Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json)
Hash identifier: MQjuT/BMgr6i3uaOz/bfQoANVACklRmBe4W1fAqajgw=
Subject key identifier: C1:04:CB:20:69:11:F9:D7:0E:B1:C3:76:92:8C:A1:3D:9E:4F:2D:F8
Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Certificate serial: 019F9248FB115BAF90486147357AE3B47183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
Manifest number: 0CFC
Signing time: Fri 24 Jul 2026 04:01:24 +0000
Manifest this update: Fri 24 Jul 2026 04:01:24 +0000
Manifest next update: Sat 25 Jul 2026 04:01:24 +0000
Files and hashes: 1: ORD5CVRl8fHNkrGDCcDgKgiB4nA.roa (hash: SAvELpe3u4u8sy1W4tmIPkF/1bK/o7riGyIeb81WOH8=)
2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: 0iAqmfN3gf2sm75ZAqTCB2QBFSTMI8FFZiJMUNeG8nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:fb:11:5b:af:90:48:61:47:35:7a:e3:b4:71:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Validity
Not Before: Jul 24 04:01:24 2026 GMT
Not After : Jul 25 04:01:24 2026 GMT
Subject: CN=c104cb206911f9d70eb1c376928ca13d9e4f2df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b7:6b:57:6c:60:7c:54:ca:64:68:bc:1b:19:
d3:99:b9:09:f0:f8:bf:f7:74:ef:77:28:71:cf:c9:
0e:50:13:a6:40:b7:02:aa:86:d7:8a:1b:f2:c8:7d:
87:86:55:f8:30:50:ca:de:a9:93:a0:80:f2:b6:f4:
27:8a:b5:0f:a4:01:fb:87:2b:45:70:44:75:2e:7b:
ca:a0:ed:16:a5:44:da:ae:2d:a4:cd:44:f0:44:82:
6a:6c:07:9c:00:69:da:bf:61:44:82:c3:08:d5:43:
13:d1:90:6c:36:8f:c1:9a:ed:34:27:47:92:de:39:
de:a8:08:4f:4e:a7:e2:34:ab:29:e0:b2:43:68:a4:
01:19:3e:a9:c8:b4:db:14:0a:cf:ae:19:3f:c5:c9:
aa:cc:8c:09:f4:0a:61:69:30:c9:fd:71:64:c3:00:
92:03:43:e0:6f:13:f4:1e:fa:89:da:60:3b:23:46:
b5:38:af:f4:33:ce:aa:f1:09:74:5a:a0:da:cc:54:
81:15:df:c4:dd:d1:eb:a7:31:19:2e:59:ba:a6:ec:
23:d4:bd:2a:2a:64:48:f9:db:e7:9b:90:ae:5c:52:
e3:d4:a8:39:b4:c6:b2:81:0d:52:18:29:f4:17:50:
83:ca:db:9b:f3:d4:3d:cf:ef:76:1c:25:21:f3:2d:
ed:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:04:CB:20:69:11:F9:D7:0E:B1:C3:76:92:8C:A1:3D:9E:4F:2D:F8
X509v3 Authority Key Identifier:
keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b3:35:10:38:47:d1:a2:9b:19:a5:37:57:3b:21:c8:96:68:
97:88:ec:9b:4d:9f:11:4c:31:0e:d3:e6:fb:ad:70:96:af:dd:
0d:07:eb:37:76:ed:33:4c:e7:90:d9:da:2e:e4:c9:d6:03:bc:
39:03:6b:bf:dd:24:40:87:e3:ce:13:a0:3f:99:c4:9c:13:f6:
b8:d7:25:b3:4c:5f:ce:be:ef:53:d5:90:7a:f2:d7:f3:4d:60:
5f:88:d7:64:ba:a0:3c:df:7e:09:01:18:53:47:7b:20:16:c9:
be:60:45:86:3d:90:be:d4:19:99:ec:61:9f:96:20:7c:d8:93:
19:03:9f:f4:29:e9:33:7e:20:53:ad:b0:8c:f7:48:d6:ca:c9:
78:3c:d7:c3:4b:6b:81:5c:f1:7d:1e:af:33:6b:49:f4:e9:d3:
83:00:71:79:66:4e:be:20:c2:e5:11:ee:63:4d:e1:fd:2f:d8:
e7:1d:9b:45:19:97:f6:bc:18:5e:ad:5e:0b:cf:9d:15:68:2f:
a7:a8:c1:16:a8:09:3b:3f:8e:a3:b2:8f:9f:97:e6:17:9d:fa:
f6:f2:b6:a5:b7:38:10:6e:ff:67:c1:f4:58:e9:cb:a0:00:ee:
56:1f:91:87:d6:b5:40:6a:55:8f:19:1d:95:ad:e8:b2:96:6b:
c8:63:8d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:55:09 2026 by rpki-client