Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
File: YblVGO1PVYKi9sEZVXQChLwIgTQ.mft (raw, json)
Hash identifier: 73hZ9qFsrajE01sCvynlAsKYam8+N+kWERmG5Owmh3M=
Subject key identifier: 17:4D:82:6B:FB:29:81:73:5C:3A:89:65:C1:05:72:62:BF:E2:26:99
Authority key identifier: 61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
Certificate issuer: /CN=61b95518ed4f5582a2f6c11955740284bc088134
Certificate serial: 019F4C8C4F578E708452114A7C87E32CE9BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
Manifest number: 0A22
Signing time: Fri 10 Jul 2026 15:01:31 +0000
Manifest this update: Fri 10 Jul 2026 15:01:31 +0000
Manifest next update: Sat 11 Jul 2026 15:01:31 +0000
Files and hashes: 1: 2RyLE_LZuHzSXkTYOvkYFBYiy4o.roa (hash: W8178gzARc8G7/wIunYzbf9dlIqJEul5+nB0lBaUQhw=)
2: 4415GxEj-TYr3AidYcdJ8bhsDy8.roa (hash: cE5GPiOmnznkFTHE5XfxrOsWeoTa87SB/CFxhnlAtck=)
3: YblVGO1PVYKi9sEZVXQChLwIgTQ.crl (hash: Psl+wOFWa7idF0Iq9YsSXo0lGfgvuF7hZH6JysT2hmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:8c:4f:57:8e:70:84:52:11:4a:7c:87:e3:2c:e9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b95518ed4f5582a2f6c11955740284bc088134
Validity
Not Before: Jul 10 15:01:31 2026 GMT
Not After : Jul 11 15:01:31 2026 GMT
Subject: CN=174d826bfb2981735c3a8965c1057262bfe22699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:05:56:45:ad:d2:b6:f9:e5:d4:7f:69:e9:00:
30:e4:29:c5:6d:29:a9:55:26:3e:1f:e5:01:d8:d2:
21:f7:4c:78:d2:26:3d:cf:14:5e:06:a3:09:6a:2e:
9f:db:f4:a4:70:50:7e:52:54:f0:93:e1:ba:a2:5e:
83:62:5c:23:96:9b:c6:95:c0:64:31:e4:5f:03:88:
4b:1d:e0:69:77:63:55:00:0a:38:f3:71:2f:a9:dd:
3a:82:75:e0:41:98:ee:dc:39:11:0b:ff:4e:74:0f:
ef:89:63:ab:5d:b7:c0:76:ea:70:d1:11:01:1a:d1:
9c:f1:af:9a:0d:47:c8:40:cf:64:41:82:69:c0:36:
f3:3c:04:92:63:a1:ba:f1:36:86:80:b8:00:26:62:
30:ed:99:d3:9d:1e:48:af:fd:bc:67:cc:d8:76:6f:
23:ec:36:c2:76:9b:92:e8:3c:97:a2:8f:56:c1:27:
5d:b4:92:f8:0a:62:a2:ed:04:d9:88:d1:8e:e4:4c:
ea:54:9c:00:85:ed:8c:81:e6:7b:b1:d7:31:d7:6c:
71:29:b9:a6:a9:84:2c:3f:ab:df:51:1e:2f:ba:04:
81:80:ce:82:7d:d9:6d:3d:dc:97:a1:f5:e3:d3:66:
73:07:e7:ad:c1:fa:92:7f:bd:95:14:5e:13:b2:02:
97:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4D:82:6B:FB:29:81:73:5C:3A:89:65:C1:05:72:62:BF:E2:26:99
X509v3 Authority Key Identifier:
keyid:61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fa:3e:56:b1:aa:53:92:63:70:5d:60:2c:31:f7:2d:ed:50:
a5:b5:36:1d:16:fa:19:09:3e:8d:cf:c8:73:74:7b:a3:64:b8:
2a:eb:b2:6b:3c:92:aa:c3:65:0f:85:91:15:2f:c8:6d:d1:e3:
9c:55:15:b7:33:b3:b6:37:5d:a5:07:c2:f4:74:95:99:e3:52:
d6:a5:1a:0e:5a:2b:b6:50:60:f4:f5:a0:0b:17:02:74:2f:6d:
91:b7:96:21:d2:3e:da:f5:bb:ad:4f:3c:50:5f:23:b8:5e:4b:
f5:01:c1:e1:7c:a6:2e:75:a2:43:1b:51:c3:02:24:47:37:b1:
64:a9:ad:46:b3:cc:0c:9f:81:1b:62:cf:15:0f:21:1d:8e:54:
15:f1:70:3a:5d:65:26:96:47:01:22:6a:4f:d7:d8:55:ff:bd:
65:b2:a1:93:9f:d4:1a:c4:14:1c:6e:f4:b5:62:f7:8f:8c:32:
34:5c:ed:60:fb:d8:ab:c7:ef:81:58:56:9d:d9:95:14:e0:12:
e0:45:a1:1c:da:28:c6:ce:77:9f:03:8d:9d:05:a5:56:6c:79:
5f:cb:b9:43:ca:3f:6b:b9:a0:b0:04:4d:04:59:8b:17:4a:ce:
fa:9e:53:05:f0:41:be:d1:b8:c9:de:34:90:a0:d1:ea:01:1d:
da:45:44:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 00:17:50 2026 by rpki-client