Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File: y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier: bCkAAaX/ysHK/hkF/Fu7KaR5l3yeEgnqi+Thkht2+5k=
Subject key identifier: 02:42:5F:B5:CF:49:68:D1:DC:C4:4D:70:B9:A5:3F:E5:40:1E:F9:DB
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer: /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial: 019F94A48B46A58BA9ABDFC64B58604ED529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number: 0D38
Signing time: Fri 24 Jul 2026 15:00:39 +0000
Manifest this update: Fri 24 Jul 2026 15:00:39 +0000
Manifest next update: Sat 25 Jul 2026 15:00:39 +0000
Files and hashes: 1: im_vhLMibVudnZg4kJ52SUS3c-w.roa (hash: jWyQDspkXiHiDQkhSK+ARTtEFmL2PYL0z1g2F7GJj5E=)
2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: eyWNg9FZ2iBzIDaUEmOcNaOkc81yjmLaezNDIWKpZiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:8b:46:a5:8b:a9:ab:df:c6:4b:58:60:4e:d5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Validity
Not Before: Jul 24 15:00:39 2026 GMT
Not After : Jul 25 15:00:39 2026 GMT
Subject: CN=02425fb5cf4968d1dcc44d70b9a53fe5401ef9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3b:b2:7a:d8:ab:28:2f:f5:f9:c6:87:4c:54:
ca:7d:56:dc:12:21:61:af:31:07:ce:2b:d9:b5:3b:
18:22:5b:f0:36:cb:80:46:83:fa:54:6c:1b:e6:13:
ce:9f:13:59:4d:79:f9:e9:97:fc:ea:ed:0e:8c:c6:
8c:57:e4:1f:f8:f4:a9:3d:9e:24:55:b6:db:63:30:
55:0d:89:05:fd:d5:e9:71:db:fb:06:86:86:70:32:
31:ea:53:52:35:e3:4d:7b:98:a6:9b:9a:9d:ee:18:
54:1c:ce:2a:bd:c0:35:b0:72:fc:25:23:06:25:cf:
31:44:5b:23:2a:86:c7:55:d8:7e:5d:2f:17:ec:3b:
cd:ab:d6:ed:1b:b3:cf:73:55:7a:ca:f1:e1:4d:58:
0a:59:ac:3c:1e:20:fe:d5:2d:72:6c:ba:9b:64:1c:
45:8f:51:cb:7d:d4:ee:ba:b9:3f:3c:c9:65:88:a0:
e4:6e:2a:df:8f:10:b6:65:b3:00:ef:2c:b8:ce:d5:
2f:1e:d3:b3:25:2c:7a:13:b4:15:bc:14:e9:94:f1:
30:ed:ee:60:cb:0a:da:c6:78:a6:07:7b:fe:c4:e5:
f1:1e:2d:2e:ac:e5:3c:7a:8a:58:ce:30:96:2b:f4:
83:f6:c3:42:78:d0:45:4c:b7:d9:b4:da:e3:b0:b5:
fd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:42:5F:B5:CF:49:68:D1:DC:C4:4D:70:B9:A5:3F:E5:40:1E:F9:DB
X509v3 Authority Key Identifier:
keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:40:03:af:1c:b2:3d:e2:ae:df:62:e6:c4:3d:8d:c3:5f:4a:
2f:20:a8:0c:56:c9:1d:e2:bb:b6:79:bc:4a:13:09:85:6a:7c:
6b:4f:22:e4:37:61:c2:47:bc:0d:de:00:a7:52:05:01:b9:ea:
15:52:25:26:c8:3a:be:f4:44:bd:b9:5c:54:0a:6f:f3:08:4d:
dd:6a:e5:9f:39:4b:df:57:f9:bb:69:53:c3:20:42:31:9f:92:
39:c0:d5:45:df:1c:13:f4:dd:33:c9:91:b4:f5:73:ec:7d:de:
f4:82:01:3e:ac:1f:7a:53:46:d2:d0:f1:bf:de:61:b1:ca:47:
38:c2:55:ec:f6:e7:49:d9:95:10:52:da:7f:f4:91:53:01:5a:
5f:c0:76:22:c1:47:32:98:c9:4a:c2:cb:fd:43:8c:e8:41:1b:
0b:08:a2:0c:04:98:39:86:b5:f3:c1:a4:f0:37:6e:35:10:bf:
96:fd:88:9b:fb:ae:bc:0e:f1:37:af:ec:3b:0f:55:d5:0a:a4:
d5:c9:86:77:0c:7f:fb:2b:80:bd:c9:97:57:9f:33:13:c2:f7:
82:5f:ab:21:a5:39:13:15:b7:a5:34:67:c6:69:01:54:e4:72:
59:ed:98:30:0e:ab:d6:2e:90:c0:06:3d:e4:0e:f7:db:ed:37:
48:3b:96:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:36 2026 by rpki-client