Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json)
Hash identifier: JG2eHkSwwdUBrTcG24EEerHP5UvRK+KzKExES4A910k=
Subject key identifier: B4:F1:1A:9D:E8:13:C4:9C:35:BF:F9:E1:43:32:70:78:7E:8C:49:D0
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial: 019F9211655A3ABF98AD4204D931BF465E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
Manifest number: 0AFF
Signing time: Fri 24 Jul 2026 03:00:41 +0000
Manifest this update: Fri 24 Jul 2026 03:00:41 +0000
Manifest next update: Sat 25 Jul 2026 03:00:41 +0000
Files and hashes: 1: aZ3Yoe0ZQdIXylk1FrtEwAkUD8k.roa (hash: q1ah2hweQU+cFtZrhhXan7MxnsmHv01bYbCdDje0NNY=)
2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: TvlvfpTjt/9Mo7Ql5vuDtm2b+Go2r04REFMeQGTdD+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:65:5a:3a:bf:98:ad:42:04:d9:31:bf:46:5e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Validity
Not Before: Jul 24 03:00:41 2026 GMT
Not After : Jul 25 03:00:41 2026 GMT
Subject: CN=b4f11a9de813c49c35bff9e1433270787e8c49d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:c7:3e:f1:c6:97:fc:51:3c:7e:0c:c8:ad:
5a:42:d4:30:a9:15:7e:46:11:34:37:28:b1:25:6b:
8a:a2:29:a2:32:b8:05:6b:19:af:08:92:a2:a2:d9:
78:52:6b:ef:b4:34:7e:fb:af:c9:81:c7:9b:59:e9:
f1:0c:32:88:b0:62:46:17:1e:98:b4:56:6b:af:d4:
9b:c4:8a:93:62:d6:de:10:e6:e4:49:28:94:f6:9b:
ec:b2:26:9c:8f:04:58:3a:8c:b9:a6:e6:b8:b4:fa:
31:e7:09:75:15:4f:1e:aa:3b:10:0a:03:75:31:f4:
fa:37:4d:17:66:b7:ab:15:38:dc:a4:2b:30:98:c6:
e3:e7:df:43:49:5a:b3:db:29:10:4e:74:6f:a2:2a:
16:89:ae:3f:16:a2:50:36:cf:2e:21:ba:11:ac:3d:
f1:8b:c7:9e:4d:97:d2:d1:9f:32:3c:54:e5:53:11:
d3:9f:bb:e0:2d:61:69:88:af:a5:fb:f4:c5:6a:11:
e3:8d:28:f1:3c:7b:7f:55:ea:2d:30:81:35:64:01:
cb:14:2a:4d:71:7b:a1:f6:93:af:ca:1c:3f:e4:be:
6c:25:99:2c:9b:08:e3:3a:cb:9e:40:85:47:ec:08:
7d:51:96:43:a5:96:b1:8d:06:4b:a7:cb:73:ff:75:
f0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F1:1A:9D:E8:13:C4:9C:35:BF:F9:E1:43:32:70:78:7E:8C:49:D0
X509v3 Authority Key Identifier:
keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f4:36:42:67:3b:5d:71:83:30:96:c8:b9:b1:5e:e3:f3:6a:
9a:9b:17:aa:2b:69:7f:c2:25:09:d7:91:25:a6:d9:57:48:f9:
f9:2a:c9:af:bd:9b:06:cc:6d:10:c7:7d:d2:e4:c5:1e:c2:96:
ff:10:72:72:3e:33:6c:4d:32:46:cb:1d:f5:f9:fb:63:d3:7e:
0f:85:6f:32:12:a5:d4:a7:98:c1:cd:e8:a4:0e:ba:43:ea:7b:
9b:70:cd:ac:dd:a8:e7:cb:70:62:3b:f9:aa:d0:a8:3a:6e:6e:
8e:ce:be:91:49:86:5f:ee:d7:08:74:4f:93:3d:6f:90:9a:d4:
70:d4:cf:af:8b:6d:d2:c5:78:e1:6e:00:d3:08:c5:9f:b5:f3:
d5:a9:9c:f7:06:94:d1:74:98:c0:1e:87:b7:0e:c9:7f:21:30:
c1:0a:43:b9:99:c1:a6:af:03:34:2d:3d:99:38:1b:1f:80:27:
87:0b:b0:79:0b:41:41:c2:96:d1:06:1f:6c:d8:de:66:2f:b8:
73:f0:4e:6e:55:1b:2d:70:6e:5c:ee:db:c7:c1:6f:bf:3d:0c:
a3:c0:a3:1d:26:52:ed:af:c8:79:a0:ae:f2:df:04:3a:df:1e:
ea:3e:86:c1:42:ad:93:d6:ea:d4:e2:49:d4:18:0f:b2:1d:4b:
05:5f:0c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:41 2026 by rpki-client