e3:a6:40:9d:6e:71:c2:
9a:0a:b9:24:84:25:e6:e9:a9:e1:e9:29:65:e5:fd:
3e:50:87:fd:a5:95:c5:84:39:8d:ce:5b:b1:cb:d4:
41:39:73:8c:e4:bd:07:00:4a:cc:7b:1d:74:8e:5e:
7a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:15:81:B3:92:0F:7B:2E:E9:78:39:81:A6:6A:43:A2:51:CA:38:30
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:23:28:ce:33:fa:a1:99:f0:9b:17:2f:c4:cf:ed:f1:6a:a2:
af:1f:c7:95:54:7e:cc:bb:6f:a2:fe:86:79:8d:f8:3f:2d:f7:
9e:2b:4a:74:bc:c9:6c:93:d7:66:07:80:a9:61:b2:88:ea:0a:
07:c4:66:df:90:a3:0b:5a:a8:81:60:c0:ba:b4:66:40:dd:5f:
9d:2e:63:f2:22:6b:33:5c:16:9d:c2:c0:14:f9:4c:f4:10:59:
38:01:77:59:8d:9b:55:c5:69:21:55:06:d4:2b:fa:e1:e1:40:
a5:54:da:d6:c5:01:2d:14:ba:8d:53:4f:c3:4a:66:12:7d:8c:
78:8b:32:f2:b7:49:86:d1:b7:3c:a7:b2:1c:c2:66:d8:4a:3b:
4b:5d:0f:0c:0e:03:09:a3:89:d7:b1:0f:23:d9:8a:b1:97:0f:
1f:ff:ea:40:97:5a:e5:c1:f4:04:bd:6e:4f:3b:c5:e7:70:c7:
01:f2:7a:0f:1b:4f:84:21:b1:6a:94:88:76:af:76:ea:13:93:
fe:fe:88:fc:6a:13:94:42:82:f3:30:1e:08:01:54:66:98:10:
d7:f8:a8:09:0b:be:f8:54:63:4f:25:f0:80:09:d6:fb:e2:34:
60:38:7d:b8:1e:b2:e3:23:f9:ab:a5:ec:a3:51:e1:bc:f7:fc:
5e:2c:58:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iYOP8J2C5+iyd0CTdWKjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzI5Y2VkOGVmYjQxZjNiNGEyMDc4ZDk0YmJiMGEzYWFi
NGZiMDIwHhcNMjYwNzI3MDcwMTI2WhcNMjYwNzI4MDcwMTI2WjAzMTEwLwYDVQQD
EyhhNjE1ODFiMzkyMGY3YjJlZTk3ODM5ODFhNjZhNDNhMjUxY2EzODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFjMflRnFXX28k7kPfC4ASADyEvg
hWO/LL6jltnTHAHWOaP3Zm7qW1luL6xjmAqHG45cVMP4zFEWfPTaEv32zWYshIJ/
gU6QFHERi6Eii3jLIq9FXSTPYgB5gszP2VYY3W0owvfuz/W4NfN88bQzGASpPWB4
fQ7V2v9ixWbPX/AMB7DJcMSZyyx9eGECvcr1QALC2e0kY6k57fk6pxr/zKCZacJw
8Ereo8c1dwPXkk5Wjel3eJvuHC0c5TbJX1hHX5yH4yDp+kO+6uOmQJ1uccKaCrkk
hCXm6anh6Sll5f0+UIf9pZXFhDmNzluxy9RBOXOM5L0HAErMex10jl56RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYVgbOSD3su6Xg5gaZqQ6JRyjgwMB8GA1UdIwQY
MBaAFMoynO2O+0HztKIHjZS7sKOqtPsCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpLYzdZNzdRZk8wb2dlTmxMdXdvNnEwLXdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81MGU3ODAtZWNhNy00NThlLWI2YWEt
OWRiYzM1NjcyMzI5LzEveWpLYzdZNzdRZk8wb2dlTmxMdXdvNnEwLXdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81MGU3ODAtZWNhNy00NThlLWI2YWEtOWRiYzM1NjcyMzI5
LzEveWpLYzdZNzdRZk8wb2dlTmxMdXdvNnEwLXdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCMozjP6
oZnwmxcvxM/t8Wqirx/HlVR+zLtvov6GeY34Py33nitKdLzJbJPXZgeAqWGyiOoK
B8Rm35CjC1qogWDAurRmQN1fnS5j8iJrM1wWncLAFPlM9BBZOAF3WY2bVcVpIVUG
1Cv64eFApVTa1sUBLRS6jVNPw0pmEn2MeIsy8rdJhtG3PKeyHMJm2Eo7S10PDA4D
CaOJ17EPI9mKsZcPH//qQJda5cH0BL1uTzvF53DHAfJ6DxtPhCGxapSIdq926hOT
/v6I/GoTlEKC8zAeCAFUZpgQ1/ioCQu++FRjTyXwgAnW++I0YDh9uB6y4yP5q6Xs
o1HhvPf8XixYZA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:31:53 2026 by rpki-client