Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json)
Hash identifier: JFlv+gOrn1BWCTGfh5APSa5Ybn/S/lahmJOECDlwBqs=
Subject key identifier: 5C:AB:FA:5C:E0:7A:DB:4F:29:99:C0:58:28:29:40:E9:F3:35:12:AD
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 019F8FB4D70089B6B08EBC6F0E24E79DAC90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
Manifest number: 134C
Signing time: Thu 23 Jul 2026 16:00:21 +0000
Manifest this update: Thu 23 Jul 2026 16:00:21 +0000
Manifest next update: Fri 24 Jul 2026 16:00:21 +0000
Files and hashes: 1: EpTBQMmX_i98nrHenbAZIilledc.roa (hash: Mmlh/uw7vdVSt2pl5ZQV5w5RtXcHFW6Nm/2ktZMB/gY=)
2: qnYWJnu7gDjyMxkFI7kZdjJxDKg.asa (hash: zefrDIFHWwKYZMYE/LvGlSTFwHDJ72INmt0VL/GYS4E=)
3: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: fmSwXrw/V1jyfPW6tWFV9GoIL76YF1KkvEeMIK789jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:d7:00:89:b6:b0:8e:bc:6f:0e:24:e7:9d:ac:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Jul 23 16:00:21 2026 GMT
Not After : Jul 24 16:00:21 2026 GMT
Subject: CN=5cabfa5ce07adb4f2999c058282940e9f33512ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:56:de:80:1f:99:9e:ab:6e:57:44:22:8a:
ee:4f:8d:3a:97:8b:57:4c:ce:b2:aa:68:37:22:1e:
3f:d3:0f:b1:72:45:94:06:e9:38:f5:d9:12:30:b2:
4a:36:0c:28:f8:52:ad:28:51:83:e0:2a:ed:5e:53:
18:75:a2:bb:74:43:e4:d9:8a:50:64:60:fd:88:53:
75:d6:c1:49:2a:da:27:72:29:ef:ce:f8:bc:d0:73:
15:0d:1f:f9:7b:4c:0d:dc:3e:41:e8:0e:c1:75:56:
e7:31:7f:e8:09:6e:e3:50:0e:3a:98:62:06:72:85:
ec:7c:9a:96:44:3f:70:e5:2d:ae:6d:48:fe:99:dd:
3a:ef:6d:c4:d1:07:bf:f7:43:69:9c:4e:d4:e5:22:
7f:39:9a:6c:9e:ca:ae:16:35:1f:c2:89:46:49:77:
9a:5b:65:96:88:55:3c:14:ac:33:28:a2:4b:b3:06:
b2:60:e4:58:76:79:d4:ad:af:73:17:e4:df:46:18:
1f:95:d7:70:4d:17:c1:94:2b:c9:00:56:45:a5:94:
01:27:3c:88:4a:33:b3:f2:8e:31:54:77:81:95:3d:
c8:46:ac:19:03:0d:0c:a0:0d:c7:18:81:18:c0:01:
9e:4f:17:6f:75:5b:93:3c:79:1b:af:c1:a5:e4:de:
c3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AB:FA:5C:E0:7A:DB:4F:29:99:C0:58:28:29:40:E9:F3:35:12:AD
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0c:d6:a4:92:28:a1:11:66:43:dc:72:eb:2b:a0:1b:d0:e7:
fb:7b:c3:c8:29:d5:40:10:0c:50:01:3e:a5:00:6b:ad:f3:b6:
d7:14:dd:6f:a8:e9:87:33:ad:1a:69:77:d5:4c:be:f0:6e:89:
a1:e0:21:28:18:b5:07:e3:8f:d3:d7:7e:8d:78:04:b5:9c:1a:
8f:19:ee:fa:08:54:13:8c:14:ee:3d:cc:86:25:9f:e1:97:ac:
38:30:75:c4:4e:fd:fa:15:28:cb:3d:db:99:f4:1a:c2:9e:de:
34:33:fd:21:5c:83:08:70:15:c6:c6:83:05:39:85:09:98:20:
31:df:9a:bf:cd:3c:8f:8b:c7:da:ad:55:c7:08:5e:b6:49:2e:
67:ef:65:36:32:0f:e3:84:e6:64:ba:d2:09:3e:fd:3e:8a:1a:
38:b7:d2:dd:b4:dc:c6:0f:65:46:0a:e6:b1:82:af:80:0b:d7:
3b:a0:34:3e:cc:a9:ea:3d:d0:0c:13:de:4f:5f:36:7b:55:f3:
a4:01:63:c9:3d:c3:a7:92:c4:5e:8c:d1:9a:da:7c:b2:90:bb:
01:6a:74:58:22:3e:9b:69:31:1c:65:70:cf:5f:5a:2b:0c:72:
af:c3:af:8e:0f:f5:27:29:c9:14:bd:95:2a:79:14:18:58:e5:
9f:67:15:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:43 2026 by rpki-client