Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
File: YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft (raw, json)
Hash identifier: 3BWzf2+xxPlYtsdUigbv4csSAlOwrI/HDf9z8mTOpqw=
Subject key identifier: D8:32:4D:82:FE:F4:03:C6:29:5A:9B:09:A8:5B:48:3E:2D:4C:44:08
Authority key identifier: 60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
Certificate issuer: /CN=602d570b542e7302885d367418df802f99494f26
Certificate serial: 019FA14E39B0B1F7ADD90AAAA1F3049C718C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
Manifest number: 0A2B
Signing time: Mon 27 Jul 2026 02:01:25 +0000
Manifest this update: Mon 27 Jul 2026 02:01:25 +0000
Manifest next update: Tue 28 Jul 2026 02:01:25 +0000
Files and hashes: 1: YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl (hash: 8/pjBsZxGIvFRLCnCrA+9HwQTDTxGyo0Cax4K5mB8+Q=)
2: swT65AQfg5j1CjF54uaPL0J1BFQ.roa (hash: Qq1a2xtb59pWBz8BgcZHcgh++l5kZtY7auRzUv1jzUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4e:39:b0:b1:f7:ad:d9:0a:aa:a1:f3:04:9c:71:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602d570b542e7302885d367418df802f99494f26
Validity
Not Before: Jul 27 02:01:25 2026 GMT
Not After : Jul 28 02:01:25 2026 GMT
Subject: CN=d8324d82fef403c6295a9b09a85b483e2d4c4408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:a8:2e:34:60:60:0b:90:bd:6f:56:0d:b1:
4f:84:2c:04:16:a9:cd:71:cb:c6:0b:62:a0:95:5f:
a1:a2:bc:9d:c2:cb:b0:07:ad:f9:75:8f:76:1b:b4:
4c:fd:f3:26:f0:e3:73:1c:06:c6:49:fc:a1:12:98:
5c:18:d6:d0:63:8b:7a:b1:93:d8:bd:6f:d7:b8:d8:
1e:ed:7e:d7:b7:c7:43:1f:82:30:6a:c4:a3:4c:30:
4b:7c:39:37:b3:81:c7:dc:52:44:be:2d:af:47:c9:
cc:ef:4c:4b:88:64:39:66:19:f7:ea:f3:17:6b:0f:
fc:12:80:b1:5f:b8:db:6f:b3:c0:dc:27:57:59:7f:
2c:6f:f9:99:76:8d:db:26:a2:81:b1:f2:33:81:dd:
ad:17:7e:54:86:cb:4c:ed:6f:ef:a3:cc:a7:f4:f5:
f9:f8:b7:02:a0:b7:fd:74:1f:91:a1:f9:e3:a8:4c:
ef:d5:4d:93:dd:03:08:cf:61:41:a9:34:f7:37:39:
8b:3d:e6:37:81:2d:97:1d:ba:5d:ab:18:2c:bb:b1:
6e:ba:dc:00:59:2f:00:26:f4:0f:bb:5d:9f:74:3d:
be:92:71:8a:21:ad:e2:56:d8:e9:77:00:bd:1e:4f:
c0:15:20:33:04:8e:1b:b4:83:31:c6:01:e7:be:41:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:32:4D:82:FE:F4:03:C6:29:5A:9B:09:A8:5B:48:3E:2D:4C:44:08
X509v3 Authority Key Identifier:
keyid:60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:41:af:69:c2:ec:13:6f:20:72:36:93:73:c4:41:89:bf:c3:
97:7b:09:32:2e:17:2e:04:40:01:5d:b5:56:ca:dc:13:9f:6f:
41:11:4b:a1:65:08:6f:4b:8e:19:c8:af:de:b2:7e:4d:82:cb:
47:2e:d7:e1:bc:c7:40:b9:f7:6f:ad:96:b3:91:14:ff:9b:dc:
ef:09:96:ea:e6:2c:5c:93:ea:d3:bd:0e:02:38:10:9f:49:f7:
91:05:4a:76:ed:f9:49:50:2d:8e:91:c5:7c:f9:16:e0:23:fc:
50:d3:55:df:d9:28:8d:91:31:0b:44:98:e8:3f:90:f7:8d:1f:
aa:2d:dc:c4:c7:e6:d2:ee:19:9e:06:f1:49:b5:e5:e1:db:0f:
a4:36:44:39:0c:5e:59:44:e7:e1:53:8d:01:f3:ae:3b:91:fc:
95:72:b7:2c:e6:3c:da:15:0a:46:ce:b6:6a:28:86:40:af:53:
0b:8c:4a:e1:85:f7:14:81:7e:79:98:ff:e3:52:2f:fc:06:62:
ee:69:af:56:75:07:5b:28:c3:37:c4:a4:d3:3a:e9:6f:47:2a:
67:5e:0b:61:cf:46:f0:5c:0c:4a:c1:65:42:46:2c:4f:68:d4:
5e:e0:53:a8:bd:9a:4b:ee:6a:c4:74:46:22:4d:2d:00:5d:29:
65:fa:66:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:04 2026 by rpki-client