Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
File: y9lC2W7pSnpaZS73rIVdyUAUFd8.mft (raw, json)
Hash identifier: xejFwrd485G1dPV05LD7ONXAgppT5+62hjPylvFWdR4=
Subject key identifier: BA:9E:47:40:EC:F5:3F:44:E2:35:5F:59:43:A0:FE:AE:D1:B1:7B:3A
Authority key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
Certificate issuer: /CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Certificate serial: 019F95802455DF2902F50E3BABBC9FC9215B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 19:00:30 +0000
Manifest this update: Fri 24 Jul 2026 19:00:30 +0000
Manifest next update: Sat 25 Jul 2026 19:00:30 +0000
Files and hashes: 1: 3O0Jx2Z7uS77XzKQjDLJgefRDU4.roa (hash: mTSPl2/i72Uzjsz/bmIER2rP7ZrpmVRXp35zfMqJjrs=)
2: y9lC2W7pSnpaZS73rIVdyUAUFd8.crl (hash: X1psyK+pbypozG8ygSvOtIRTT9kLprhC5cVJA2qYr2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:24:55:df:29:02:f5:0e:3b:ab:bc:9f:c9:21:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Validity
Not Before: Jul 24 19:00:30 2026 GMT
Not After : Jul 25 19:00:30 2026 GMT
Subject: CN=ba9e4740ecf53f44e2355f5943a0feaed1b17b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:09:62:1d:ed:ba:23:7d:7c:38:3e:f8:dc:
c1:d3:97:ea:77:1a:92:47:70:23:a9:8f:54:cf:47:
ab:ef:89:25:ee:e7:fb:48:0f:6a:64:fc:76:43:8f:
3b:b3:09:b7:5c:30:11:f5:e8:9a:2d:b4:cf:4b:26:
d9:fb:72:59:7c:a5:0e:e9:0d:01:83:d0:b0:12:e9:
22:2d:58:9e:24:bb:cb:60:da:8d:a7:6e:2f:a0:fb:
1a:e8:c0:20:78:d2:b0:0a:fb:4a:11:b4:09:8a:cd:
c2:9c:4f:3f:5c:bd:75:5e:ea:50:3e:05:fa:b5:3d:
36:68:b2:a7:f5:c9:40:ef:69:45:8d:20:13:16:23:
d5:6e:bd:56:00:f8:f0:c2:f2:ba:e7:da:51:96:4d:
78:97:d0:ec:4d:f3:68:c8:9e:99:89:c8:14:f4:55:
99:8f:60:60:6c:8a:04:08:6f:a5:46:e9:48:e9:02:
72:1e:db:b2:9e:8b:32:75:32:00:3c:0a:63:0a:64:
a1:b6:6d:68:0b:db:41:97:9a:ca:e3:ba:40:77:a2:
e0:01:1d:95:38:3e:e9:7b:13:8c:a3:ed:3e:02:af:
1a:a4:41:73:28:08:4e:f0:d6:a0:c5:d7:21:e1:90:
1e:5f:58:67:a8:2b:89:6f:f2:4e:c6:95:b1:46:18:
64:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9E:47:40:EC:F5:3F:44:E2:35:5F:59:43:A0:FE:AE:D1:B1:7B:3A
X509v3 Authority Key Identifier:
keyid:CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:95:70:03:c0:fe:26:37:8c:e4:7a:76:2e:a4:3b:e6:02:2a:
94:16:8f:92:39:b8:a3:c4:c2:40:fd:e7:00:c6:74:5f:7a:62:
c1:21:33:49:26:16:2d:87:76:87:86:02:9b:55:6c:f4:d3:2e:
bc:d7:91:78:7a:6e:4b:6e:18:c9:98:34:6d:c6:06:87:3f:0d:
94:fc:9f:0d:05:f6:2c:fe:d8:db:20:9d:ca:66:02:5d:c2:c0:
4a:ad:e0:72:71:a2:88:eb:4b:2a:21:4c:83:2b:4e:10:26:bf:
18:fa:88:5f:df:bc:8f:43:23:d0:e4:a0:b9:5d:be:7f:cd:b5:
de:6e:10:ad:f1:b0:31:b4:99:07:3a:fe:a1:32:d9:9f:cd:14:
28:c1:b4:cb:fe:33:5d:61:4b:2b:3f:9d:da:8b:45:b7:92:f1:
27:67:5d:77:a6:9e:64:e9:8e:59:7e:19:2b:9d:e5:94:d7:c3:
7e:57:05:bf:eb:d2:0f:0d:6c:5e:cd:ec:85:c7:86:d1:d4:42:
78:f0:c9:18:ba:a2:53:05:3f:2a:b9:c9:66:d6:f6:6f:9f:9e:
89:6b:5b:5a:ab:42:77:f9:3d:0a:7e:f9:d1:12:e5:47:fb:8d:
90:0c:07:78:80:ee:29:eb:42:b5:ab:51:66:c2:f5:f0:d1:b6:
2b:65:28:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VgCRV3ykC9Q47q7yfySFbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDk0MmQ5NmVlOTRhN2E1YTY1MmVmN2FjODU1ZGM5NDAx
NDE1ZGYwHhcNMjYwNzI0MTkwMDMwWhcNMjYwNzI1MTkwMDMwWjAzMTEwLwYDVQQD
EyhiYTllNDc0MGVjZjUzZjQ0ZTIzNTVmNTk0M2EwZmVhZWQxYjE3YjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkAJYh3tuiN9fDg++NzB05fqdxqS
R3AjqY9Uz0er74kl7uf7SA9qZPx2Q487swm3XDAR9eiaLbTPSybZ+3JZfKUO6Q0B
g9CwEukiLVieJLvLYNqNp24voPsa6MAgeNKwCvtKEbQJis3CnE8/XL11XupQPgX6
tT02aLKn9clA72lFjSATFiPVbr1WAPjwwvK659pRlk14l9DsTfNoyJ6ZicgU9FWZ
j2BgbIoECG+lRulI6QJyHtuynosydTIAPApjCmShtm1oC9tBl5rK47pAd6LgAR2V
OD7pexOMo+0+Aq8apEFzKAhO8Nagxdch4ZAeX1hnqCuJb/JOxpWxRhhkYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqeR0Ds9T9E4jVfWUOg/q7RsXs6MB8GA1UdIwQY
MBaAFMvZQtlu6Up6WmUu96yFXclAFBXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wODJmMTItNTEzYi00ZWI5LWExNzEt
YzZmNmQ0NDQ5MTVmLzEveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8wODJmMTItNTEzYi00ZWI5LWExNzEtYzZmNmQ0NDQ5MTVm
LzEveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZVwA8D+
JjeM5Hp2LqQ75gIqlBaPkjm4o8TCQP3nAMZ0X3piwSEzSSYWLYd2h4YCm1Vs9NMu
vNeReHpuS24YyZg0bcYGhz8NlPyfDQX2LP7Y2yCdymYCXcLASq3gcnGiiOtLKiFM
gytOECa/GPqIX9+8j0Mj0OSguV2+f8213m4QrfGwMbSZBzr+oTLZn80UKMG0y/4z
XWFLKz+d2otFt5LxJ2ddd6aeZOmOWX4ZK53llNfDflcFv+vSDw1sXs3shceG0dRC
ePDJGLqiUwU/KrnJZtb2b5+eiWtbWqtCd/k9Cn750RLlR/uNkAwHeIDuKetCtatR
ZsL18NG2K2Uo9g==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:55 2026 by rpki-client