
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
File: Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft (raw, json)
Hash identifier: Dda+agul5pAJrmyZiGfoL51Wdec50GgEPDhoKooFp3I=
Subject key identifier: DC:E8:6D:D5:14:94:C4:81:6B:FF:4C:6D:67:EB:C7:C1:C8:71:69:9F
Authority key identifier: 63:CB:81:A7:AF:13:6D:96:F0:C7:60:51:DA:6E:4D:05:D1:FF:63:3D
Certificate issuer: /CN=63cb81a7af136d96f0c76051da6e4d05d1ff633d
Certificate serial: 019F935B4F19C434F59FAD29C6464E593E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:02 +0000
Manifest this update: Fri 24 Jul 2026 09:01:02 +0000
Manifest next update: Sat 25 Jul 2026 09:01:02 +0000
Files and hashes: 1: 7cTjsLRiYYSxjEiyyxvrM7VcUoM.roa (hash: 9oRDcj/n0yIWrTx9daAB6UyBKfL+1eMjORwY8HvJ18Y=)
2: Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl (hash: ZRpRVUAV+HH3wW7hJ6RGkj4HXGKavPP40fnQcb3UhcY=)
3: p0eoEVp2ZRfAFQIEeNZFFp6BKKo.roa (hash: 7ygvBpXf/4xZkV++cCRPOzyCKN66G0s7NhzA+lJoryE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:4f:19:c4:34:f5:9f:ad:29:c6:46:4e:59:3e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63cb81a7af136d96f0c76051da6e4d05d1ff633d
Validity
Not Before: Jul 24 09:01:02 2026 GMT
Not After : Jul 25 09:01:02 2026 GMT
Subject: CN=dce86dd51494c4816bff4c6d67ebc7c1c871699f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:13:b1:54:88:3e:91:0d:a9:a0:c2:00:b0:09:
4b:ee:c9:d8:d4:02:85:94:0e:06:8d:a3:6b:23:b7:
28:d9:af:c8:33:6c:31:4f:4f:02:50:9d:42:53:11:
5a:48:ac:d2:33:3f:f0:3c:ff:ac:7f:87:ba:3f:98:
17:50:7a:42:79:bf:5a:00:20:15:6e:44:12:98:bc:
53:07:b3:40:6f:69:be:95:75:84:09:67:9e:3b:d0:
55:ce:59:6d:91:d8:4d:bb:15:44:7b:46:23:6d:53:
93:72:40:88:c9:e4:cb:49:68:dc:9d:03:74:c1:a3:
0e:fd:a5:c6:8a:51:4f:51:25:03:8c:2e:0f:5c:10:
53:a3:18:cc:05:ad:a6:15:85:ac:1d:d0:52:28:74:
c9:16:9a:a3:19:8c:35:d0:5e:49:31:36:6f:3b:ec:
b1:00:43:34:7d:df:fd:29:6b:9a:bd:87:79:ef:f1:
6f:ce:8d:f1:ac:e2:e3:db:ff:7f:6d:1e:e9:66:87:
40:6c:66:a4:2d:12:a2:45:3a:7c:e6:f9:3a:c3:70:
60:8c:70:32:f9:6a:46:b6:26:95:55:7f:65:e8:72:
49:47:e6:c2:6a:cc:5b:f8:b0:45:b0:cc:1b:81:6e:
bd:21:92:4c:d6:af:75:72:81:c7:0d:51:ef:de:43:
9d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E8:6D:D5:14:94:C4:81:6B:FF:4C:6D:67:EB:C7:C1:C8:71:69:9F
X509v3 Authority Key Identifier:
keyid:63:CB:81:A7:AF:13:6D:96:F0:C7:60:51:DA:6E:4D:05:D1:FF:63:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f4:9d:1c:a1:9b:f2:ea:1f:74:bd:2a:b6:c5:53:0a:94:03:
f3:1e:9e:3e:69:23:9a:b8:e5:ab:b9:f3:ee:7c:11:a5:77:67:
1b:2d:3f:ec:0e:b5:4a:31:64:aa:08:8f:cd:84:7c:58:8c:15:
38:e3:e1:27:3e:de:0a:c1:48:12:2f:0b:95:18:06:db:f6:61:
ab:4d:b4:18:23:32:bf:80:bd:4c:41:d1:c9:f5:6b:87:72:96:
fd:cb:fd:63:5e:eb:cf:cb:52:f4:da:07:72:12:07:44:99:8b:
9f:fc:ec:f1:94:ed:23:0d:09:32:6b:46:42:03:24:c2:1e:52:
26:71:f7:95:9d:09:d7:04:34:ce:b4:e5:a3:87:d0:f4:3e:14:
24:26:ee:a3:a5:7f:e5:f9:84:6e:a1:85:1f:df:26:01:aa:c3:
30:2a:50:fb:f9:84:d7:c7:0e:42:d7:1b:b5:11:9c:40:32:4c:
2f:12:d8:d8:33:d1:57:95:e1:50:af:b6:d3:08:74:49:21:3a:
92:18:b0:a8:6a:eb:27:1c:93:11:30:04:d1:32:fb:16:83:86:
78:23:08:c8:5c:5a:2d:59:fd:02:43:63:4f:88:aa:1f:7c:6f:
09:44:2a:ee:b8:54:bc:45:d0:38:e0:cb:f1:f1:e8:65:e8:fb:
00:1e:6e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:50 2026 by rpki-client