Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: gE4365Hx5I8hx1bQjU11brKSshcqal5kWEK6F3Q16zI=
Subject key identifier: EC:F2:4A:B1:CD:EB:37:A4:98:0E:AB:83:FD:1A:C6:FA:FF:92:46:01
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 019F9392202E5A88C846616F207B4E1618D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 142D
Signing time: Fri 24 Jul 2026 10:00:54 +0000
Manifest this update: Fri 24 Jul 2026 10:00:54 +0000
Manifest next update: Sat 25 Jul 2026 10:00:54 +0000
Files and hashes: 1: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: BJbJQ841Iehfv37ooB4+KHGo4BHVw7nG2NwP0l2816M=)
2: ZbPx8DmJFKdQIWP-bXHtV-eEAv8.roa (hash: vdIV9Jeh3rKfLujo37xtw3yrmFmf9rID9z/P7vCkaSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:20:2e:5a:88:c8:46:61:6f:20:7b:4e:16:18:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Jul 24 10:00:54 2026 GMT
Not After : Jul 25 10:00:54 2026 GMT
Subject: CN=ecf24ab1cdeb37a4980eab83fd1ac6faff924601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5d:65:c9:4c:37:21:87:3b:f2:8f:8a:79:ab:
c9:bd:61:24:79:8a:2c:70:ea:61:8c:f0:29:76:e4:
49:36:88:5a:1b:e5:3d:4c:50:4f:65:a4:09:d8:43:
c1:49:b5:24:ec:7f:ff:6d:67:4e:6f:51:bf:86:3f:
4b:8e:6b:58:3e:b9:42:0c:f4:86:44:9d:ee:e9:74:
b9:a3:3e:f3:4e:92:b9:eb:8e:0b:16:e5:2e:33:4a:
57:22:76:92:48:1a:09:8b:6f:30:c6:0f:81:a3:ad:
fd:76:57:94:ea:46:4f:9f:a2:e8:0c:22:56:e0:a8:
b8:ed:04:f0:bb:38:f9:68:01:30:0b:a9:50:ee:fc:
98:ea:76:b4:98:88:20:49:1b:19:21:0e:32:a5:2e:
4e:8d:5f:3d:c2:86:69:34:67:53:15:5f:9f:b7:c5:
9f:dc:39:b7:46:24:93:92:f0:6a:f9:ad:d5:19:37:
71:64:38:80:40:0a:57:be:53:1c:31:2b:18:f9:86:
2f:3d:a2:31:e5:2d:36:4c:7d:60:31:b1:bc:34:c9:
94:b7:b5:e7:ac:1a:b7:d4:a1:a9:58:08:f6:07:fe:
b0:c8:a2:b1:f7:ee:73:1c:e1:20:95:da:5a:f1:03:
8a:d3:47:f4:0a:56:8e:fe:eb:a3:59:08:e4:f6:26:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F2:4A:B1:CD:EB:37:A4:98:0E:AB:83:FD:1A:C6:FA:FF:92:46:01
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c6:ec:98:05:a0:6a:e1:78:4f:dc:d7:09:ab:4d:f0:4e:f4:
c1:0d:ad:61:04:6c:d7:c1:3e:20:2c:fb:26:ac:4e:ae:3b:c9:
ca:ab:2c:0a:9a:e2:f7:d3:bb:34:24:9b:e9:db:6c:04:70:b1:
ce:89:f1:af:05:73:0e:61:cc:8e:24:b3:83:f3:b2:8a:c1:48:
bb:c3:1f:d6:2f:df:73:44:2c:a0:2c:da:2b:99:b2:b2:13:e3:
8f:9e:b7:cb:e9:b4:13:46:e0:83:e7:27:e4:48:5f:99:db:e4:
d0:72:fb:75:e4:f9:62:c0:a2:a0:5d:15:a7:b2:59:43:39:39:
ba:ab:11:32:a4:cd:38:50:89:e6:6f:3a:0d:da:48:0a:1a:83:
1f:4d:aa:18:b2:f2:f5:4b:f1:17:9f:5d:38:1e:c6:a3:cd:79:
e5:67:45:50:91:ec:f9:3d:36:ff:ae:46:9f:e1:ef:f1:a4:a9:
be:29:22:60:e1:09:0a:69:22:3b:57:3d:a6:df:5b:d9:80:9a:
50:31:1a:4a:e0:09:c6:72:3d:74:58:88:53:c4:6a:ed:01:24:
b7:19:f5:a8:77:e3:19:b3:28:f5:91:c4:47:fc:3f:cf:87:bd:
fb:ce:19:3e:1c:e5:68:90:73:23:c2:44:ff:e8:10:92:8c:0d:
b7:79:b9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:40 2026 by rpki-client