Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: nvhVfzKqakgWl9nJ+ifk+HJl+vAvu2ZHhl334ltoa4g=
Subject key identifier: 89:61:1D:CC:69:95:0C:D1:DA:6C:8F:61:C4:76:DA:4F:C6:70:1B:E5
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 019F93C87C0DAC2E16963E2C6188B8BDE922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 11:00:17 +0000
Manifest this update: Fri 24 Jul 2026 11:00:17 +0000
Manifest next update: Sat 25 Jul 2026 11:00:17 +0000
Files and hashes: 1: Nh5n5OS_FgNSU_CRCZBVspz1rhI.roa (hash: IWrNPYpBRnCN3KoAH2/hYR5dMaCc3BE8UMq5q83cyhw=)
2: wG3GrFqVGUvTRTbPHblNlTz8CLk.roa (hash: LemTu9TRxZtqMeqZqR+9skKyltQynjo4K29j1dzL0vI=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: NDRjdv0kaxFKVgOA7s3h7gosvw+CGfuvoPO80je0bic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:7c:0d:ac:2e:16:96:3e:2c:61:88:b8:bd:e9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Jul 24 11:00:17 2026 GMT
Not After : Jul 25 11:00:17 2026 GMT
Subject: CN=89611dcc69950cd1da6c8f61c476da4fc6701be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:50:45:ba:62:f8:c8:27:4b:d0:42:b3:1c:
59:f0:b0:52:d0:f6:f3:74:c9:82:4a:b0:c8:40:5f:
2e:57:82:ac:74:40:32:f1:38:11:1f:47:d0:d2:67:
47:39:b2:aa:dc:04:f7:e6:0a:b9:b3:03:5d:fb:87:
f5:fe:0c:af:a9:bf:9f:37:45:74:14:d9:1b:9b:7c:
ae:13:af:8d:45:a5:93:57:5a:27:f2:51:94:13:8f:
76:09:e2:9a:d6:04:c4:29:93:f5:20:7e:b0:61:70:
2b:ac:3b:ca:ff:8c:49:02:a8:c6:6c:88:ee:0c:06:
48:80:59:82:9d:7a:2c:5f:01:32:c9:36:39:27:07:
95:9b:e7:76:d9:58:b4:36:ad:10:cf:dc:d7:87:aa:
18:d0:4b:e5:f9:78:2b:09:45:e0:78:ba:3b:de:4e:
fa:af:7c:5b:9d:7d:8b:57:14:2f:6b:6f:a2:3b:38:
78:6e:f4:eb:a1:bc:79:57:3a:47:c1:f0:d8:69:72:
5f:71:29:f1:09:37:08:26:ac:08:9a:8f:a6:04:34:
4a:8a:27:81:bd:a6:f3:be:2a:95:69:9a:5a:3e:76:
4c:8e:4d:a9:f0:78:a8:68:bd:6e:20:02:fa:bd:9a:
17:0c:12:50:c1:c4:83:21:fd:81:da:53:c8:9d:5f:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:61:1D:CC:69:95:0C:D1:DA:6C:8F:61:C4:76:DA:4F:C6:70:1B:E5
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8d:d7:56:11:9f:f1:35:aa:b8:bc:bd:88:08:b0:a4:0e:ed:
91:8b:86:6b:b8:7c:a5:66:92:bc:6d:e7:e1:ca:48:45:bc:c6:
f3:36:79:82:a4:35:b3:b8:91:77:c1:ed:e1:fa:8d:44:4f:a9:
74:60:92:19:2d:22:81:e9:72:69:a9:86:dd:bf:46:58:b1:3e:
96:56:9b:2a:94:63:34:a0:79:b7:41:60:f4:c9:20:c5:11:dc:
b4:93:65:b8:1d:8e:49:55:58:d3:da:f9:de:1a:17:c8:47:e5:
01:54:01:0c:52:f9:e1:a1:93:70:27:d0:7f:f2:06:d3:c2:0b:
c5:dc:5c:66:2d:77:3a:22:4b:88:18:45:17:d2:27:5b:9a:05:
ed:a4:f4:64:28:aa:6e:5c:f2:10:3f:2c:16:b2:75:2d:3b:5d:
1a:4b:94:b3:31:b7:48:91:94:ce:42:34:14:09:69:f8:4b:13:
5e:e1:98:2c:0d:62:33:9a:00:bd:fb:7c:4b:89:ea:78:d6:43:
26:3f:88:5d:ab:94:fc:db:fa:2e:f8:98:3f:cc:f6:db:b5:bd:
19:5b:f7:b0:bb:a2:86:05:8d:c7:31:22:eb:d3:04:67:41:85:
85:b0:c6:99:7a:38:3b:87:83:57:5b:2e:c7:32:95:3b:ff:1b:
49:81:31:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:13 2026 by rpki-client