Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
File: y2bnZjRVc9cVnWeU7a7bc5okH48.mft (raw, json)
Hash identifier: ZkpUSAn3BZAUMv9LFfeE3BEmGGlbkd/ePLRoLowaeS0=
Subject key identifier: 2D:A1:51:56:72:7B:34:B3:3C:B8:0C:02:5E:20:D0:7C:08:97:1D:D9
Authority key identifier: CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
Certificate issuer: /CN=cb66e766345573d7159d6794edaedb739a241f8f
Certificate serial: 019F95126DEAFDD0A93ABE3EBED1FD0E244E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
Manifest number: 0A17
Signing time: Fri 24 Jul 2026 17:00:40 +0000
Manifest this update: Fri 24 Jul 2026 17:00:40 +0000
Manifest next update: Sat 25 Jul 2026 17:00:40 +0000
Files and hashes: 1: y2bnZjRVc9cVnWeU7a7bc5okH48.crl (hash: mcN817EveCB7bs8EYXnLesYwlkrtbvlu6MuGkTiw/Yw=)
2: zyxH_ZayU87vTJX81fgX-DVJmTk.roa (hash: v7IX/ua2uQXhjGalwVPCerFWeIG3hQEbj9ssotgdfjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:6d:ea:fd:d0:a9:3a:be:3e:be:d1:fd:0e:24:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb66e766345573d7159d6794edaedb739a241f8f
Validity
Not Before: Jul 24 17:00:40 2026 GMT
Not After : Jul 25 17:00:40 2026 GMT
Subject: CN=2da15156727b34b33cb80c025e20d07c08971dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7c:64:1e:85:de:b4:aa:77:29:cb:cc:46:b7:
ca:44:2c:ee:e2:2d:4e:e5:a9:c9:9a:dd:17:cd:9c:
68:2a:cb:40:b2:3f:3c:04:aa:ad:13:30:0d:ce:2a:
29:5a:4d:ef:15:8b:c9:7a:86:01:2f:0f:7f:e6:f3:
88:c6:cc:c2:f1:42:ad:9b:6b:f0:aa:39:47:47:0e:
77:04:5d:78:a1:60:b2:50:d2:d3:a3:f7:04:15:67:
78:dd:68:02:10:6a:2b:d9:f3:61:10:ef:73:01:6a:
1d:5f:47:10:37:79:18:1e:c1:dc:1b:9f:95:3e:f7:
e7:c7:e9:15:00:71:62:f5:3a:47:60:8e:31:57:15:
53:16:0c:04:22:fb:81:fb:82:0b:34:30:dd:1e:2d:
67:c2:02:f3:b5:82:39:1f:7d:cb:c1:e0:f6:f3:6e:
96:53:03:b0:eb:81:50:a1:20:0b:a2:f2:af:ba:88:
e0:68:de:6c:ed:8e:cc:34:0f:0e:08:5c:57:01:26:
3a:53:d5:01:99:e3:e0:c9:ca:77:89:b5:7a:b6:2c:
30:b6:25:33:c9:19:49:92:58:75:10:d7:15:af:4c:
15:06:fc:10:21:75:05:be:94:26:7b:b8:35:e6:bf:
1d:b6:bf:a0:9f:45:27:e8:cb:c0:09:e2:f2:46:da:
c3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A1:51:56:72:7B:34:B3:3C:B8:0C:02:5E:20:D0:7C:08:97:1D:D9
X509v3 Authority Key Identifier:
keyid:CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:44:46:a1:6c:38:4f:e7:97:41:1d:83:2f:bb:3b:c6:d4:31:
05:99:46:be:af:2b:9d:6a:e5:84:72:0c:79:22:af:bf:c3:4e:
e1:9e:eb:0a:04:85:04:b7:15:2d:35:85:03:10:49:36:d7:5c:
82:c4:d3:9d:a4:cd:55:1f:a7:c5:76:dc:b7:12:fb:25:a5:b7:
c8:c4:d4:ab:41:55:74:a0:f7:75:ae:49:ff:53:9c:43:8a:f1:
37:69:b9:00:b9:f1:d6:91:4b:ef:47:5b:64:c9:10:72:fc:6d:
00:b4:cb:8b:a3:30:56:03:2f:13:cd:9c:f6:ac:f3:20:f1:5f:
d9:5d:77:dd:bf:fb:58:39:f1:1f:e4:71:5e:91:ea:a7:26:a1:
e4:de:15:3c:60:c9:57:ef:ac:1a:dd:56:74:a1:1b:00:05:30:
51:6d:60:c9:51:bf:9b:20:8a:b9:f9:c1:31:d5:6f:77:39:82:
f3:b2:5f:ce:a1:14:f6:ef:b0:58:18:dd:07:f7:e3:a4:26:36:
53:6a:3b:9e:8c:08:1f:14:89:5a:ba:0b:ac:64:54:d3:b7:5e:
ad:49:a4:48:fc:43:76:08:ef:f0:27:91:f2:ff:e5:27:58:4d:
b5:1e:56:f0:2b:47:7d:51:b9:7a:78:d5:c1:ca:3c:3b:ff:09:
79:54:e1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:25:14 2026 by rpki-client