
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
File: yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft (raw, json)
Hash identifier: oX7M/BlPzRdSfuH6zm7pciqGiK0ocYrMb2kEW7qvw4M=
Subject key identifier: F1:80:A5:A2:63:F6:24:03:63:1C:57:C7:CD:00:DD:76:4E:C7:84:FF
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 019FA33C9FB1AE4E03631781761F321AAC4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 11:01:26 +0000
Manifest this update: Mon 27 Jul 2026 11:01:26 +0000
Manifest next update: Tue 28 Jul 2026 11:01:26 +0000
Files and hashes: 1: nr0Fz2tsmF_6TIuYhy0uEGaKhm4.roa (hash: ieUkKa8iQQkbjKfwym0V+JuKCh1x6uVEc/cFA3qAmr8=)
2: oiEEnQQMJE-1CV_JXIi9XwRcaX0.roa (hash: CqmLwRU6UPnTaf7VoNKxG/ebsip0tAKsPGqLR+tu6fE=)
3: yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl (hash: oxRRsIzYBnaSn0Azh0EhgJk8VHDuMldQU5XIMsxfQk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:9f:b1:ae:4e:03:63:17:81:76:1f:32:1a:ac:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Jul 27 11:01:26 2026 GMT
Not After : Jul 28 11:01:26 2026 GMT
Subject: CN=f180a5a263f62403631c57c7cd00dd764ec784ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7e:21:b1:d2:0c:5e:4a:9d:a7:a3:36:0e:b1:
c8:42:1d:a4:0c:70:94:02:f8:e8:36:54:3d:03:0f:
44:ed:77:55:fd:0e:c7:fd:22:6a:3c:0a:ba:97:08:
8d:c5:25:a8:98:28:55:b6:59:6b:a3:4b:1a:a7:37:
78:e2:44:4c:1b:d8:e0:f0:6f:b8:3d:d8:a0:76:cb:
ee:d0:3a:f7:2b:d1:3b:2f:e9:6a:cd:99:7f:08:1a:
b0:7f:f8:ee:e1:66:35:5d:b9:a7:5b:8b:1c:16:b3:
02:98:ca:f2:ce:76:16:40:07:43:50:56:5a:2f:46:
0b:4b:d5:55:4d:47:75:4b:4d:1e:ea:5f:85:e4:b5:
5f:8f:70:5a:a0:36:19:af:b7:f4:82:b1:e5:83:d0:
94:d0:a7:5b:e1:86:8a:df:96:52:cd:5f:19:c6:b3:
eb:76:4e:f9:11:22:0e:79:b9:e1:f5:23:37:98:52:
ce:32:a0:aa:62:a5:83:ad:0e:75:b7:bc:ef:4a:1d:
eb:4a:91:73:60:09:84:a6:94:67:8c:5f:a6:08:46:
be:d3:25:da:ee:35:14:60:d5:fa:49:06:82:bc:a7:
fd:72:e6:e4:4b:c8:a3:3c:2f:2e:ba:e9:1b:84:0c:
d0:bb:8e:3a:e2:93:aa:fa:7f:f8:2e:0b:3a:10:c9:
09:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:80:A5:A2:63:F6:24:03:63:1C:57:C7:CD:00:DD:76:4E:C7:84:FF
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:94:13:d0:88:be:7b:56:0c:c4:09:9e:29:8b:bd:d5:7d:fa:
24:66:37:ac:ef:a0:d3:4b:93:39:d4:3c:42:bc:85:3d:d2:f9:
a8:47:32:94:e0:90:2d:46:6b:4f:37:96:7d:91:c9:1e:eb:83:
87:2f:96:d0:1d:ad:d5:b6:fa:d3:ab:a0:59:bd:18:2d:26:03:
35:e4:6d:01:9b:05:0e:4e:24:3b:0e:0d:58:39:8f:71:5e:25:
84:69:e4:7b:66:92:36:e2:d9:1e:ca:fe:2b:1d:db:c5:c2:81:
5d:71:51:af:8d:dd:53:15:22:97:24:42:bb:ec:1e:c8:75:5b:
0c:48:1f:01:c9:39:05:bc:21:20:77:5b:15:19:44:17:3f:3f:
56:bc:04:52:31:1b:8c:85:84:ec:ff:97:db:71:36:45:ba:63:
e2:e4:f0:c3:24:ef:50:41:ff:d4:2f:75:de:6b:6d:0f:49:a3:
05:40:5a:5b:a7:d2:e4:a2:d1:cb:7a:a7:63:0e:79:ec:e0:0c:
88:38:7c:8d:40:3a:9c:47:6b:14:4e:67:2b:a6:39:30:dc:01:
72:18:6f:e5:8a:3f:e5:7e:98:de:a5:9b:f4:ae:3d:2f:cd:82:
9c:86:e0:da:66:a2:3a:71:98:c0:76:36:0e:de:ea:89:c1:53:
a6:5f:c9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:49:42 2026 by rpki-client