Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
File: y2qe-BDtqvUkU9KDc-8PebCb1j0.mft (raw, json)
Hash identifier: 2lsqD+ilD07Rc7y1+iQx3vp1D6fuAYCFLTuv7Xrfxcs=
Subject key identifier: C0:A0:AE:D3:62:80:AF:1B:47:0C:D3:90:0B:11:80:D1:4B:11:7A:99
Authority key identifier: CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
Certificate issuer: /CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
Certificate serial: 019F8FECBA545ACCF40DBDD8C88038160F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
Manifest number: 1B
Signing time: Thu 23 Jul 2026 17:01:23 +0000
Manifest this update: Thu 23 Jul 2026 17:01:23 +0000
Manifest next update: Fri 24 Jul 2026 17:01:23 +0000
Files and hashes: 1: 7sRoOWKbSUAYn6fc2kMDiGOFSzI.asa (hash: bVK40h1po743oXeQksBOOUrJaKABeP31ahdGkgnYLa4=)
2: y2qe-BDtqvUkU9KDc-8PebCb1j0.crl (hash: b4UyRHPofGwq9moULvHSs1ZacoYVsDbtxAB+1ZG1lAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:ba:54:5a:cc:f4:0d:bd:d8:c8:80:38:16:0f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
Validity
Not Before: Jul 23 17:01:23 2026 GMT
Not After : Jul 24 17:01:23 2026 GMT
Subject: CN=c0a0aed36280af1b470cd3900b1180d14b117a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:d2:2a:7d:30:b7:b6:c3:2c:f6:a6:fa:96:
eb:41:a0:51:f0:fd:6e:38:2c:bc:1c:04:50:8c:80:
17:85:f1:de:a5:7f:5c:bc:25:cc:80:b4:44:24:8b:
7d:b4:8a:33:ef:85:f7:66:b8:95:80:e4:21:4a:d1:
2c:40:30:89:b8:8b:6c:89:be:3e:0f:ef:0c:67:aa:
96:c3:ca:f2:a3:36:3d:3d:2a:75:a9:d6:6c:6e:09:
f3:c3:a3:79:13:96:1f:44:55:5f:53:46:46:94:54:
47:42:75:37:c7:bb:04:a4:ca:c9:51:8f:49:6e:5b:
ac:eb:86:b5:e9:e4:5e:2f:0f:ba:5f:80:c3:37:71:
3f:81:f2:b3:5f:ce:19:21:c2:b4:82:2f:92:a1:a8:
2c:41:18:aa:70:fa:76:dd:fc:5c:fa:06:64:32:fc:
35:7a:88:0c:8b:a0:af:8a:aa:b3:3c:90:54:93:aa:
6d:09:b6:54:4c:37:d6:33:bc:28:3e:47:26:3f:1e:
9c:57:72:e8:13:52:49:04:05:7a:4f:d3:d1:7e:5a:
10:79:37:9d:07:52:29:88:5a:b3:3d:47:39:87:9f:
1a:48:26:f7:c4:04:e0:72:ae:85:a9:ec:bf:bc:69:
55:a8:87:56:59:89:80:aa:7a:60:69:e5:4e:79:07:
d5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A0:AE:D3:62:80:AF:1B:47:0C:D3:90:0B:11:80:D1:4B:11:7A:99
X509v3 Authority Key Identifier:
keyid:CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d2:a4:09:cc:48:b9:48:de:fc:f5:9e:f5:19:aa:e6:a5:e7:
4c:8d:1d:52:26:99:63:76:5a:2e:1c:1d:cd:cf:cd:c6:4b:ea:
c0:d5:c8:52:43:ec:bd:91:fe:8d:e6:07:a5:62:28:a2:3b:34:
8b:eb:6e:fc:ed:20:93:3b:d7:4b:05:df:d1:42:9d:85:84:47:
ad:96:d8:6c:f0:96:71:68:91:f7:1f:44:d8:b7:83:a3:72:dd:
d3:f5:41:47:64:d3:0e:5c:f2:5a:35:27:25:b2:ec:35:ec:f5:
a6:cf:95:71:20:1d:8d:82:68:f6:85:df:d4:11:01:a5:c2:d5:
f2:89:58:f9:5f:fa:9d:d4:ee:6a:e5:ec:8d:97:cb:93:77:04:
75:4d:c0:5c:a3:ec:29:61:e1:eb:27:7e:79:3f:2b:ea:6b:8a:
fd:c3:be:30:eb:df:10:a8:8b:56:d3:be:f7:56:04:5c:a2:05:
2a:e8:09:29:b8:f6:66:4f:51:eb:23:19:7c:d5:f9:fa:f9:09:
46:1b:60:88:27:2b:d5:0a:04:ce:a4:2d:d2:d5:33:09:2d:a8:
cc:05:57:89:1c:3c:b7:ef:ac:6a:f4:56:11:31:b9:f8:f1:14:
9c:55:71:c0:9a:9d:d6:4e:82:f6:6e:d8:af:a7:3c:2f:e3:83:
bd:b2:e8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:48 2026 by rpki-client