Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: BQhZpPHQjwOIzpxaqg9Zgzs6xzUpnzbUzgA88Fea+XU=
Subject key identifier: B9:0A:2F:2D:A8:1E:B9:35:54:8F:6D:08:E6:0B:B4:4E:17:42:42:A4
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 019F91DA30917BB416578937986FBC0F99CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 19D1
Signing time: Fri 24 Jul 2026 02:00:23 +0000
Manifest this update: Fri 24 Jul 2026 02:00:23 +0000
Manifest next update: Sat 25 Jul 2026 02:00:23 +0000
Files and hashes: 1: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: VZhTtY40efpBusL4WFWZjfu9ZeAicLYMSdXX+AW85/g=)
2: fk7mY39tErf9E91KsoOlDrOBfU8.roa (hash: lngR8tmbGC/WTujFHgPebFJew1qfiHWhUb5haVGmuH4=)
3: gK03dOMIheA0WW00ZsTlFQAdkqE.roa (hash: i+G2UvhUM8Q4L4pivFPhk7KZ2K/roiDcPV7B0z9D7E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:30:91:7b:b4:16:57:89:37:98:6f:bc:0f:99:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Jul 24 02:00:23 2026 GMT
Not After : Jul 25 02:00:23 2026 GMT
Subject: CN=b90a2f2da81eb935548f6d08e60bb44e174242a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:42:d4:62:71:85:74:72:44:d7:e1:8d:bf:
a4:91:77:44:16:8f:69:6b:a6:12:c7:f3:3b:8e:c6:
55:3c:be:0a:48:d2:d6:41:56:99:89:7c:ae:83:5e:
ab:9c:4a:bc:90:a9:ca:54:17:f0:72:4e:11:05:f1:
40:a3:1f:4e:ed:0f:ac:28:c7:ee:5a:40:87:f9:f9:
22:73:ea:ee:6b:34:a6:cf:7e:ec:b0:7b:42:70:ef:
9d:ee:96:62:25:4b:e3:a9:b5:b7:a5:44:ad:82:f4:
8d:88:42:8d:3d:9d:31:81:c2:1d:14:9b:1c:0f:ed:
3f:2d:af:5f:d6:db:8d:72:8c:e9:2e:98:db:26:4e:
33:63:d8:ee:14:40:a2:cf:c8:ca:c8:f9:19:83:26:
35:08:4a:02:52:52:44:b6:4e:7a:eb:0e:69:09:12:
08:9d:ec:af:e4:6e:80:e5:72:0e:8d:6d:f0:12:66:
90:9c:47:16:32:a3:50:f0:1b:62:d6:8b:53:93:cf:
d0:3d:09:72:52:05:63:07:3b:bc:99:5d:d7:60:88:
66:69:4e:61:19:b2:26:d8:7f:78:fb:2b:e8:b9:07:
e1:e2:03:40:4d:e9:4a:b8:78:46:d9:9b:98:60:42:
45:5e:db:ba:55:23:05:b4:2e:33:74:a3:2b:d3:80:
50:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0A:2F:2D:A8:1E:B9:35:54:8F:6D:08:E6:0B:B4:4E:17:42:42:A4
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:06:ce:82:ae:2a:69:3c:79:30:22:76:c9:10:6a:c4:7f:24:
a7:39:6a:61:81:f7:6f:ed:17:c3:77:d9:06:04:24:8a:dc:88:
a3:84:82:4f:82:f2:d9:7d:7e:a9:60:fa:5c:8e:bd:c0:16:4b:
58:c1:14:0b:54:b6:2a:95:b1:c4:85:ab:4a:0e:9b:7d:81:c2:
5a:4a:99:bb:a8:f6:ed:62:23:fe:b9:b9:b6:d8:fe:13:2e:6e:
f2:91:71:b4:0b:eb:e4:06:0e:77:18:2f:af:10:b5:a2:0d:33:
fa:b3:f5:ec:70:cb:f7:c4:fc:de:a1:dc:f0:13:f8:ee:29:76:
53:70:51:01:35:b2:a5:65:b8:d4:c0:31:7e:dc:fd:75:e4:eb:
80:55:a6:bd:9f:9c:ef:49:19:f6:9e:b6:63:9f:00:e1:07:a5:
46:c7:98:8f:67:f3:bd:81:c3:81:15:93:dd:2c:5a:a9:9b:a3:
33:32:29:34:cf:6c:79:10:98:f7:76:38:f6:1b:08:f2:d3:d6:
fd:9e:15:68:7a:95:e5:89:7f:3d:b1:86:85:f3:10:2d:ac:fd:
a0:cd:31:4a:cd:fb:17:0c:09:09:b5:00:34:b1:1a:fa:a3:37:
5c:a9:70:0b:30:a7:64:e9:89:c2:58:6a:fd:65:48:5c:4f:66:
93:63:f4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:56 2026 by rpki-client