Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
File: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft (raw, json)
Hash identifier: 1d1BmarQVkIEeYTMYhbJUR/2Nxp41weq9KJCdfUl1iw=
Subject key identifier: 20:40:11:B3:09:46:77:77:0C:2B:C7:FA:28:85:00:70:9D:86:F2:11
Authority key identifier: 63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
Certificate issuer: /CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Certificate serial: 019F94A4A1C09E85CCA3EE2735BF3CBB5F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
Manifest number: 0FAB
Signing time: Fri 24 Jul 2026 15:00:44 +0000
Manifest this update: Fri 24 Jul 2026 15:00:44 +0000
Manifest next update: Sat 25 Jul 2026 15:00:44 +0000
Files and hashes: 1: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl (hash: lETm/Ru+JIXKzL1QtB/hUHl4kqUQOeng84WBov6RJac=)
2: aRuatR-K8nQ9ZXL9FpjwSLceO4A.roa (hash: Vt5YWGyW9wbAPKP7kNgM97gFfWqXrRoxA2e6gMj6LNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:a1:c0:9e:85:cc:a3:ee:27:35:bf:3c:bb:5f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Validity
Not Before: Jul 24 15:00:44 2026 GMT
Not After : Jul 25 15:00:44 2026 GMT
Subject: CN=204011b3094677770c2bc7fa288500709d86f211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:13:d1:1a:cd:bd:97:87:62:7a:06:a0:48:
c2:ba:1d:d7:45:45:bb:60:34:76:b8:4b:ca:05:6f:
f5:d7:d6:5c:2e:73:15:9b:8f:ad:8b:4e:c8:62:08:
88:64:7a:5b:b5:16:4d:d2:38:e2:00:a2:bf:97:60:
35:cb:f7:84:89:ff:b5:92:98:8f:e3:7a:41:03:4d:
f9:91:6a:71:f0:90:4f:33:36:5e:ef:2a:cd:46:96:
87:82:cd:84:26:be:9b:29:45:41:3e:b5:fa:c1:b4:
34:a3:e2:14:6d:3e:59:79:78:99:1e:ec:ac:0c:61:
77:cf:b6:8c:24:fb:70:61:25:f2:e9:a5:a2:f0:27:
67:ab:e7:23:72:f0:08:ce:75:99:2e:96:11:d7:0a:
d7:e5:80:1c:41:cd:77:05:ea:02:ed:66:39:ae:c2:
16:a5:b1:73:33:be:ea:f7:f3:e0:ef:7e:89:2f:13:
a5:e0:4b:8b:29:d3:19:13:24:13:67:c6:d9:1c:44:
35:9a:bc:31:ed:eb:16:20:8e:a3:6f:85:69:4a:a4:
40:d6:91:cc:c6:57:2c:a9:b2:9f:b8:4a:95:0c:94:
51:d7:10:40:00:07:56:5c:bb:05:6c:a2:65:68:84:
3a:da:78:a3:e3:d5:f9:81:67:4d:de:ef:c3:7f:f7:
e0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:40:11:B3:09:46:77:77:0C:2B:C7:FA:28:85:00:70:9D:86:F2:11
X509v3 Authority Key Identifier:
keyid:63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7a:83:c2:86:9c:4e:56:c2:ac:4b:52:34:ca:2c:47:69:67:
fe:5b:88:8d:69:4a:4e:46:ee:b0:23:ca:cf:7e:40:cd:c1:09:
