Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json)
Hash identifier: wgbacFBjz33rSAgmsVHOqjcsbrE0aBNNn1+jqL4fIaw=
Subject key identifier: B6:E1:0D:40:E3:5A:CC:88:FC:62:0A:BA:22:DB:5D:33:E3:EE:43:07
Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Certificate serial: 019F743D8B2C5941E34B0DB3A000CC0B9C52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
Manifest number: 16C3
Signing time: Sat 18 Jul 2026 08:00:18 +0000
Manifest this update: Sat 18 Jul 2026 08:00:18 +0000
Manifest next update: Sun 19 Jul 2026 08:00:18 +0000
Files and hashes: 1: dm05ruUJUy3EB3fTlfRp28bRVHs.roa (hash: HKoH3W2n4KC9D9ffQJl5txh8NMSU8l6yIctHVJM24eA=)
2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: f1sA3lLCqJU39+xNOt3TnCD7oOeE7nk+GfiasBmfTZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:3d:8b:2c:59:41:e3:4b:0d:b3:a0:00:cc:0b:9c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Validity
Not Before: Jul 18 08:00:18 2026 GMT
Not After : Jul 19 08:00:18 2026 GMT
Subject: CN=b6e10d40e35acc88fc620aba22db5d33e3ee4307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e5:5d:0f:16:5a:fd:f6:f5:3b:c3:4b:19:13:
77:6f:ba:93:16:22:6b:2d:c8:ff:3a:78:36:58:56:
aa:5b:65:d3:55:a5:f2:14:88:27:58:eb:b0:ce:3d:
08:42:36:b8:4d:ff:66:05:e8:4d:a8:9a:2e:13:00:
13:c4:cb:de:e7:9f:af:19:a2:b3:c1:a3:85:cb:7a:
e0:91:b1:47:68:31:65:14:85:63:93:f8:f1:d5:7e:
2d:da:bc:55:54:40:52:6d:7e:2e:b2:4c:71:a5:e1:
fc:f9:74:ce:e7:fc:d6:f3:5a:a2:2d:19:c0:1e:af:
02:a1:87:c0:21:e2:c8:ad:45:c6:ee:6e:ec:4e:00:
9a:3b:37:bb:35:01:e2:f5:cc:27:d0:a5:9f:9a:45:
f2:bf:5e:57:4e:03:f6:f1:07:09:a8:d8:68:46:4d:
61:96:e0:f9:5f:e8:61:f7:1c:ee:bd:f7:14:e8:18:
77:d5:83:75:d7:fc:e6:32:04:8d:d1:b1:ca:6e:8f:
02:2b:a2:10:a8:41:20:b6:a5:00:0e:b7:2f:65:16:
21:bf:66:75:c4:29:48:1c:d3:d4:f2:ba:c4:5a:1e:
9d:94:70:e5:e1:33:6c:b2:34:15:81:28:d2:69:2e:
f0:bc:5e:8b:d0:bc:c9:70:55:a2:8a:36:be:ae:ad:
75:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E1:0D:40:E3:5A:CC:88:FC:62:0A:BA:22:DB:5D:33:E3:EE:43:07
X509v3 Authority Key Identifier:
keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cc:8c:53:50:ea:49:8f:00:2d:89:e5:c1:ea:0a:64:82:0b:
ef:98:f7:ea:82:8c:57:0c:81:d4:06:b3:39:d6:fe:a4:1b:77:
46:25:7b:59:24:d2:9d:03:51:f1:c8:d8:0e:30:67:f3:bf:15:
17:83:1e:c9:f3:26:30:49:89:c9:28:04:c0:ad:85:89:d0:29:
71:9b:b1:c3:2f:6d:96:2e:4d:1a:8c:74:69:16:fd:97:43:44:
12:87:28:59:cb:bc:6c:89:b8:de:c7:4b:55:8c:c4:1d:ba:b6:
ba:41:3f:8d:ad:44:25:87:7b:7a:10:11:ae:30:3f:a0:4a:72:
ad:3e:e8:30:62:85:b3:75:e5:ac:51:d9:7a:22:82:02:51:b4:
bb:5a:d6:2c:a9:45:f0:eb:6c:f9:9e:37:a5:e2:74:06:35:e3:
ed:a1:c9:71:7e:0c:2f:a6:b3:eb:ee:3e:03:2b:48:b9:fb:98:
73:bd:98:06:4d:bf:15:84:d6:87:ce:70:3b:ed:19:69:5a:db:
97:cb:6a:8d:fa:89:a9:a0:60:51:8f:78:3a:09:98:d9:55:35:
49:42:be:7d:cc:88:e7:7c:6a:b3:75:c0:2e:13:7e:08:1f:c9:
c8:4e:f9:db:fc:1b:a7:af:eb:2d:1d:66:fc:65:eb:ad:a8:df:
f4:8c:37:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 10:26:15 2026 by rpki-client