
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
File: RY-YWypGQ0lCubLZHPEocHUuRvs.mft (raw, json)
Hash identifier: peYaG7u49BY2NxxfWiqhLT1Gg3SIl6UnQEj3163JWNA=
Subject key identifier: 94:DD:3F:6D:7E:F0:6A:A9:35:4A:3B:18:BE:6F:C6:0D:1E:E7:D2:B2
Authority key identifier: 45:8F:98:5B:2A:46:43:49:42:B9:B2:D9:1C:F1:28:70:75:2E:46:FB
Certificate issuer: /CN=458f985b2a46434942b9b2d91cf12870752e46fb
Certificate serial: 019F9549C5C6F35D754D06D1FE50EE8BC5E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY-YWypGQ0lCubLZHPEocHUuRvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:07 +0000
Manifest this update: Fri 24 Jul 2026 18:01:07 +0000
Manifest next update: Sat 25 Jul 2026 18:01:07 +0000
Files and hashes: 1: RY-YWypGQ0lCubLZHPEocHUuRvs.crl (hash: 4nTwpt3oAw8YJslGBiSxN46e6NKVTB3x5VcoZ2xyx+U=)
2: ZMVggC6fnvi5QFfWX49Stx3sedU.roa (hash: 2N+/qv1zdtOS6klaheqYn3TqcaLDARy95PnzfT7lVJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RY-YWypGQ0lCubLZHPEocHUuRvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:c5:c6:f3:5d:75:4d:06:d1:fe:50:ee:8b:c5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458f985b2a46434942b9b2d91cf12870752e46fb
Validity
Not Before: Jul 24 18:01:07 2026 GMT
Not After : Jul 25 18:01:07 2026 GMT
Subject: CN=94dd3f6d7ef06aa9354a3b18be6fc60d1ee7d2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d2:75:6b:7e:3e:45:03:dc:42:d6:70:c2:2d:
a6:cb:95:0e:81:a6:af:12:b7:a2:30:c9:d6:7e:a6:
d9:ed:ef:be:d0:14:f6:c2:a1:66:c4:b2:67:85:7e:
dd:c9:37:66:d3:8f:b4:cd:ce:ea:2b:63:98:b1:d0:
88:8d:ed:d4:c3:fb:10:f0:d9:fa:48:56:e0:dd:d0:
1f:73:72:bd:64:9d:e3:ca:50:da:d7:a7:c8:89:c1:
78:2c:0e:ad:55:11:f0:6f:10:9d:e4:50:69:d4:ee:
ad:16:fa:4e:8a:ff:a1:74:ed:4c:9e:bc:67:e7:36:
65:6f:93:3e:a9:29:71:2c:84:8f:aa:fc:74:ef:57:
ca:61:51:9b:64:cf:99:e6:ca:b3:ae:b1:1d:6c:6c:
6f:9d:d6:80:ac:c6:61:4c:35:73:08:42:0e:f7:dc:
d2:b9:3f:72:3f:c4:05:e5:fe:43:11:76:ff:32:43:
21:47:1f:44:10:eb:53:cc:c6:50:f7:ba:e8:9c:eb:
94:2a:56:39:0d:c3:3c:ff:f6:fb:ec:7a:49:e7:c4:
89:7a:7f:79:54:9a:2a:01:a3:8d:3a:b6:fb:38:a7:
ff:85:ec:c0:ec:97:c9:7b:15:9c:38:db:2c:28:d7:
d2:b2:ca:78:c2:bd:8f:60:41:b7:c4:7e:7f:3c:07:
20:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DD:3F:6D:7E:F0:6A:A9:35:4A:3B:18:BE:6F:C6:0D:1E:E7:D2:B2
X509v3 Authority Key Identifier:
keyid:45:8F:98:5B:2A:46:43:49:42:B9:B2:D9:1C:F1:28:70:75:2E:46:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY-YWypGQ0lCubLZHPEocHUuRvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:02:7f:bb:cc:cc:c9:52:77:fd:fb:0c:f2:d3:62:2f:1e:bf:
21:7b:f2:22:dd:b5:f3:3f:09:90:0d:98:6c:58:86:a8:30:f1:
50:64:d4:10:fc:aa:9c:df:33:63:c8:60:45:28:65:ad:cb:9a:
fb:d9:b5:ec:e5:5d:41:3a:d9:d4:68:97:6b:b3:6f:bf:1c:90:
59:de:d1:2b:be:23:c3:35:5f:fc:cf:a4:20:c6:38:da:cd:c7:
2c:ce:21:2a:3a:98:33:ac:c8:af:4a:55:33:76:21:14:8c:83:
c2:ac:72:3c:ff:68:e8:e3:a6:41:d6:2f:39:91:3b:92:c8:7e:
e1:cf:80:c1:c3:cd:82:ca:39:94:3d:6e:02:2d:cd:61:ee:ab:
4f:96:df:0f:1c:74:ff:59:0c:be:bc:c4:58:4f:4b:48:81:9b:
08:1b:b2:b8:38:cc:66:1e:40:73:e9:67:bc:e5:e2:b8:6e:71:
de:fc:4b:70:28:10:06:7c:39:ae:11:c4:c8:59:70:7c:38:a2:
7f:4f:24:eb:07:70:98:ae:07:16:e2:69:d6:c6:ff:f4:36:36:
af:93:f1:76:fd:c2:0d:a4:45:27:8a:ad:ba:29:ee:2f:1f:1d:
9d:d2:77:7a:4c:70:4b:e3:49:80:1e:b7:ed:8c:b0:16:f3:c2:
bc:dc:cf:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:06:52 2026 by rpki-client