Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: GEwY13DwKTMys4hfxAEO4WWwCGaa/B6S27uPhY2WTHY=
Subject key identifier: D9:7D:E7:36:3A:2B:7D:C1:00:55:35:AE:B2:FB:5D:A9:6A:65:93:1D
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 019F927FBE13D2191BF24FA7931569F67492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 08A0
Signing time: Fri 24 Jul 2026 05:01:12 +0000
Manifest this update: Fri 24 Jul 2026 05:01:12 +0000
Manifest next update: Sat 25 Jul 2026 05:01:12 +0000
Files and hashes: 1: 6ZBPRGxMRhzUL39PVDVSduo6FUc.roa (hash: mXhPY8g7CrKLHAIlSEURMCEabcnrrTvn2LVrA4zymb8=)
2: B0WU8sYjxbF2I99DOG4CZtJFemU.roa (hash: kZf8Vi7lYB4Gl+U+zxW5wY6bn3f+hQC1mSLMVib18Xg=)
3: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: b8/LAQARQxwC7GstVvNWY1VrRjOBVevmeUIGKfk/E+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:be:13:d2:19:1b:f2:4f:a7:93:15:69:f6:74:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Jul 24 05:01:12 2026 GMT
Not After : Jul 25 05:01:12 2026 GMT
Subject: CN=d97de7363a2b7dc1005535aeb2fb5da96a65931d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:e1:cd:06:df:07:11:30:70:c8:12:71:df:
ed:c8:36:33:be:08:8c:f1:67:eb:cf:5f:76:d0:ea:
9e:57:01:7a:71:9c:be:9a:f8:83:eb:4d:cf:a7:22:
81:a3:ad:7b:e9:f0:05:07:38:76:ac:f6:ca:82:73:
b5:8c:5a:03:ec:d5:3f:55:8b:2a:2b:88:b1:17:a6:
42:b3:a5:2a:a0:74:0e:07:43:ae:8a:22:80:2e:5b:
8d:1d:ab:56:2e:15:ef:fc:8d:5d:fc:b2:ae:a7:70:
1d:85:28:b8:1e:bd:d5:cd:af:ba:6e:50:09:0a:be:
ad:8a:ac:09:ce:6c:7d:a1:14:b9:aa:f1:41:bd:a6:
e7:65:7b:c1:19:cb:a6:30:41:9d:b8:5c:9c:11:a8:
7c:9d:70:3c:ff:cd:b6:d9:44:d7:f1:e1:8f:b9:b1:
1d:65:f4:96:40:21:d5:b1:8e:e0:c4:53:03:61:4b:
c1:74:d8:3e:65:af:a7:45:57:8c:ab:ee:d2:d4:c0:
b4:1e:aa:7e:8c:2c:21:73:35:0c:ee:30:b2:55:2c:
e3:d7:63:dc:06:a1:09:31:3b:fe:ae:a8:94:b7:cc:
f0:0b:7a:75:a1:a8:f9:f5:10:21:59:bc:34:72:02:
22:d9:e9:5f:b0:49:4f:73:bb:43:ea:69:05:f5:ec:
eb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7D:E7:36:3A:2B:7D:C1:00:55:35:AE:B2:FB:5D:A9:6A:65:93:1D
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9f:b7:c1:4c:b4:c5:03:f8:5d:60:44:62:9f:23:97:c2:04:
c0:92:72:8b:8c:e0:74:70:ce:d0:6e:8b:0e:48:08:98:04:f9:
a5:19:e0:99:a6:d1:cc:28:22:eb:81:96:83:6e:a1:c7:67:c1:
f6:0b:14:17:f4:79:d7:15:c6:4b:64:5e:97:f4:1b:1b:ac:cd:
bb:db:a9:77:58:ec:14:42:0f:8b:b5:d7:bd:5b:4b:43:30:79:
6f:d7:01:a7:e0:4e:11:22:ba:31:35:b4:46:3d:00:f3:ee:15:
aa:12:99:8a:81:64:54:e2:cc:d0:e8:23:79:1c:40:3c:b1:c9:
3d:cd:86:c2:2c:34:a2:d3:a7:8d:95:d5:f2:53:b4:e0:af:b0:
29:64:38:44:9c:d2:4d:d3:6c:32:b0:31:8b:c9:28:60:13:30:
90:36:8d:3f:9c:a1:70:24:f5:6f:c5:81:e5:6b:6f:15:48:14:
76:8e:d8:8a:f6:bd:3d:64:01:86:42:ca:c5:f9:71:65:9f:71:
dc:6d:22:66:a3:23:b0:75:86:03:74:6e:22:ea:26:26:81:52:
e1:9f:6b:0e:8f:80:42:e5:2e:b3:7b:5d:1f:29:00:4e:5d:f9:
4e:56:35:69:e5:c2:4b:23:6f:eb:fb:d6:52:9b:9c:46:b4:be:
89:ae:9c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:45 2026 by rpki-client