Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
File: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json)
Hash identifier: v3jSNAzuxAdGnOuxR7hq3WNR2v2X8vJieY9XIs26WbQ=
Subject key identifier: 9F:A4:F8:83:F2:01:86:6B:6F:56:D1:6D:CD:7C:55:FD:9A:14:D7:F6
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 019F94A4CA9E5D99E79F5424C04A9C6D14C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
Manifest number: 1717
Signing time: Fri 24 Jul 2026 15:00:55 +0000
Manifest this update: Fri 24 Jul 2026 15:00:55 +0000
Manifest next update: Sat 25 Jul 2026 15:00:55 +0000
Files and hashes: 1: J0qpnA35YrWdkNYZVcd9jRpBOBE.roa (hash: XoaXScXKpwP2trg33PIg2cyrDiDDcWR43c4XEEKEOb0=)
2: PN9Auf6nfCjQOBl6zYFAwEaQaC0.roa (hash: gjfumwwkQOIiQ7wTm/N/cWS4x7vvKCrISYqhYWQWJAY=)
3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: PTmikQRC0MO9PV8y6r23JzRv5NumNFGASrbpQGzLrQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:ca:9e:5d:99:e7:9f:54:24:c0:4a:9c:6d:14:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: Jul 24 15:00:55 2026 GMT
Not After : Jul 25 15:00:55 2026 GMT
Subject: CN=9fa4f883f201866b6f56d16dcd7c55fd9a14d7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:fb:8f:38:f7:f5:1a:53:6a:f5:20:c2:48:
04:17:07:99:be:42:e1:3d:3d:5e:62:f9:25:0a:90:
14:48:f4:f6:6a:ec:24:db:0a:58:47:a6:e7:ab:c0:
fb:77:fe:b2:65:34:53:c8:96:be:cb:57:9c:7f:e5:
27:37:e8:6c:b4:39:f2:67:22:ac:c7:e0:14:e3:2f:
1f:77:1d:02:52:96:1d:ca:32:c9:23:a3:16:21:64:
5b:54:8e:f0:ba:4a:3f:3a:a1:83:4f:c4:74:94:cd:
18:16:c7:aa:6c:64:ac:c5:84:44:56:d7:32:a8:ec:
fd:d3:28:90:ef:70:fd:3c:77:99:52:6a:35:c8:0d:
92:5a:ed:50:79:29:30:d0:ca:b5:7d:05:f9:d3:e9:
58:6b:ad:dc:f3:8a:8c:49:70:a5:a2:1d:aa:ef:1a:
b5:ab:fd:66:a4:30:06:e2:d7:73:86:8d:57:c2:0f:
0a:3f:6d:07:dc:8c:67:5d:56:a3:87:7f:4d:54:f7:
4f:93:85:c8:98:03:5c:68:db:15:c6:be:84:cf:4b:
3a:fc:b7:f7:84:41:fc:34:0c:36:82:aa:34:01:28:
f9:16:da:b4:9f:5f:28:96:03:45:29:41:43:4f:dc:
4a:72:e5:17:f1:f3:ae:e5:c4:66:69:95:ce:f1:9b:
cf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A4:F8:83:F2:01:86:6B:6F:56:D1:6D:CD:7C:55:FD:9A:14:D7:F6
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b5:57:c4:19:59:b3:96:59:d5:7d:59:69:5d:8c:5c:13:16:
57:3d:d3:6b:88:06:33:d4:cc:9f:a1:7e:a3:14:b9:90:e5:d1:
7e:08:fc:8a:07:ee:a8:c0:a9:86:2f:c8:8c:1a:d7:74:0d:5f:
41:23:2d:9c:46:54:5d:c6:3c:1f:3f:13:df:5e:42:0e:94:22:
da:ed:61:08:80:5e:d7:3b:c4:5e:92:e8:bc:4b:36:9a:ec:79:
a1:bd:1e:65:16:28:6f:d1:99:b2:9f:f0:75:62:2b:7f:73:ed:
a8:69:e5:79:e9:b1:00:07:37:fc:96:6d:1b:1d:f1:16:76:20:
e9:11:a4:f7:5a:53:26:b2:35:d3:26:c2:78:7c:f2:b6:74:c2:
0b:f0:a7:9c:18:1d:7e:71:ee:a9:3c:4d:62:fc:d2:bd:20:40:
c2:e0:ea:88:3d:01:5d:4b:bb:e1:6a:94:62:17:e2:12:fb:cc:
21:25:93:ad:57:e3:8f:28:31:0b:38:32:9f:8e:f7:9d:1a:88:
f3:10:40:29:c8:0c:19:99:b0:a5:b9:a2:68:5c:1b:f0:9e:a4:
cd:70:7b:3f:09:e6:e9:a5:e8:27:5a:f1:c9:8f:f2:f5:52:51:
d6:66:77:fc:e8:bf:5b:b5:53:3e:45:67:9c:40:9a:7f:be:47:
f4:b6:59:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:08:41 2026 by rpki-client