Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: Pnjk7XodB9FkMx18hfjJqZPiWUZpr3ajk1+oVGYaOco=
Subject key identifier: 83:59:71:72:F1:58:D5:37:F2:19:09:B4:BE:CC:5D:3F:E4:FA:E7:D1
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 019F9211A77ADD2603FC712AEE93799A26D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 12B4
Signing time: Fri 24 Jul 2026 03:00:58 +0000
Manifest this update: Fri 24 Jul 2026 03:00:58 +0000
Manifest next update: Sat 25 Jul 2026 03:00:58 +0000
Files and hashes: 1: YFo06dx0o1PHDC6LUgSFCDM_MLE.roa (hash: i0OcIk2lCb0oZECkABY1EIzkvkdWAble7uuQNpGV6Q8=)
2: cIShs-dj-a-jUHC5O2QcH4JFtqE.roa (hash: sqvBQpMmwNFJ+qbqQywFjzcQM3kVnXmjI7ID549RLQI=)
3: gd9FyMAEx2zDcAvRasWsSCt8jII.roa (hash: 3gHwGEwP5km+DCt4+0KzZKC5xkxi0OUUMqCX1cypjtI=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: 8xyzZckFfvty4rWDqY+NUhTAKmEDefWvZb5vlOZpobU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:a7:7a:dd:26:03:fc:71:2a:ee:93:79:9a:26:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Jul 24 03:00:58 2026 GMT
Not After : Jul 25 03:00:58 2026 GMT
Subject: CN=83597172f158d537f21909b4becc5d3fe4fae7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6c:fa:9b:10:21:c3:58:f4:ad:bf:bd:dc:c6:
5b:29:21:68:06:6a:89:24:40:ef:40:f9:9a:14:4c:
11:bd:e1:0a:d2:49:70:39:ee:b8:fd:de:18:64:05:
b2:aa:65:19:2e:8c:bc:e1:13:11:71:69:0f:bd:39:
bf:87:23:e4:7d:3d:62:92:e7:3d:69:db:67:12:75:
8a:c7:4e:cc:f0:88:2e:2d:7a:04:8e:8d:82:25:aa:
13:a8:5c:c4:73:2b:f0:57:14:72:44:91:b6:f2:c4:
56:6f:94:6d:f2:76:a4:6b:77:78:df:13:03:a1:c2:
b7:1d:75:f0:46:50:2d:5f:ce:02:11:cc:99:86:54:
68:24:ec:25:47:eb:89:34:02:77:f8:03:53:74:de:
c4:c8:81:2f:bf:c7:ea:07:a0:b4:24:43:f7:77:c5:
ee:f4:e3:0b:28:19:e2:9d:b2:da:79:72:f9:87:b5:
f2:51:82:7d:c7:0b:bd:82:f6:a8:8f:5a:d2:2f:17:
c5:15:11:af:39:45:9a:da:a3:90:f2:9c:a2:de:80:
41:2d:b2:70:5a:78:d2:42:42:ef:ce:60:7e:af:27:
72:db:df:e9:8b:20:aa:9c:a2:b8:2d:68:f6:1f:28:
84:b5:95:35:10:34:90:19:94:d8:52:83:a6:43:72:
d6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:59:71:72:F1:58:D5:37:F2:19:09:B4:BE:CC:5D:3F:E4:FA:E7:D1
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e7:66:ec:21:bd:dc:d3:6e:be:d9:b2:4b:c9:12:79:46:e9:
e7:52:cc:33:a5:f2:b6:cf:87:a4:e7:97:59:5f:0d:62:3f:3a:
77:54:01:6e:a8:d0:32:55:14:df:97:93:9f:9e:0a:b3:c0:f4:
7e:d4:b9:f9:d2:82:45:13:52:34:bf:d3:99:f5:c0:80:38:0c:
3c:19:26:9b:2d:6f:36:11:ca:25:7e:98:72:b1:a7:34:25:e4:
d4:6a:ce:56:fb:ca:f7:7e:54:7d:f0:bd:c4:9e:d4:b2:33:93:
96:cf:e1:8a:5f:c4:89:d8:6e:24:c0:d5:75:66:bf:20:9f:ff:
2e:f3:c5:da:c7:2f:94:45:18:a5:f0:23:b0:27:e1:f4:35:21:
80:1f:95:e8:e4:dd:f7:00:30:ef:06:8a:7b:44:78:c4:c2:d9:
6c:1e:53:9e:45:c7:17:13:b8:54:c5:75:c2:d7:be:0c:ff:25:
b6:60:e6:46:1f:98:3b:cf:95:6a:5b:21:67:ae:62:46:63:ba:
1d:a3:f1:19:ab:5f:1c:0e:d9:1b:03:4a:18:3d:33:7a:b8:6e:
89:7d:50:b5:ed:dd:50:50:62:e6:39:a7:08:58:48:5d:3e:58:
14:dc:22:4d:97:74:81:14:ae:c2:16:47:9c:22:cd:d2:5e:13:
30:46:8f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:30:40 2026 by rpki-client