Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
File: YWAUEB_7zmdROc1MAroAY0rYbgI.mft (raw, json)
Hash identifier: fLYKn8yt8o1Je9eaut7Y4Xit3bISzJ9tl+VBYWR/iyE=
Subject key identifier: B3:94:41:BC:AE:89:B2:76:06:15:D0:FA:DD:0E:78:3E:87:EB:C2:95
Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Certificate issuer: /CN=616014101ffbce675139cd4c02ba00634ad86e02
Certificate serial: 019F9F5F98BB3E1E07FBAE1B0AC44C18DB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
Manifest number: 1961
Signing time: Sun 26 Jul 2026 17:01:10 +0000
Manifest this update: Sun 26 Jul 2026 17:01:10 +0000
Manifest next update: Mon 27 Jul 2026 17:01:10 +0000
Files and hashes: 1: RF-tJIO2NICablpWJ0rxXstB-5E.roa (hash: B2eozTRe5cg7SctioXDuhV7y1QMBLlq9hEQ1DOOBwlc=)
2: YWAUEB_7zmdROc1MAroAY0rYbgI.crl (hash: hjS86kJ/5YN2H40l+7PghFF42exxBoQbL6dsLuPJRc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:98:bb:3e:1e:07:fb:ae:1b:0a:c4:4c:18:db:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02
Validity
Not Before: Jul 26 17:01:10 2026 GMT
Not After : Jul 27 17:01:10 2026 GMT
Subject: CN=b39441bcae89b2760615d0fadd0e783e87ebc295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:28:a9:8f:87:3c:fe:54:38:3f:c8:88:8f:9f:
c1:f3:0d:91:e9:0d:65:0c:49:a9:32:9e:22:41:a9:
e6:1a:f5:27:8a:bb:d7:e9:d3:7f:fc:09:18:30:3d:
38:17:d3:57:c8:b4:12:24:95:e6:14:d8:62:cb:c4:
d9:0d:43:f4:b6:58:17:97:8e:48:35:82:31:6c:ed:
a7:24:41:bc:8f:86:ea:51:ed:f0:9e:f7:70:71:9d:
84:33:6d:33:cb:83:cf:38:c7:61:2e:b0:1b:8b:4e:
c5:9f:cd:2e:b2:ba:e2:e1:28:89:3f:7b:ff:59:0d:
a1:6f:5d:a9:3e:38:6b:5b:d9:68:56:6b:c7:40:0b:
04:3b:81:7d:32:22:b2:a7:36:14:a2:76:b2:70:48:
70:ad:36:7b:79:e8:e1:6b:be:93:d9:d6:38:5a:5d:
31:7e:8d:99:3c:2a:9f:fe:dc:0d:07:cc:91:81:55:
d6:d9:1f:cd:84:11:99:67:09:30:cb:b7:fd:a2:d3:
cf:66:85:1f:14:15:2a:9c:7c:14:90:b8:6d:a0:b8:
ea:31:df:49:af:a9:89:ea:dc:69:5c:d8:1f:eb:41:
6b:20:38:13:60:85:f2:1b:bc:14:89:79:69:41:1c:
06:63:20:81:98:20:2c:5f:0d:e6:b2:64:1a:b9:fc:
23:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:94:41:BC:AE:89:B2:76:06:15:D0:FA:DD:0E:78:3E:87:EB:C2:95
X509v3 Authority Key Identifier:
keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:27:b6:7e:7b:78:15:7c:ef:69:59:ac:6d:ba:e4:a8:56:d2:
6f:5e:a5:76:0d:4f:8a:86:c0:8f:e5:60:28:44:52:f7:87:87:
65:f1:0f:83:52:88:4e:dc:fc:09:38:69:e5:4a:83:11:db:0d:
d2:fa:58:aa:e4:03:5c:81:a5:f5:62:de:ff:a6:14:96:0e:14:
c8:ff:67:29:73:ee:85:56:79:0f:a9:b9:47:28:07:5c:d8:3b:
a1:f9:1d:25:9c:dd:40:c9:59:29:41:2f:6f:2a:e7:a4:38:cd:
e4:72:51:18:26:79:3e:5a:d2:74:cc:45:bb:1b:33:75:66:56:
38:5e:b1:f0:32:e7:81:05:4d:cb:47:9e:4d:12:e5:96:0c:39:
d5:57:31:ae:00:8a:00:f0:14:cc:c1:ee:7b:74:76:91:75:f6:
60:ac:20:da:a3:d0:fd:ef:03:09:be:0d:fd:27:b0:62:03:12:
32:f3:85:ef:f2:10:32:69:2f:c4:d3:4f:d8:9f:2e:e4:35:47:
47:63:f6:94:e6:cf:6c:d6:5c:85:10:e3:d9:ef:21:51:43:a3:
40:45:a9:e8:3a:87:47:05:3b:cd:10:06:fe:62:bc:87:66:d9:
8d:49:8f:97:4d:eb:c3:b6:3b:ed:1f:ab:a7:da:71:88:81:6c:
f2:77:0d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:23:10 2026 by rpki-client