Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
File: RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft (raw, json)
Hash identifier: Ofwk8DNNi8cibzmR7kdVdUsGz0Shr7BVY+H+19SKjuQ=
Subject key identifier: 7B:C1:FB:F9:88:C6:73:63:2C:B9:87:54:BA:FD:26:01:88:28:2D:37
Authority key identifier: 45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0
Certificate issuer: /CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0
Certificate serial: 019F94DC33AAC1CA0A51F729C7D423593C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
Manifest number: 10FA
Signing time: Fri 24 Jul 2026 16:01:26 +0000
Manifest this update: Fri 24 Jul 2026 16:01:26 +0000
Manifest next update: Sat 25 Jul 2026 16:01:26 +0000
Files and hashes: 1: RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl (hash: jGx7OgIRwjiADux5LIwbOzp5o1GPjSfJN3zz89nODW4=)
2: iG_jpL5evYKdvaSXMweO07u-LZE.roa (hash: bAZcm3e4oR8RQlmgma0fN3YtSn8DFyr4KMu8blXi4D0=)
3: pMLFHgvr97zNskO8YN_sDv0Y-aU.roa (hash: OO8vYGJ08onKRzkSKXfvr1cztRsM4kZCRCHxKVslWRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:33:aa:c1:ca:0a:51:f7:29:c7:d4:23:59:3c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0
Validity
Not Before: Jul 24 16:01:26 2026 GMT
Not After : Jul 25 16:01:26 2026 GMT
Subject: CN=7bc1fbf988c673632cb98754bafd260188282d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:7f:9b:e9:84:b5:98:aa:6d:20:58:9c:32:
ac:30:ea:1e:83:8d:8e:e5:fd:2d:04:dd:ae:c2:8b:
ef:34:e8:8c:f5:fd:28:ba:a8:b0:58:a7:05:6b:fc:
9a:6d:b4:40:19:de:13:89:2e:60:15:3b:7f:f6:cd:
90:14:cb:63:55:55:fd:b3:b6:a8:44:91:ea:17:d0:
1d:e5:db:85:83:34:44:50:53:1a:c1:84:63:51:7b:
1c:8f:ae:13:68:d4:d2:52:c4:e0:22:ec:72:2f:d2:
f9:94:1c:52:ae:3a:41:29:13:a1:d4:04:f6:d8:20:
15:cb:3b:57:d0:71:69:62:36:fc:2f:28:a8:b7:79:
aa:ed:4e:02:9a:ea:3a:eb:3a:cd:01:18:eb:44:46:
b3:04:90:fd:2c:7b:9a:44:fd:3f:cc:de:c9:69:dc:
bb:ee:3d:76:99:70:52:15:b3:f9:dc:2b:bb:d8:69:
e8:77:e7:e9:04:22:3b:e3:f6:64:ee:41:d8:b4:30:
21:0c:db:d6:46:b8:44:f3:e2:b1:6b:5d:e2:06:8f:
54:91:41:03:a2:31:97:b4:e2:8e:0c:62:40:9c:e7:
7f:bf:43:a8:e8:bf:33:e6:01:32:39:d1:c3:8d:57:
fc:6a:f8:bb:a0:5f:3d:7b:50:27:96:df:48:6b:d0:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C1:FB:F9:88:C6:73:63:2C:B9:87:54:BA:FD:26:01:88:28:2D:37
X509v3 Authority Key Identifier:
keyid:45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e8:24:5c:bc:e5:02:bd:78:45:2f:8a:c8:f5:cc:80:bc:fe:
f3:03:6a:d8:44:91:48:ac:88:a5:42:fe:b3:ca:28:f5:96:98:
cb:7e:cd:03:e9:f6:90:1b:1d:a2:7a:97:14:69:c3:eb:b3:2a:
4d:ea:82:0b:0d:a5:75:67:4c:16:22:7a:3a:a4:d3:3d:24:22:
7c:c8:3c:e6:24:c8:db:7b:2e:01:22:28:40:38:b2:84:68:32:
0a:a8:97:88:ba:6e:c2:c9:f2:d6:a2:27:43:b6:24:11:ee:ac:
e1:3f:e7:73:f2:c9:ff:0d:3f:53:bc:84:6c:bc:45:55:8a:96:
0d:6d:cb:c9:a1:82:ef:39:af:fe:08:e7:f1:5c:ec:b1:db:1c:
1d:4b:8c:85:ef:57:6f:49:ca:5f:e4:0d:fc:bb:1c:e3:ea:65:
ad:e7:fd:f0:8b:da:c6:5c:be:97:0d:33:10:ea:fe:86:c0:51:
72:14:f3:68:2c:24:83:de:41:65:6e:19:3b:e7:c8:14:60:07:
41:1d:31:df:99:9d:70:23:00:3d:47:9e:42:70:ad:7e:a3:4d:
e8:5e:b6:fd:73:e5:c6:10:fa:5a:c7:ea:4b:e6:28:8d:23:ae:
fd:e6:0f:ce:21:07:96:c2:1e:60:35:6e:aa:96:2f:b9:09:57:
06:2f:58:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:18:52 2026 by rpki-client