Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: vQIJRJ07t1OnCpnrs1njp8ihCltUcYwMriDzqLDKDVQ=
Subject key identifier: A9:9A:27:5E:88:A0:19:99:51:1A:83:2E:57:B9:FE:C3:25:0D:B4:A2
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 019F9211699166BFB66616B100D717D47AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 104B
Signing time: Fri 24 Jul 2026 03:00:42 +0000
Manifest this update: Fri 24 Jul 2026 03:00:42 +0000
Manifest next update: Sat 25 Jul 2026 03:00:42 +0000
Files and hashes: 1: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: jOH9UMtrWIfIw55IvNHQOsmytCXAKAUDMQ5WHJ4OL8c=)
2: cIwuNOBQZVEAKmirlwvqGCKlAVA.roa (hash: MTQrQYMht/gMO7+xqgltPlCnk6FhdwKMEakt6nRw8pI=)
3: xTW_lD5hyFR2vQYBVeIQ8tHTVWU.roa (hash: +MCBleBXBQDx6fs7+ejDOMAZrsryKfTQT1EHgUrcOhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:69:91:66:bf:b6:66:16:b1:00:d7:17:d4:7a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Jul 24 03:00:42 2026 GMT
Not After : Jul 25 03:00:42 2026 GMT
Subject: CN=a99a275e88a01999511a832e57b9fec3250db4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:52:0b:d5:c7:73:79:b3:d9:0f:b8:d0:50:45:
a1:d2:4b:67:d4:5d:4f:0f:13:9e:74:ef:76:25:e1:
2d:6f:e7:9c:f1:a7:11:29:e7:d0:30:ac:71:4e:c3:
11:fb:80:e2:21:30:f7:99:24:9c:86:df:43:4e:42:
41:89:ca:d6:e1:29:23:7f:f7:54:08:7f:83:f5:93:
f9:26:1d:27:bc:48:a1:d0:76:33:1a:9f:63:dc:9e:
c1:ef:58:1e:46:1a:0c:fe:15:23:db:93:f6:9e:2b:
cf:55:4b:c1:d1:02:cb:c1:75:06:03:e6:fa:f7:9d:
32:e8:ca:e3:e8:51:3c:62:dc:b4:e2:34:df:2f:44:
0a:1a:57:1e:78:78:82:b8:92:a0:26:82:80:65:dd:
9f:b9:56:5b:86:0f:e7:a3:7e:53:eb:9b:89:6c:7d:
2f:92:c3:0d:55:01:2c:2a:6d:88:f1:52:c1:d3:22:
94:f6:7a:97:2c:14:89:0a:99:fd:43:42:e8:1d:2f:
0e:c9:ec:c5:66:4e:48:e0:16:2a:dd:fc:31:8b:5f:
a6:20:b9:a4:22:62:4c:51:5a:5f:24:fb:25:87:c6:
c0:7a:f0:9a:62:3d:69:82:dc:37:5a:8e:71:a7:b2:
96:f7:71:82:e8:c9:bd:1d:26:75:51:ca:09:0a:71:
28:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9A:27:5E:88:A0:19:99:51:1A:83:2E:57:B9:FE:C3:25:0D:B4:A2
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:de:7c:2a:be:f6:36:10:49:3b:74:18:c3:02:69:aa:26:47:
0a:ca:56:9d:11:ef:05:28:9e:10:48:99:5a:0f:16:bb:3c:82:
e3:69:05:18:0a:93:a3:05:e7:94:00:f4:f9:09:f6:15:11:c9:
f4:46:33:1e:95:c6:22:ed:e8:12:94:3e:c4:ed:5a:08:f4:e1:
b6:7d:96:eb:35:7b:96:96:89:16:e4:ca:75:b7:0e:5e:a3:5d:
02:bd:47:da:fd:57:37:aa:ae:0c:c3:14:b8:37:42:7f:50:cb:
0c:b6:f8:a6:d1:8d:a9:d3:3a:aa:a3:f3:22:78:8c:07:a2:d9:
ae:b9:8e:8a:43:fb:14:b6:38:a6:79:6f:08:70:19:7c:ef:83:
08:2f:4d:b2:0e:fa:53:a4:02:5d:98:4e:b7:34:55:07:d7:e7:
df:c5:0b:ec:72:27:11:36:ec:95:b0:be:37:8b:01:47:4e:07:
e8:2a:4d:e4:a6:d7:c3:55:80:98:35:37:5b:52:97:cd:df:02:
90:c6:4f:b1:2f:df:f8:72:81:5a:44:c0:8a:39:c5:72:c5:88:
82:fb:e4:f6:2e:a7:53:f2:ae:8d:9c:dc:3e:fc:4f:da:84:e8:
54:e1:e8:96:d8:83:5f:95:3a:06:2b:92:2d:b3:15:1e:1b:b4:
ba:95:b9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:26 2026 by rpki-client