Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
File: ylmb3Bz8eujML7oV_NgMoRc3hGc.mft (raw, json)
Hash identifier: pfw8N0HGhqIuVzyp9zMUemeG+mmrWN/abIOCP6hTnhE=
Subject key identifier: A8:7C:03:CC:76:66:6F:03:34:9B:08:3E:C0:73:61:BE:14:7E:D7:8D
Authority key identifier: CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
Certificate issuer: /CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Certificate serial: 01A00281E24A714046449D84CD834CE9CA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
Manifest number: 0619
Signing time: Fri 14 Aug 2026 23:01:01 +0000
Manifest this update: Fri 14 Aug 2026 23:01:01 +0000
Manifest next update: Sat 15 Aug 2026 23:01:01 +0000
Files and hashes: 1: hLDJZ-V17lQ1uYy4Yb_7EyNt5EY.roa (hash: 0stvy4uT+ZzDa9Ceq2lwui9WwwpxCgyyC5wsX5cUjjE=)
2: ylmb3Bz8eujML7oV_NgMoRc3hGc.crl (hash: MTg5qj+tOH9Xf6tqkRUho2X36aSeFHLHWWqhtVRIaDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:e2:4a:71:40:46:44:9d:84:cd:83:4c:e9:ca:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Validity
Not Before: Aug 14 23:01:01 2026 GMT
Not After : Aug 15 23:01:01 2026 GMT
Subject: CN=a87c03cc76666f03349b083ec07361be147ed78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:62:0d:d0:8f:9c:3d:0b:84:49:be:d3:b5:75:
9c:78:95:bb:49:6f:ea:9e:b1:a8:18:e3:5c:f3:9c:
3a:07:bb:05:64:71:bc:e3:48:1b:a7:26:d3:c7:2e:
52:14:14:64:d9:13:92:10:e7:cd:b5:66:74:d3:ad:
93:5e:55:4f:7a:8c:04:75:b5:23:a1:d0:54:ca:fe:
46:72:e5:7f:b4:de:9c:53:df:e3:cb:34:8c:e9:1e:
4e:78:de:79:34:a2:d3:85:63:61:32:de:2d:dc:c8:
26:ed:1e:c3:91:2c:4b:99:7f:73:0c:38:79:61:ff:
b9:f0:77:11:af:e2:9a:45:59:44:ce:12:99:95:51:
b3:e0:74:7c:7f:9a:36:f0:7c:64:81:e9:3b:1b:1b:
d7:71:93:17:11:0f:2e:cf:b6:22:7f:0e:ed:2c:00:
bb:03:b9:c5:62:0c:be:aa:a5:ad:92:1a:91:36:2c:
cb:a6:6c:4f:10:81:d7:83:8a:d3:52:25:51:47:d7:
52:5f:11:69:ce:25:b8:40:ee:12:ec:0e:ec:18:0f:
49:ae:75:e3:52:c6:d8:0f:4e:ae:20:8c:58:15:05:
5a:b5:f6:80:ca:05:e0:7e:a6:f1:cf:3f:09:32:2d:
3b:a2:46:ac:4e:50:89:5c:05:07:62:7c:9b:33:c3:
bd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7C:03:CC:76:66:6F:03:34:9B:08:3E:C0:73:61:BE:14:7E:D7:8D
X509v3 Authority Key Identifier:
keyid:CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:de:fa:75:c9:7d:b8:05:f7:d8:9c:be:b4:1b:5f:ba:04:12:
02:0a:6b:93:56:42:60:04:d3:24:d2:cf:e4:1c:65:00:de:79:
b6:4b:7a:97:ae:fc:ca:56:bf:5f:a7:f8:93:8f:91:14:97:29:
0e:4e:28:72:5b:7a:b5:6c:51:2e:63:44:e5:51:60:bb:4e:65:
02:cf:22:b7:a4:d8:72:71:64:13:db:f5:6b:11:a7:a9:b0:55:
0e:55:17:2f:71:65:c2:c5:e7:ed:ec:3e:d9:57:01:e1:96:87:
ba:17:32:cb:9e:71:57:b8:34:89:b1:9d:9c:3d:25:8e:de:65:
86:ca:65:28:65:d1:a2:1c:aa:0b:cb:7b:c0:88:be:1c:fc:61:
b7:f1:62:e9:11:26:c2:ef:a8:1a:eb:e9:e2:c8:85:82:7a:ea:
c6:75:dd:07:d9:28:c0:4a:c3:6e:9d:79:3f:5a:e3:ec:a6:91:
22:4d:92:71:4e:7b:1f:51:74:50:4b:0e:8d:44:e6:c2:24:58:
a3:ea:95:7e:55:00:90:05:34:3d:b2:2d:05:bf:71:b3:75:6e:
ff:d8:1a:39:41:37:6a:98:df:d3:fe:c6:fe:f4:cb:40:40:53:
e9:20:25:39:1e:78:bc:b2:4e:0b:bc:44:e5:5c:58:91:a1:0b:
7c:da:5e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:57 2026 by rpki-client