Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
File: YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft (raw, json)
Hash identifier: dGfW8nXkT058BugJ+ZQH1Jwfh3vFEHko9sBzipd6juE=
Subject key identifier: 4A:43:03:F9:35:A6:84:B2:36:23:A9:0D:13:08:08:58:E6:5A:B0:BC
Authority key identifier: 62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
Certificate issuer: /CN=62719c6d8b9950378a7489315fb078111a18ad55
Certificate serial: 019F84558830A88E5679A81E1D67C5CF17E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
Manifest number: 02DA
Signing time: Tue 21 Jul 2026 11:00:25 +0000
Manifest this update: Tue 21 Jul 2026 11:00:25 +0000
Manifest next update: Wed 22 Jul 2026 11:00:25 +0000
Files and hashes: 1: 2iC8kbXKFjWmx_dbdVyppAM0-6Y.roa (hash: tmWp7mxjB9vdgjX2gtWUKioc5qEfAmveNcok4dIUQAo=)
2: GRea9lk1vceom4TFm3UHffkyQH8.roa (hash: 7sx9fKJ6zSwa6txM9tmVfdAR/9hActQM7paLbf+Thbw=)
3: YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl (hash: uVaJ30YuPB7x/Of5vct2+TgHWWKG8Qf4RaU3vU6CPII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:55:88:30:a8:8e:56:79:a8:1e:1d:67:c5:cf:17:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62719c6d8b9950378a7489315fb078111a18ad55
Validity
Not Before: Jul 21 11:00:25 2026 GMT
Not After : Jul 22 11:00:25 2026 GMT
Subject: CN=4a4303f935a684b23623a90d13080858e65ab0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:80:ce:e4:99:68:29:3b:e1:83:5f:06:d2:2a:
36:ba:d2:6a:5f:46:3f:6d:a4:0a:a9:f8:fd:26:d4:
0a:ba:9a:ca:91:cb:68:3d:c4:2f:91:9c:06:b8:99:
f7:7f:74:1d:85:61:9a:d9:9d:e4:19:d1:d2:04:91:
06:a2:c1:7d:a0:04:f2:7e:4c:a7:cf:03:49:b0:41:
17:cf:ae:29:a3:58:d9:8a:18:15:1f:11:01:d8:ae:
d8:01:44:75:0b:96:a6:30:20:91:6c:bc:bf:f8:a1:
5a:52:9d:94:2f:cc:8c:1e:65:0a:20:a7:b1:7e:8d:
05:69:3f:b4:df:d0:f9:ee:dd:47:b9:4c:70:0e:98:
b4:e7:f5:d5:72:ae:ce:2f:2e:31:65:85:d0:dc:2a:
df:54:40:a6:f6:5f:5d:96:35:ae:6e:fd:b2:3b:de:
b3:a4:b5:97:2b:a4:fc:94:a5:9b:d6:28:a4:fe:16:
ec:bc:67:8e:c0:5c:7e:5d:36:28:e8:9a:47:be:51:
7e:36:cf:a6:2d:f5:41:93:f3:3f:8d:ac:0d:d8:b2:
a8:6b:54:26:98:c0:09:04:8b:75:eb:d9:85:54:ce:
27:4a:3a:71:e6:7c:e5:6b:5b:8b:6a:ce:82:42:4a:
b4:74:f7:26:ae:1e:f0:10:f2:cb:24:99:fa:54:5c:
59:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:43:03:F9:35:A6:84:B2:36:23:A9:0D:13:08:08:58:E6:5A:B0:BC
X509v3 Authority Key Identifier:
keyid:62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3b:ae:6d:7e:a1:2e:ae:f4:83:2a:9a:48:af:66:c9:ee:22:
ec:fc:5a:25:f9:07:f6:fe:3f:3b:2c:e2:c8:1d:20:cc:98:9d:
13:57:51:0c:85:23:7a:18:7e:cf:11:aa:82:0c:59:d0:08:59:
1c:a1:11:8b:84:ea:56:57:af:eb:fe:f1:a7:57:61:f8:51:97:
8b:4b:34:c0:db:6c:4b:39:c1:72:5f:7f:30:4f:fd:cf:c0:76:
c9:73:12:61:e1:2a:ee:54:3b:97:f2:d3:d3:c1:15:e5:cf:27:
fe:bf:02:cc:f2:4b:d0:16:22:23:2b:a4:87:3f:43:6a:4f:54:
e9:05:d5:39:e7:cf:8b:83:ff:ff:b9:0a:3b:8b:ab:b3:bf:51:
9a:55:1f:37:7d:81:2e:09:32:38:89:ec:c7:9b:86:65:22:b5:
02:6d:85:d8:13:a8:26:ac:da:75:95:1a:1a:75:55:e7:17:08:
92:76:6c:38:b9:16:ac:3c:b0:89:08:4f:28:89:4d:8e:12:f7:
0e:2a:42:5c:5b:cb:ef:a8:01:e5:9f:a0:17:a5:6b:55:5c:c3:
52:86:fd:6f:ab:eb:b5:72:26:8e:b2:b5:2d:0c:e8:68:57:39:
60:3f:1b:45:8d:a0:6f:8c:11:eb:07:04:0c:df:ac:ab:cc:fb:
cf:88:e8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:43:49 2026 by rpki-client