Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.mft
File: Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.mft (raw, json)
Hash identifier: b/xjV3PwaMjYDIDprFA7eDeEs7pSIeI1wZljssKtlKM=
Subject key identifier: 1A:C6:3C:F7:88:95:60:DF:3D:9B:EB:09:7B:B7:7A:C5:90:B0:03:22
Authority key identifier: 63:D8:7E:BC:77:DB:75:02:43:36:FE:E9:1A:BA:63:D8:97:FC:74:52
Certificate issuer: /CN=63d87ebc77db75024336fee91aba63d897fc7452
Certificate serial: 019F916D3B2F4D52F6D440F223E181DC2073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:22 +0000
Manifest this update: Fri 24 Jul 2026 00:01:22 +0000
Manifest next update: Sat 25 Jul 2026 00:01:22 +0000
Files and hashes: 1: 2wwJSN-aUvUu9Rxb4n6669OEQt8.roa (hash: w+2Vw7XNkk5azSPXvwkjHp7ZpTzcCE9fRC6rKTH/wjI=)
2: FRFGvgi2to8bVz8gK33C7Zcp9-M.roa (hash: ayMTUA2GjSPFdKep9QPV41LfFlo7JL6V3IT7Srxtqik=)
3: Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.crl (hash: +8oRacwAV2E+3IH6mMMzbb71GMBQ9+6IBJ1rF07meOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:3b:2f:4d:52:f6:d4:40:f2:23:e1:81:dc:20:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d87ebc77db75024336fee91aba63d897fc7452
Validity
Not Before: Jul 24 00:01:22 2026 GMT
Not After : Jul 25 00:01:22 2026 GMT
Subject: CN=1ac63cf7889560df3d9beb097bb77ac590b00322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:31:1a:41:72:b9:ec:69:d3:80:32:9c:d4:
ee:2f:8a:be:af:b3:ea:9b:f3:d5:5e:0a:7e:a5:0e:
65:b5:43:f3:38:d4:63:ae:dc:78:3c:ff:e5:51:c9:
eb:7e:db:56:cb:91:70:6c:93:65:17:03:f0:f1:1e:
07:35:cc:74:d4:72:a0:60:41:4e:01:13:c5:48:67:
1c:71:a7:6c:17:dd:10:d9:7b:72:c3:7d:0c:40:59:
10:23:6e:91:9d:8f:ef:b3:38:8e:43:c5:e5:9e:c5:
40:2d:0a:9e:57:20:2f:b2:41:be:23:2f:ad:ff:cf:
bf:da:f9:32:7d:1c:7e:df:e5:58:39:d3:61:ab:46:
98:1e:86:2f:5f:3a:4f:75:ee:36:7f:f7:80:b0:14:
a3:7f:76:13:a6:ce:20:8a:b5:57:44:e4:84:18:05:
84:3d:73:77:04:0b:1b:69:23:9a:a2:0b:01:85:a8:
ce:2a:a7:5a:5e:2c:ab:54:4c:c6:79:08:79:2c:a1:
e4:dd:5a:40:c7:18:db:73:8a:18:3d:20:a5:4e:3c:
bd:9d:51:24:fe:e0:67:e7:c9:0f:f5:7c:17:78:cd:
98:5f:64:53:33:26:ef:cc:6c:02:90:b9:36:8c:e5:
25:b6:0d:ed:23:26:22:bd:7d:8a:88:12:8f:84:c7:
46:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C6:3C:F7:88:95:60:DF:3D:9B:EB:09:7B:B7:7A:C5:90:B0:03:22
X509v3 Authority Key Identifier:
keyid:63:D8:7E:BC:77:DB:75:02:43:36:FE:E9:1A:BA:63:D8:97:FC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fb:4c:fb:0c:66:03:29:55:bc:28:9e:6b:b6:63:48:ec:0c:
65:4f:32:15:fe:6b:dc:61:22:e1:fd:89:09:27:7a:e6:62:be:
07:69:c3:d8:dc:50:96:52:03:c0:36:86:2f:2f:74:f6:dd:58:
50:33:ea:4d:6c:04:0e:ea:55:bc:07:fe:76:1f:e8:62:cc:63:
de:43:83:30:2f:6a:8f:50:15:e8:58:c3:ab:c7:1c:86:4b:09:
b3:cc:cc:b7:4b:f3:65:27:88:65:56:84:5d:2f:0c:f9:bc:1a:
44:94:e4:e7:8f:3d:27:da:46:b7:1c:0d:02:4a:af:4a:b9:bd:
dd:cb:44:c3:b7:87:15:9f:ef:b7:25:a6:bd:17:30:2d:dd:80:
79:b4:42:15:4d:8c:df:e7:8a:c1:34:67:e1:0c:95:34:22:84:
89:54:37:db:a5:e2:ac:f8:79:92:3d:ac:a5:75:3e:86:38:e7:
27:8b:c1:89:9c:7e:9d:76:62:98:a2:32:35:82:bc:ad:2a:fd:
c4:85:85:1c:2f:d1:79:c3:af:2b:ab:89:e4:40:03:11:95:2a:
93:95:5d:9b:29:e1:de:28:27:d2:71:76:3b:a0:90:99:f3:ff:
b6:6c:7c:a2:70:8f:4f:47:5e:c7:79:5b:0d:c8:70:88:35:02:
90:bc:23:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:20 2026 by rpki-client