Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
File: Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft (raw, json)
Hash identifier: FsArS5AXnQG8M9/U+6yQVKRRwatyVKR+UyHeHbAFz8Q=
Subject key identifier: 89:49:EA:A2:1F:69:8F:F5:79:7D:80:C2:83:85:B6:74:98:0B:EB:57
Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Certificate serial: 019F9436FE996F7D03952A37F250B96F77FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
Manifest number: 0FC9
Signing time: Fri 24 Jul 2026 13:00:59 +0000
Manifest this update: Fri 24 Jul 2026 13:00:59 +0000
Manifest next update: Sat 25 Jul 2026 13:00:59 +0000
Files and hashes: 1: LDt7gaxmt08mgFC-M4WkB6Rh2M4.roa (hash: GmZKtwbYE0ZQZpsBSkP4BAk8kkV/eLe4GNjMQ2lsJKY=)
2: Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl (hash: W7eLG9YGqsUnUWzlQg8jnSMBuw/KsagD9XbFimZKDPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:fe:99:6f:7d:03:95:2a:37:f2:50:b9:6f:77:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Validity
Not Before: Jul 24 13:00:59 2026 GMT
Not After : Jul 25 13:00:59 2026 GMT
Subject: CN=8949eaa21f698ff5797d80c28385b674980beb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:85:0d:a3:aa:67:f1:a2:84:ce:fd:10:63:e2:
c2:73:a2:26:9b:b7:75:80:a5:b1:6a:54:bc:d9:4e:
d8:57:f0:79:8f:1b:a4:82:6d:b8:18:a8:e8:20:84:
22:5b:6d:74:f2:04:cb:e6:f4:41:1e:42:f1:4a:2f:
9a:98:22:ea:d1:7f:29:06:8d:7a:69:6c:96:bc:7d:
20:f9:90:9f:5a:79:4e:e6:2f:dd:71:71:23:19:21:
f8:5e:9e:da:f6:90:7b:4b:56:b3:16:01:c9:f7:75:
40:08:07:c3:17:84:de:bb:6f:4b:cd:2e:71:bd:ef:
42:d1:ae:b1:c4:3d:a0:1d:dc:30:f0:b5:a9:3d:60:
f8:b2:19:1d:3e:af:fe:c9:42:b1:fc:af:f5:1a:ad:
f8:7e:da:b2:95:dc:c3:51:6d:1b:3e:a9:ec:59:b4:
54:89:7d:fd:5d:9a:d8:60:07:e8:53:81:d6:a7:f8:
59:98:87:e4:ec:aa:98:78:85:ac:3b:db:79:e0:02:
f0:ed:a2:55:e3:ba:cc:75:83:52:50:b6:b5:10:c5:
fa:4e:31:79:87:3c:c3:cd:12:35:40:82:2d:57:f7:
86:66:35:b0:f8:bf:9f:2b:f6:eb:b9:38:f4:92:67:
ec:0f:3d:bc:85:e5:c8:09:cd:39:74:12:13:ad:de:
10:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:49:EA:A2:1F:69:8F:F5:79:7D:80:C2:83:85:B6:74:98:0B:EB:57
X509v3 Authority Key Identifier:
keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:df:8f:e9:8c:d7:5e:6c:53:66:7f:be:36:1a:56:e9:88:12:
c0:5b:87:70:a0:c0:55:42:b6:7a:64:02:62:3b:b3:c2:48:e1:
e1:42:f2:9f:cc:21:d3:bc:98:a4:ab:40:6d:5f:2f:30:e4:6b:
52:51:9c:46:56:6b:12:aa:93:42:b5:67:61:ba:59:d4:8c:f6:
d2:89:ab:43:6e:78:f9:a8:38:9a:d1:0c:09:8b:29:16:1d:84:
48:66:cb:99:26:b7:8e:54:0e:ac:6a:e4:4f:ec:37:39:27:f1:
32:83:8c:a6:10:90:37:95:1c:60:d6:13:b8:a4:b5:10:75:a3:
41:c8:ad:83:ff:5c:02:64:d0:a3:f1:a6:01:a2:cc:dd:80:e1:
fd:ac:27:89:82:e4:d3:06:dd:33:49:17:59:6f:06:f0:d8:97:
07:e8:7e:dc:ab:a6:96:76:a5:c3:3a:9c:c4:1a:25:58:26:5e:
b3:78:2d:26:87:e1:3a:a6:4c:78:98:c3:83:0d:ac:e3:46:18:
19:18:cb:b3:31:2d:fd:db:9a:27:91:11:8c:8e:d4:9a:1c:83:
fe:2d:88:01:e7:69:62:d4:88:ab:ce:e7:09:7e:ff:1d:4a:ff:
b0:a6:3b:05:b1:52:57:2a:74:4f:66:e3:30:8d:27:a8:50:80:
b2:bb:50:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:53:54 2026 by rpki-client