Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
File: Ym0k1r81OWP-WvolsKWWZxUqhtA.mft (raw, json)
Hash identifier: ZTOxXi/JOQAW5wAXejuUKPlnU/JCT63SUaD7Vr8qY7s=
Subject key identifier: 0E:9F:D8:43:BA:60:1A:6C:5D:C7:00:CF:A9:7E:0E:40:D6:E8:F7:F1
Authority key identifier: 62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
Certificate issuer: /CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Certificate serial: 019F85D6BD9B07AA3C896765FF2E22FEA056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
Manifest number: 1150
Signing time: Tue 21 Jul 2026 18:01:10 +0000
Manifest this update: Tue 21 Jul 2026 18:01:10 +0000
Manifest next update: Wed 22 Jul 2026 18:01:10 +0000
Files and hashes: 1: BOEi7NrSCNnbOJagz6PacwPyCow.roa (hash: gcJkZ8tsvtRiMSl8JsUfBFpQEizMhx1qFKi60dWgXD0=)
2: Ym0k1r81OWP-WvolsKWWZxUqhtA.crl (hash: ES7snOsmrbrZvLNZB2kIJ19hRVhQy1JV76U521aYixA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:bd:9b:07:aa:3c:89:67:65:ff:2e:22:fe:a0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Validity
Not Before: Jul 21 18:01:10 2026 GMT
Not After : Jul 22 18:01:10 2026 GMT
Subject: CN=0e9fd843ba601a6c5dc700cfa97e0e40d6e8f7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:2b:3a:da:6b:1f:22:5b:0b:37:9f:d3:90:
74:f4:cd:82:31:10:26:74:f0:54:f6:eb:05:98:e9:
08:a0:9f:ae:52:77:b9:9f:61:1f:12:53:a2:62:af:
72:cc:59:2c:ad:ed:4d:f6:63:69:33:a6:08:36:e4:
72:a6:8f:88:94:20:ce:6f:e1:a4:7f:25:f8:91:57:
24:d5:18:81:7e:43:fb:b6:e1:cb:c6:30:cb:67:97:
f1:0e:d7:40:4d:fe:18:05:9b:72:7d:24:f7:20:01:
e3:47:80:d0:36:56:d7:88:97:7a:8e:0e:1d:0e:62:
21:bd:68:18:04:c5:c5:d8:e5:4f:84:14:f4:37:e7:
88:c1:37:27:ea:50:86:a6:c7:79:42:ce:c8:5b:c6:
43:31:35:95:74:88:fb:4e:cf:37:c7:a9:f6:89:8b:
7c:bf:1b:38:9c:58:fb:cf:98:ca:7a:c0:67:3d:dc:
a7:99:a2:68:6e:59:b5:d3:34:53:43:66:82:7d:bf:
90:75:bc:88:60:88:e4:70:14:b5:82:48:49:26:2d:
08:71:de:e5:33:de:09:1c:36:ab:b6:07:4f:a1:89:
90:67:f1:88:14:e3:07:88:ee:ee:d4:55:b5:84:9d:
da:f0:5a:09:47:24:76:ec:db:b9:3a:1a:a1:35:7b:
44:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9F:D8:43:BA:60:1A:6C:5D:C7:00:CF:A9:7E:0E:40:D6:E8:F7:F1
X509v3 Authority Key Identifier:
keyid:62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a9:8a:f6:de:68:73:0f:e0:9d:2f:1e:d3:8d:fd:b4:ec:f4:
55:e4:a0:0b:35:c1:79:df:03:f5:38:ac:13:3a:fe:87:57:fa:
