Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
File: YO9KF7jv9Fugs51HSWVX44j__lI.mft (raw, json)
Hash identifier: Sq/vuBTy8D9UjkUM45dTTzU2jtU9Pa232Fk923uuJT4=
Subject key identifier: 84:16:8A:47:5D:F0:93:B7:3D:4C:21:FB:DA:9E:3D:B4:8D:49:80:D3
Authority key identifier: 60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52
Certificate issuer: /CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
Certificate serial: 019FA1BB384CFBFC8D938126D4203905C9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
Manifest number: 04B4
Signing time: Mon 27 Jul 2026 04:00:29 +0000
Manifest this update: Mon 27 Jul 2026 04:00:29 +0000
Manifest next update: Tue 28 Jul 2026 04:00:29 +0000
Files and hashes: 1: YO9KF7jv9Fugs51HSWVX44j__lI.crl (hash: IQ5jrF+8jil3hKmEALqV9YVnUUhlgPtgDD7m5xkfBnw=)
2: bqQFNJsrG869RK3Nfbwr65mLsd0.roa (hash: lGIgTiJR2g5VC3z+XfnzZ2hEM7gGKI2STx8vdvlyfrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:38:4c:fb:fc:8d:93:81:26:d4:20:39:05:c9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
Validity
Not Before: Jul 27 04:00:29 2026 GMT
Not After : Jul 28 04:00:29 2026 GMT
Subject: CN=84168a475df093b73d4c21fbda9e3db48d4980d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:8f:6e:9f:0c:88:33:0a:d5:bc:72:15:74:
ed:89:b1:2b:f6:7e:51:ae:7f:31:9c:19:f6:84:5a:
ad:85:60:2b:86:ce:f1:a9:9a:d4:fe:b8:45:4a:9f:
e3:49:af:de:45:0b:37:f6:15:39:a4:8b:99:22:07:
df:fb:f5:3c:31:d0:a7:4c:b4:c9:18:53:c9:54:4d:
0d:f6:ad:df:f8:4b:03:93:6b:ee:31:76:96:ee:c9:
83:94:58:a0:f8:17:00:7b:79:20:cf:c1:0c:c5:19:
3a:9a:92:b1:14:46:7e:c1:d5:57:26:4f:a9:63:85:
da:b9:94:1f:14:53:c9:6e:87:f3:2c:7c:e8:a4:3e:
f1:dc:63:37:39:36:83:28:e6:6f:06:66:56:17:19:
b2:4e:f4:40:f0:51:70:cd:a7:2a:45:fd:1e:cc:da:
ef:fb:ed:e1:22:06:c2:57:6b:ac:3e:76:44:5f:69:
93:a7:e0:3d:1b:7b:23:f2:2f:88:25:d8:3c:2b:9b:
db:ca:c9:5d:26:8d:56:5c:01:98:a0:cc:b4:10:d0:
8f:34:62:e3:5f:ee:27:0b:cf:39:53:36:62:72:5f:
cb:ea:40:10:53:49:8f:42:19:d9:0e:e3:95:b5:5c:
41:92:2b:4f:21:4f:8e:39:18:0b:b6:a5:fa:d5:23:
35:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:16:8A:47:5D:F0:93:B7:3D:4C:21:FB:DA:9E:3D:B4:8D:49:80:D3
X509v3 Authority Key Identifier:
keyid:60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9a:6e:8d:fd:2c:d3:1a:c6:6c:09:08:0f:4a:69:b6:84:4d:
7c:a6:70:a0:f9:8f:32:3b:ed:29:25:ef:1c:79:57:06:ae:2e:
44:32:91:8b:b4:53:f6:57:34:1a:d3:b2:89:e0:e2:3a:8c:38:
4a:bd:48:22:b8:28:9c:a5:2a:1b:4a:44:aa:0e:4a:7c:77:8a:
a4:54:dd:eb:c7:5e:ed:28:29:f5:2b:bb:b5:45:0a:a9:e2:72:
bd:8b:2d:e6:32:19:56:12:31:58:92:aa:8d:20:41:69:11:f3:
9e:c4:23:ed:1b:f1:07:8d:d4:03:53:11:a8:c6:bb:e9:ea:c4:
23:b2:30:8c:ee:d3:6a:f6:9c:9f:9c:5c:91:84:a4:90:2d:23:
f1:88:02:05:63:be:ba:2b:50:25:b6:b4:59:b8:fe:80:7b:22:
f1:76:5a:f2:c2:f6:cc:45:9e:f8:b4:e4:76:cd:58:30:61:69:
7f:7c:99:0d:3c:47:8a:32:7a:b8:20:2f:cb:5f:61:f2:34:67:
6b:b4:eb:a0:2d:b1:ff:39:e2:af:03:58:5c:22:d1:e8:f0:da:
ff:62:a3:04:ad:89:18:3e:5e:95:ed:25:18:ff:89:9f:0d:51:
3e:a8:27:16:c2:8e:76:b7:e8:ff:40:35:0c:a8:05:9f:38:ea:
ef:ab:5c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:37:21 2026 by rpki-client