Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File: Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier: nnYiOjPE804xuNXfZpcBPeGZ4FmGTKAR2bsxnwXLQSE=
Subject key identifier: BB:C3:18:D9:34:3F:08:46:32:18:39:AA:BA:75:1D:08:DC:F5:4D:68
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial: 019F9211AAD7E7B9CC4779F79073991763CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number: 0A9F
Signing time: Fri 24 Jul 2026 03:00:58 +0000
Manifest this update: Fri 24 Jul 2026 03:00:58 +0000
Manifest next update: Sat 25 Jul 2026 03:00:58 +0000
Files and hashes: 1: OZwTEhhz89DG-d3VUUmj7RDclB0.roa (hash: VGKfh4SeFwSQNLUtXLKPpcLTHLslj6UGjADg7S741KI=)
2: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: UnrbDxGp8h4/d83NjzijYnLIyKPxhv9MQX3Nh2Pz/pg=)
3: _cO3dPrIFou0SkBFKvSED_RiaEA.roa (hash: l5NyYi26dL87o5NLg8E85DjdFhJOd6MAl45991rZZ/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:aa:d7:e7:b9:cc:47:79:f7:90:73:99:17:63:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
Validity
Not Before: Jul 24 03:00:58 2026 GMT
Not After : Jul 25 03:00:58 2026 GMT
Subject: CN=bbc318d9343f0846321839aaba751d08dcf54d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:cd:d7:bd:06:e6:94:a6:1d:2b:d4:55:2e:
72:f9:71:5f:74:ed:0f:b9:03:a6:14:33:0d:93:a4:
b3:21:b6:88:03:6d:69:0d:d1:88:38:b7:78:b0:43:
c5:ec:76:3b:64:8d:32:6e:cd:78:9e:2e:96:31:91:
cf:55:97:32:a6:7c:d2:06:c3:46:0e:dc:41:f3:eb:
8e:e8:14:e9:16:6e:7b:6a:fc:59:8a:e6:ff:11:ff:
81:f0:8e:2f:72:95:14:b9:ef:9c:b0:ce:02:e0:6d:
f0:3f:93:ba:7f:fb:f1:c2:31:44:7b:d8:a5:f7:1b:
a1:b3:7b:37:37:32:d0:3f:5a:9e:8e:b1:c2:fb:67:
ea:45:94:c0:ef:5d:45:fb:8d:8d:d5:aa:e2:f7:6e:
ea:51:90:ff:b3:50:fa:6c:91:90:b9:88:a7:ef:78:
b9:f6:55:02:64:55:66:b5:27:67:89:a1:80:f8:37:
96:c5:d4:ab:74:60:a2:25:2b:f1:65:8c:3f:75:a1:
85:f3:a5:23:af:ef:d9:f7:aa:9d:0a:31:9c:9a:61:
22:c2:7b:7f:84:89:65:de:81:dc:b8:97:0b:92:11:
fe:fa:3d:a4:1b:89:f2:5e:b8:1a:c9:ea:ed:f7:33:
7b:5a:10:25:b3:5f:0d:72:95:e2:be:b2:0e:52:f7:
22:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C3:18:D9:34:3F:08:46:32:18:39:AA:BA:75:1D:08:DC:F5:4D:68
X509v3 Authority Key Identifier:
keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d3:67:7e:9d:cd:2b:eb:3c:2a:a8:9c:99:2e:d8:80:d2:81:
d7:f7:e6:1b:7b:43:9d:02:2b:3c:c4:8f:0f:ed:53:3d:63:de:
42:48:fb:52:dc:51:ca:74:09:97:5c:8a:17:4c:56:33:05:31:
44:c7:4f:cb:64:f8:c4:5a:99:c6:ee:77:a8:87:3f:e3:95:91:
c1:30:9d:c2:1c:cf:7a:15:eb:22:88:e9:2e:ae:b9:ec:eb:74:
ca:81:eb:81:44:00:d4:f8:16:aa:fd:78:83:ad:8c:a7:ce:f9:
9e:af:3a:c0:72:7c:dd:fd:0e:b3:8b:39:2c:60:cb:24:98:dc:
24:2b:09:89:ea:b0:29:85:01:46:51:ce:9d:ad:4b:d6:63:b6:
50:42:91:09:e5:42:58:0c:4e:e0:ec:92:8b:67:2c:6c:9e:5d:
63:80:67:e8:00:4e:ed:16:91:23:49:a0:1b:0c:d4:02:53:fe:
67:d6:cd:d9:d6:6e:cf:9c:49:65:c4:49:72:85:5a:75:3f:91:
12:e5:b6:27:0d:26:12:56:48:c8:ac:07:6c:db:a5:6b:39:fd:
bd:89:05:75:af:f5:8d:12:50:13:13:bc:6e:9f:b8:7f:b0:61:
dc:e7:63:b0:06:d2:e3:86:21:1b:bb:4c:9c:d0:a9:7c:64:1e:
35:c9:1e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:58:37 2026 by rpki-client