ff:a0:3c:49:91:8d:4b:68:d7:e3:65:2e:0b:c6:ab:13:4a:1e:
38:a4:ac:1e:14:c2:a6:3e:c1:4e:71:17:59:f3:2e:2f:a0:16:
ed:6c:7a:0a:44:5f:3d:94:0c:e7:ff:39:9e:d2:9c:2f:f0:bc:
47:88:0f:3a:03:72:4a:6a:87:39:19:59:5d:c0:d2:0b:45:13:
f6:f9:35:38:5c:c2:98:b1:67:f2:32:69:ed:1a:e8:eb:67:d6:
99:27:c2:06:e0:30:d2:e8:e6:8b:c1:52:ab:94:d0:6f:13:43:
d7:fb:d6:6d:4a:c2:72:29:2e:4f:b9:3b:be:5a:76:bb:47:cd:
64:1c:47:e6:f4:5a:dd:15:d0:7c:44:f4:71:54:0d:ff:d5:d0:
6f:23:3e:2b:8f:14:00:88:8e:fb:9c:66:82:0c:ac:f5:98:e1:
f7:59:69:18:91:cb:8a:19:27:6c:c5:ec:18:bb:19:d2:7c:43:
97:e4:f5:64:cd:6b:f2:e8:94:b3:dd:fa:da:05:ef:e3:1c:fc:
fe:ea:93:cd:64:b2:13:f6:94:47:04:9e:13:90:f4:19:4d:63:
44:d8:4f:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1r2bB6o8iWdl/y4i/qBWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNmQyNGQ2YmYzNTM5NjNmZTVhZmEyNWIwYTU5NjY3MTUy
YTg2ZDAwHhcNMjYwNzIxMTgwMTEwWhcNMjYwNzIyMTgwMTEwWjAzMTEwLwYDVQQD
EygwZTlmZDg0M2JhNjAxYTZjNWRjNzAwY2ZhOTdlMGU0MGQ2ZThmN2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTErOtprHyJbCzef05B09M2CMRAm
dPBU9usFmOkIoJ+uUne5n2EfElOiYq9yzFksre1N9mNpM6YINuRypo+IlCDOb+Gk
fyX4kVck1RiBfkP7tuHLxjDLZ5fxDtdATf4YBZtyfST3IAHjR4DQNlbXiJd6jg4d
DmIhvWgYBMXF2OVPhBT0N+eIwTcn6lCGpsd5Qs7IW8ZDMTWVdIj7Ts83x6n2iYt8
vxs4nFj7z5jKesBnPdynmaJoblm10zRTQ2aCfb+QdbyIYIjkcBS1gkhJJi0Icd7l
M94JHDartgdPoYmQZ/GIFOMHiO7u1FW1hJ3a8FoJRyR27Nu5OhqhNXtERwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6f2EO6YBpsXccAz6l+DkDW6PfxMB8GA1UdIwQY
MBaAFGJtJNa/NTlj/lr6JbCllmcVKobQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW0wazFyODFPV1AtV3ZvbHNLV1daeFVxaHRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82MzQzMmEtZTVkOS00NmUyLTljMDEt
YWM4MDliYmFlNzM3LzEvWW0wazFyODFPV1AtV3ZvbHNLV1daeFVxaHRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC82MzQzMmEtZTVkOS00NmUyLTljMDEtYWM4MDliYmFlNzM3
LzEvWW0wazFyODFPV1AtV3ZvbHNLV1daeFVxaHRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6mK9t5o
cw/gnS8e0439tOz0VeSgCzXBed8D9TisEzr+h1f6/6A8SZGNS2jX42UuC8arE0oe
OKSsHhTCpj7BTnEXWfMuL6AW7Wx6CkRfPZQM5/85ntKcL/C8R4gPOgNySmqHORlZ
XcDSC0UT9vk1OFzCmLFn8jJp7Rro62fWmSfCBuAw0ujmi8FSq5TQbxND1/vWbUrC
cikuT7k7vlp2u0fNZBxH5vRa3RXQfET0cVQN/9XQbyM+K48UAIiO+5xmggys9Zjh
91lpGJHLihknbMXsGLsZ0nxDl+T1ZM1r8uiUs9362gXv4xz8/uqTzWSyE/aURwSe
E5D0GU1jRNhP2A==
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:56 2026 by rpki-client