ef:f5:7b:21:f4:34:99:a5:ae:92:7b:f2:2d:e8:d3:da:1c:d9:
2b:95:2e:65:5a:7b:e8:16:2f:56:74:23:ca:21:1d:1b:a9:a8:
6a:d4:39:dc:39:e4:07:18:9a:53:cb:95:cd:a4:76:c1:68:c5:
96:8d:f7:76:fe:a1:ac:63:0b:aa:c6:80:b0:67:03:bd:c3:9b:
f6:3b:da:14:51:df:59:da:62:9f:d0:64:db:c1:6e:56:78:2e:
65:91:19:09:cd:af:ea:2b:9a:e3:ca:e3:ee:1f:2a:02:f9:c2:
22:b4:81:83:a4:0d:39:47:75:01:d0:91:9a:4b:99:0b:6b:8c:
42:14:93:b1:cb:04:c9:11:b0:2c:be:02:94:bd:38:79:ae:b3:
f6:f7:be:74:0e:42:a1:a1:07:f2:ee:ec:2a:52:a6:92:bb:cc:
56:fe:7d:f0:38:9a:3d:d8:ff:45:42:6b:23:18:5b:10:53:9d:
34:c4:f8:3c:07:a2:cf:bd:03:74:4d:63:4f:b3:a4:b3:c7:f8:
9e:6b:1c:bb:0a:d2:aa:d8:24:81:fa:d3:f6:ad:d0:2f:c8:c3:
8f:f5:9f:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpKHAnoXMo+4nNb88u1+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzOGM4M2Y5YTNhM2QyMTYwYTAxNzhjYTE5Y2NiNDNhMGQy
ZjE4OTAwHhcNMjYwNzI0MTUwMDQ0WhcNMjYwNzI1MTUwMDQ0WjAzMTEwLwYDVQQD
EygyMDQwMTFiMzA5NDY3Nzc3MGMyYmM3ZmEyODg1MDA3MDlkODZmMjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVsT0RrNvZeHYnoGoEjCuh3XRUW7
YDR2uEvKBW/119ZcLnMVm4+ti07IYgiIZHpbtRZN0jjiAKK/l2A1y/eEif+1kpiP
43pBA035kWpx8JBPMzZe7yrNRpaHgs2EJr6bKUVBPrX6wbQ0o+IUbT5ZeXiZHuys
DGF3z7aMJPtwYSXy6aWi8Cdnq+cjcvAIznWZLpYR1wrX5YAcQc13BeoC7WY5rsIW
pbFzM77q9/Pg736JLxOl4EuLKdMZEyQTZ8bZHEQ1mrwx7esWII6jb4VpSqRA1pHM
xlcsqbKfuEqVDJRR1xBAAAdWXLsFbKJlaIQ62nij49X5gWdN3u/Df/fgiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBAEbMJRnd3DCvH+iiFAHCdhvIRMB8GA1UdIwQY
MBaAFGOMg/mjo9IWCgF4yhnMtDoNLxiQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTR5RC1hT2owaFlLQVhqS0djeTBPZzB2R0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jYzNjMjgtN2IxMy00MzQzLWFmMzct
MjU1NTBiYTI5MTI3LzEvWTR5RC1hT2owaFlLQVhqS0djeTBPZzB2R0pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jYzNjMjgtN2IxMy00MzQzLWFmMzctMjU1NTBiYTI5MTI3
LzEvWTR5RC1hT2owaFlLQVhqS0djeTBPZzB2R0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHqDwoac
TlbCrEtSNMosR2ln/luIjWlKTkbusCPKz35AzcEJ7/V7IfQ0maWuknvyLejT2hzZ
K5UuZVp76BYvVnQjyiEdG6moatQ53DnkBxiaU8uVzaR2wWjFlo33dv6hrGMLqsaA
sGcDvcOb9jvaFFHfWdpin9Bk28FuVnguZZEZCc2v6iua48rj7h8qAvnCIrSBg6QN
OUd1AdCRmkuZC2uMQhSTscsEyRGwLL4ClL04ea6z9ve+dA5CoaEH8u7sKlKmkrvM
Vv598DiaPdj/RUJrIxhbEFOdNMT4PAeiz70DdE1jT7Oks8f4nmscuwrSqtgkgfrT
9q3QL8jDj/WfLw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:25:18 2026 by rpki-client