Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: GFLC1wtyt/2BM7+opAR8/dAnPvz+kwVVuwI7ushmzIg=
Subject key identifier: 22:46:6A:4F:F1:EE:9C:59:D4:FB:24:E8:65:F2:1E:C3:84:23:54:14
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 019F93240F9B89C8C9399A9BA39D7EC0A861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 08:00:41 +0000
Manifest this update: Fri 24 Jul 2026 08:00:41 +0000
Manifest next update: Sat 25 Jul 2026 08:00:41 +0000
Files and hashes: 1: 9BzFpLnLB1lQperfgmv4qrzYH0o.roa (hash: SqfjtbEZOdrWLg54xvBk/hWboyrJmqo9/XjbAhZrvws=)
2: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: v+GGkSVN1czKnJwUvkVZ/vIHM6OTbI9NSiTiZEspJs4=)
3: yxoCaKfgeTweKDIo2zxWc2jeH10.roa (hash: iUYOXpm89oJ723QbmJPdvxscW5Vo8+6ZFKBfX+z5wi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:0f:9b:89:c8:c9:39:9a:9b:a3:9d:7e:c0:a8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: Jul 24 08:00:41 2026 GMT
Not After : Jul 25 08:00:41 2026 GMT
Subject: CN=22466a4ff1ee9c59d4fb24e865f21ec384235414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ea:18:ee:f0:6d:ba:04:ef:39:da:02:72:10:
53:aa:63:06:9a:5c:2f:10:0d:06:4d:c0:f4:43:3e:
07:dc:40:54:ce:d0:06:5b:ef:a2:ed:57:75:e2:8a:
c2:89:05:da:99:93:62:72:47:99:03:5b:7a:11:5b:
23:9c:88:37:b3:da:4f:b2:c2:71:31:29:82:d0:2b:
b8:a5:cc:91:fb:d9:cc:1e:1f:aa:89:84:d2:95:1b:
cc:65:fa:ec:03:1b:f3:11:d4:6c:2b:3e:a2:73:bc:
c1:7c:38:0d:29:06:ff:78:64:b9:bf:40:ca:64:79:
8c:d8:5f:59:5e:f2:b8:71:6f:a7:95:6f:bb:4a:41:
59:87:40:7f:ef:25:ca:c2:04:b0:b5:31:b6:4e:2e:
a5:6b:67:b5:32:62:2e:e2:30:c0:4f:8b:a5:4f:60:
ab:da:d1:5b:c9:98:0a:f0:7b:71:a0:d9:6f:8a:dd:
8e:67:5f:d0:68:0e:80:24:a5:47:c8:9b:c1:5a:1c:
6a:09:9a:18:99:69:89:eb:63:53:60:59:78:c8:d3:
0a:31:37:ce:db:d5:7b:93:b7:a6:da:71:62:e1:9a:
b8:43:fe:6b:b2:1b:ea:59:34:25:9a:13:dc:ac:d7:
50:7b:77:fa:9a:8f:8d:f0:06:3a:c6:f6:ad:fd:bc:
7e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:46:6A:4F:F1:EE:9C:59:D4:FB:24:E8:65:F2:1E:C3:84:23:54:14
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d6:de:ba:c0:02:f8:66:15:f7:e4:3a:2a:88:15:3c:b4:9f:
1c:67:f2:29:8b:06:e3:86:f6:10:9a:45:fa:af:0a:60:87:ba:
d7:b0:56:9c:53:d2:02:16:d8:d2:7d:46:74:4d:ff:29:88:7d:
45:3e:a2:8d:c8:39:74:76:f2:d0:1f:eb:84:9a:fa:3e:76:e3:
09:4a:58:32:71:00:b6:51:c5:ae:a4:a0:3b:0b:b8:c0:40:8d:
2f:40:2d:f0:75:58:b7:78:8b:a3:9a:f1:b9:7e:2a:35:8a:1e:
b4:54:95:85:35:b2:2d:4f:44:83:02:71:6a:5a:c0:78:63:33:
0a:4b:8c:99:ea:e9:f7:30:50:f4:d7:dc:5f:04:5a:c1:29:1b:
52:9d:b0:16:ea:82:4d:5a:87:fc:9c:57:99:03:f9:80:03:49:
e0:79:40:c7:44:bd:04:33:c7:7a:bd:37:5c:6c:d8:46:f8:6a:
02:55:5a:ed:8a:4c:dd:13:fc:b9:16:00:04:3f:7b:07:ff:fe:
68:2d:f3:b2:67:57:8d:32:ee:de:2f:13:e4:45:b9:f7:26:95:
09:8e:2e:f4:aa:8a:63:3e:f6:9e:2a:98:45:4b:5b:a2:60:07:
3d:ce:7b:e1:dc:cb:24:30:76:60:da:9e:5c:7e:f2:1b:72:5e:
68:16:d0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:14:56 2026 by rpki-client