Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
File: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft (raw, json)
Hash identifier: W1JXGao86t44lPllsr4HAnfpUyiRdyXvI5tXtnQotew=
Subject key identifier: 7A:66:4C:60:BD:65:3D:29:30:D9:D8:BE:DC:5C:41:3D:C5:33:EC:5B
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 01A001A5D5BD670937733B18D2529B7A1C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
Manifest number: 1A1A
Signing time: Fri 14 Aug 2026 19:00:40 +0000
Manifest this update: Fri 14 Aug 2026 19:00:40 +0000
Manifest next update: Sat 15 Aug 2026 19:00:40 +0000
Files and hashes: 1: 5o6k6rNuid97Qh-4yx5_yoP0grk.roa (hash: fdMkIWOquD1CiccVguV8cwles53g42rbkdlJp+WKaT4=)
2: QHuPVbiXdCbm0xR769k6ZQ9hOSU.roa (hash: C9+w/Q/oGRGiExzWqcNW/5IhYw9QJ3LEuqfkjZIK/no=)
3: ZTIUMpbCNPnYBD7k3nj1sQB_XOk.asa (hash: 0oocPWz99WNT9kZost7wmNAl0YljvpI9UsdUFWKlstg=)
4: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl (hash: JBbB7IqrkS5Vuz0xNC9+/SfF2IV3OzOplrQMgcrcSNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:d5:bd:67:09:37:73:3b:18:d2:52:9b:7a:1c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Aug 14 19:00:40 2026 GMT
Not After : Aug 15 19:00:40 2026 GMT
Subject: CN=7a664c60bd653d2930d9d8bedc5c413dc533ec5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7f:92:65:6f:08:9b:96:cc:88:59:4b:4b:fc:
b6:cd:04:4b:c5:91:92:78:3e:37:3a:12:f7:7a:b3:
78:09:f0:70:da:48:6a:a8:78:0a:de:e6:d0:27:1f:
28:16:df:c4:5e:f8:97:bb:4d:0d:ba:00:df:8b:2c:
4f:48:a9:ea:68:95:9c:e9:8d:66:d1:09:69:83:3a:
42:05:0a:75:2e:ac:7a:f6:84:46:53:43:14:f8:b4:
0f:1f:33:a2:06:87:c0:28:80:45:cd:fa:f9:46:42:
cd:a1:36:f8:1f:7e:30:0b:34:f9:b1:91:6b:b7:c5:
ff:7e:c7:02:1e:0a:a6:45:d7:c7:9a:d6:36:72:fe:
cb:00:ff:be:84:eb:15:57:a0:bd:67:78:f7:99:ac:
f7:d3:9f:07:6d:7a:0c:72:68:e1:69:c7:05:eb:99:
b7:07:6e:28:a4:f9:2c:d8:8e:b7:75:6e:e8:34:b0:
16:01:4d:a6:7d:03:df:f0:67:40:cb:3c:a9:89:22:
52:b8:aa:a0:e4:45:c7:69:87:58:0f:f0:5a:e9:4b:
7c:84:69:13:f2:55:5a:9e:0b:d3:9b:b6:48:69:ba:
e2:ca:a5:4a:65:45:6f:ff:ab:55:60:2e:09:7b:ce:
51:93:82:52:49:9f:7c:ac:d1:6a:a8:00:1f:7d:09:
c7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:66:4C:60:BD:65:3D:29:30:D9:D8:BE:DC:5C:41:3D:C5:33:EC:5B
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fd:c8:49:7c:5c:f5:0e:07:a0:9d:5a:96:ed:22:73:61:3d:
98:f2:a9:7c:0a:2c:43:60:a7:25:8e:9d:3f:2c:17:69:5d:5b:
6a:52:03:8b:0a:44:e4:08:5d:de:67:27:70:0c:06:28:98:e2:
a6:42:2b:00:56:25:ee:26:d9:96:14:90:f3:9d:d2:b9:14:f1:
2d:af:5f:72:da:cc:11:ba:d1:4e:b5:88:f5:e3:13:d1:2f:fe:
4f:64:47:3e:5c:c6:1b:f3:68:16:40:c0:3f:7c:a7:ad:d2:bc:
e0:bc:95:04:77:e5:f5:6a:94:9a:dc:3d:9d:47:d3:73:5a:46:
14:4f:79:12:f1:2c:34:96:d5:8c:8e:73:9c:70:04:dc:4b:30:
fe:85:fc:3b:67:14:6d:4f:f8:3f:a5:0a:76:5b:7c:ef:85:d9:
a5:9a:16:e5:97:0c:6f:7a:3f:63:5c:69:81:43:53:c7:b5:f9:
11:7f:9a:b0:e6:88:d7:a3:54:80:25:9a:7e:e2:2c:63:d5:10:
b0:54:f8:40:c7:77:54:d7:02:de:ea:c8:06:e7:6b:42:75:dd:
c2:6a:50:5a:b7:07:0e:10:18:ed:f2:be:3f:d0:c9:17:bf:0e:
4a:bc:34:65:fd:5d:be:38:6c:75:38:6f:62:ed:6c:cb:e5:13:
b8:ce:75:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:23:38 2026 by rpki-client