Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
File: YL83NiAUbm8piugtLIqDccrLexs.mft (raw, json)
Hash identifier: 8s+vCCJmGPxmHDTTD7+YPwKIuFBjxiAlNtmLe5IR5EA=
Subject key identifier: BB:7E:70:06:3B:CA:C2:55:75:CB:AF:2F:B2:2D:AC:CE:F6:61:75:53
Authority key identifier: 60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
Certificate issuer: /CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Certificate serial: 019FA1BBCFE88608D3BFB67BE6FEA6BFFC24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 04:01:07 +0000
Manifest this update: Mon 27 Jul 2026 04:01:07 +0000
Manifest next update: Tue 28 Jul 2026 04:01:07 +0000
Files and hashes: 1: X2IqazocGBh2TzPpbjgU543EV3k.roa (hash: bpCuK7CG9CoRNnFqOKdhYMABq2l/U8E9Zuo+llQrjU0=)
2: YL83NiAUbm8piugtLIqDccrLexs.crl (hash: p/9Cb26U2sCrw53QyP3SFgbFwOJiYcbTZJYtHAd2Zvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:cf:e8:86:08:d3:bf:b6:7b:e6:fe:a6:bf:fc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Validity
Not Before: Jul 27 04:01:07 2026 GMT
Not After : Jul 28 04:01:07 2026 GMT
Subject: CN=bb7e70063bcac25575cbaf2fb22daccef6617553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:53:e0:58:bd:12:f5:0f:4b:03:e2:0e:70:df:
9d:5f:31:49:3e:95:51:c9:75:35:f8:6b:22:8e:62:
79:01:24:4b:be:f1:e6:87:57:14:49:62:91:21:71:
bb:f7:24:4d:a4:bb:e9:18:46:a0:ab:a7:14:28:89:
26:4e:21:41:9f:de:b9:ca:b9:fb:42:90:38:a8:12:
74:31:b7:dd:25:a5:33:ed:3e:bf:d4:ca:aa:a6:ff:
c9:d8:29:a5:be:30:15:e4:71:6b:e1:63:68:34:a2:
98:24:36:b9:b1:ad:af:1a:9f:6e:0a:bf:39:1f:27:
55:51:72:32:a6:d4:6a:46:6d:c9:eb:01:2e:2b:77:
5f:e0:c5:a8:76:11:a9:3f:ba:ac:09:7e:be:ae:75:
70:8f:1a:e8:e8:00:da:04:ad:22:5b:af:d3:4a:bb:
8a:35:f9:05:37:09:0c:57:77:61:76:4b:25:4f:55:
be:e9:50:04:50:21:a7:16:93:80:7e:d0:71:cf:fc:
4d:da:de:44:d8:14:42:f5:c1:7d:96:2f:07:2d:98:
41:04:5b:f6:ca:8a:d6:e0:7d:d9:13:a0:8f:b7:04:
23:31:bb:b1:0a:4c:5e:19:27:c0:3d:68:b2:2d:61:
c3:ef:75:da:99:27:ff:12:6f:1e:c7:94:42:48:ee:
6e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7E:70:06:3B:CA:C2:55:75:CB:AF:2F:B2:2D:AC:CE:F6:61:75:53
X509v3 Authority Key Identifier:
keyid:60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ea:50:c4:d1:1b:3b:65:06:d0:13:ca:54:2c:01:c9:15:88:
81:8a:1a:98:07:a0:02:3c:7c:33:0b:ed:f3:e3:b6:11:4b:ad:
f8:2f:e0:72:7b:50:30:1f:7d:ed:80:86:a7:f7:bc:de:1e:e7:
19:12:4b:61:18:56:f6:ce:88:5b:e5:2f:c3:fe:9f:04:70:40:
92:69:5c:bd:30:a8:ea:1c:23:37:0d:07:34:2c:31:28:d0:b6:
c2:7a:12:a1:50:10:d1:4b:ea:e1:bd:91:76:ca:0a:f0:bf:04:
68:be:74:25:aa:bf:72:5f:dc:ee:b7:0e:be:32:a8:03:b5:77:
9c:f2:68:fe:c1:e3:4c:e7:bc:7f:50:13:d0:96:73:90:e3:b4:
36:e1:25:ad:47:48:8b:f7:41:42:cd:eb:99:0f:de:f6:b7:03:
1b:1e:ba:4b:c3:89:0d:de:da:6e:69:25:ea:c9:79:3a:c5:6c:
8f:68:ff:9a:67:f8:32:ff:33:fe:7b:f1:8e:93:8a:f8:37:db:
54:1d:db:4f:a4:b4:60:22:bc:d2:3a:fa:df:92:da:cb:61:83:
31:58:01:49:39:90:2d:b2:83:e5:0e:8d:ca:11:57:55:44:96:
7f:a9:ed:f1:91:35:0b:37:b0:78:66:3e:36:3b:24:88:bd:f4:
10:9f:97:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:15:12 2026 by rpki-client